Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/vmlELvU2ufd_uLNZCE1S4DlqSzc.roa
File:                     vmlELvU2ufd_uLNZCE1S4DlqSzc.roa (raw, json)
Hash identifier:          intrYjDUrEvlAjTS1fkLzjB954Qyi6D9CBCAmqr+7fM=
Subject key identifier:   BE:69:44:2E:F5:36:B9:F7:7F:B8:B3:59:08:4D:52:E0:39:6A:4B:37
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       0187E5EA7EE6B96F5965B6409121F696CDA1
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/vmlELvU2ufd_uLNZCE1S4DlqSzc.roa
Signing time:             Thu 04 May 2023 08:39:23 +0000
ROA not before:           Thu 04 May 2023 08:39:23 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15731
IP address blocks:        176.57.51.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 06 Jun 2023 06:37:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:e5:ea:7e:e6:b9:6f:59:65:b6:40:91:21:f6:96:cd:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: May  4 08:39:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=be69442ef536b9f77fb8b359084d52e0396a4b37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1e:d4:b3:90:e2:8a:b7:5b:9f:ea:0b:2a:7a:
                    88:f6:92:ef:e7:42:b5:6f:1d:75:94:8f:72:48:08:
                    13:86:39:09:2e:8f:03:d9:7c:8b:d8:6e:48:33:34:
                    77:d7:45:9b:9d:c5:06:b4:fb:12:25:e4:9f:d9:3c:
                    29:3a:9f:d7:d5:4e:14:42:37:eb:1a:93:27:f2:46:
                    a7:eb:c4:0e:95:ac:d8:3f:ce:f2:8c:be:b6:92:3e:
                    0b:71:77:90:ec:2a:23:d7:31:cf:f1:a5:3c:e6:c0:
                    e2:ef:a8:aa:29:44:6b:94:2b:f9:7d:c0:ae:53:e9:
                    a2:95:9f:3f:c6:cb:17:f0:ee:44:29:ba:04:37:c4:
                    85:a3:23:ce:91:6a:30:8d:aa:de:92:0b:51:8f:17:
                    60:ba:3b:f3:c6:4d:5b:39:05:2d:a7:57:7d:1f:c4:
                    0f:15:77:d0:53:41:e6:85:af:94:f2:88:ec:35:f9:
                    e7:bf:64:00:6e:a8:da:86:34:03:3e:70:a5:f6:82:
                    81:49:29:b1:cb:53:66:3e:11:05:dc:5c:2d:31:39:
                    69:0e:8e:b2:11:c5:79:d6:32:bc:95:c9:4b:6c:d2:
                    66:e9:b5:81:7e:3c:4b:35:bb:39:b1:fc:c5:f6:4f:
                    eb:36:fb:95:7c:2f:2e:dd:e7:36:ec:0e:14:5b:18:
                    fd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:69:44:2E:F5:36:B9:F7:7F:B8:B3:59:08:4D:52:E0:39:6A:4B:37
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/vmlELvU2ufd_uLNZCE1S4DlqSzc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.57.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:3f:6d:7c:fc:11:21:b1:7f:55:c0:7e:37:8f:53:89:f3:11:
         ba:24:63:67:fe:00:2b:2b:81:df:19:23:44:a6:2b:35:ae:65:
         a4:65:91:5c:f6:da:63:85:58:41:b7:bc:ec:6d:69:e0:80:c1:
         d5:50:77:b4:d8:ac:e3:64:ae:b0:13:bf:81:2e:2b:e2:6a:1f:
         20:5d:3b:ef:a4:64:04:f4:2f:0b:72:51:86:ac:4e:42:f5:56:
         d7:a4:a6:ea:56:8e:02:9f:c1:b2:90:52:57:c3:93:01:fb:62:
         3e:77:4f:14:3c:64:24:91:d7:26:f9:2a:fa:d7:19:c5:ee:c1:
         2e:0e:f0:05:15:b7:58:01:b1:7f:6c:8d:ae:99:0b:40:7d:c9:
         bc:5f:c8:61:3f:de:91:3b:2d:77:41:9f:5f:13:18:85:0a:70:
         03:f5:7e:17:33:e5:0c:9b:94:12:18:c3:af:39:4d:c4:99:52:
         e4:7a:e2:cc:1a:19:5e:a8:ac:57:24:11:d5:fd:3c:b3:7c:24:
         5e:14:08:ed:11:95:9c:10:7c:72:8e:45:2b:c0:3b:aa:b9:ad:
         47:a9:c3:4e:35:04:4e:30:e2:19:57:47:34:5b:e0:ea:7c:8f:
         74:79:b3:f3:0f:a5:ca:94:60:92:1d:38:4b:36:41:b1:d0:82:
         26:6e:63:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org