Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/m-g5ZtaUZW6BaScyh-iR83oc3Ts.roa
File:                     m-g5ZtaUZW6BaScyh-iR83oc3Ts.roa (raw, json)
Hash identifier:          EnZP4HnfZiPmg3enThvKbEePkAEiiHtCg+91VKG9gwQ=
Subject key identifier:   9B:E8:39:66:D6:94:65:6E:81:69:27:32:87:E8:91:F3:7A:1C:DD:3B
Certificate issuer:       /CN=68d24addcc3d5b77a099a907122252a47c8f6310
Certificate serial:       01856D4ABDB3D4E9EE5B252909C78A4569EE
Authority key identifier: 68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/m-g5ZtaUZW6BaScyh-iR83oc3Ts.roa
Signing time:             Sun 01 Jan 2023 12:24:52 +0000
ROA not before:           Sun 01 Jan 2023 12:24:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200504
IP address blocks:        178.183.21.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:29:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:4a:bd:b3:d4:e9:ee:5b:25:29:09:c7:8a:45:69:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68d24addcc3d5b77a099a907122252a47c8f6310
        Validity
            Not Before: Jan  1 12:24:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9be83966d694656e8169273287e891f37a1cdd3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:65:42:65:d4:20:32:a6:dd:81:d1:36:be:d4:
                    73:25:0a:f8:17:d5:e7:2c:2a:91:69:ec:52:21:f3:
                    3a:76:c6:2b:d5:a8:8a:1a:72:b0:1a:9b:ab:65:f1:
                    0a:69:82:6a:9c:f2:34:6f:ef:2e:57:aa:c8:c5:40:
                    4f:4a:3b:90:bb:96:e2:75:6a:bd:50:9e:c1:36:84:
                    1a:2d:5b:c3:48:e2:74:a1:c3:d9:90:d0:50:50:9f:
                    32:ee:46:0b:7b:d4:5f:09:87:24:19:ed:7f:cf:fb:
                    bd:69:26:07:a3:11:fc:3f:ff:ab:ad:a4:c3:13:51:
                    4f:ac:ea:89:fc:33:9f:10:b1:8b:de:c2:46:d9:fb:
                    22:30:f9:3a:d7:1b:7a:81:fb:95:7a:8b:d0:e4:3f:
                    20:3e:a8:68:2c:2f:c8:df:b4:2a:4b:fa:eb:51:84:
                    72:e9:d5:28:37:34:6d:79:55:a5:04:39:c9:5b:12:
                    a7:17:03:e9:08:73:1c:1f:b4:89:d9:35:96:65:1b:
                    47:91:bf:de:ac:38:86:5a:85:51:83:19:9a:b1:56:
                    a0:4a:eb:44:58:ec:86:d5:20:7c:8e:28:8c:1d:37:
                    53:9f:8e:fe:f4:0d:d6:6e:76:45:9c:21:7c:4f:af:
                    4f:10:7b:a5:93:22:49:d6:8a:e1:c2:ab:0d:59:54:
                    27:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E8:39:66:D6:94:65:6E:81:69:27:32:87:E8:91:F3:7A:1C:DD:3B
            X509v3 Authority Key Identifier:
                keyid:68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/m-g5ZtaUZW6BaScyh-iR83oc3Ts.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.183.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:6f:3c:4b:25:a2:2f:6a:3b:b1:50:e2:bb:76:51:0d:6c:c4:
         0a:82:13:df:77:ac:2e:70:92:36:e1:1c:f9:e3:15:d9:da:07:
         bb:0d:9e:29:f7:f7:44:98:75:85:f3:cf:bd:39:ad:85:d4:d5:
         b4:31:dc:14:e3:9e:4f:ea:f4:b3:14:28:4a:fa:ad:d7:43:1c:
         ec:56:66:89:1d:e8:9c:2b:1d:9e:f5:22:c5:23:d2:da:df:fd:
         49:28:a4:8f:6c:94:a2:04:2e:45:53:30:a2:14:46:ca:b4:8a:
         5f:2e:fc:f9:81:b3:a4:00:7a:73:2d:55:76:dc:7a:cf:df:f6:
         6b:6e:8b:b6:dd:64:dc:26:6d:36:af:e7:d0:dc:0c:fc:50:e1:
         a3:30:80:9d:ef:54:0e:fc:1b:25:a5:db:39:9b:5d:5a:33:fe:
         0c:2b:3d:15:54:69:b4:79:fb:f5:5d:c6:e4:40:3d:e2:be:a4:
         c5:a9:d5:8d:7f:82:bf:02:8c:5d:17:56:03:ab:97:b3:6a:f8:
         2d:f0:e3:93:a7:d9:d6:17:f3:81:b9:ee:ef:30:17:a2:de:c8:
         89:cd:48:73:51:0c:dc:8c:a1:30:a6:af:91:a0:3d:65:fe:4f:
         6f:07:2e:49:7c:9d:df:3e:8b:94:22:cb:21:df:d0:a2:ca:3b:
         3f:7a:d3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:26 2024 by rpki-client on console-ams.rpki-client.org