Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/7Is6Sn1JKwmYdSqxyows8YJbMnc.roa
File:                     7Is6Sn1JKwmYdSqxyows8YJbMnc.roa (raw, json)
Hash identifier:          HNE0H3UiC3iAIvDxlwR1he/sH28WDghFD/qliai75a8=
Subject key identifier:   EC:8B:3A:4A:7D:49:2B:09:98:75:2A:B1:CA:8C:2C:F1:82:5B:32:77
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       018B1A241B1C613CCF467D23F7E350E07417
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/7Is6Sn1JKwmYdSqxyows8YJbMnc.roa
Signing time:             Tue 10 Oct 2023 15:10:55 +0000
ROA not before:           Tue 10 Oct 2023 15:10:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205320
IP address blocks:        86.107.50.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 14 Oct 2023 09:20:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:1a:24:1b:1c:61:3c:cf:46:7d:23:f7:e3:50:e0:74:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Oct 10 15:10:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ec8b3a4a7d492b0998752ab1ca8c2cf1825b3277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:24:33:77:f6:5a:8f:74:ba:42:8e:b8:80:10:
                    87:65:28:f8:18:9e:3b:74:e4:75:a1:ab:a5:d4:3d:
                    a6:ae:a1:7e:cc:bb:10:34:f6:95:51:5f:00:a0:aa:
                    63:07:56:3d:08:a7:cb:8b:43:98:e5:64:69:e4:7a:
                    09:57:86:53:c8:e6:ba:60:60:29:49:68:fb:c3:a5:
                    0e:77:70:ce:b4:fb:a4:e9:0f:f3:c1:fa:7d:f1:74:
                    f5:90:be:87:43:be:ae:65:aa:d4:a6:a2:88:91:be:
                    a7:85:5d:4d:5a:a5:c7:2d:e0:c6:ff:10:88:96:14:
                    e2:3c:8f:89:c6:e1:5b:e7:e4:7d:3d:76:7d:df:d6:
                    65:a6:be:2a:5e:19:60:26:77:ca:e0:31:05:8c:03:
                    d5:6b:c6:a5:6a:95:30:3e:ff:1b:74:f8:ce:39:6d:
                    fb:88:73:d3:66:73:2d:e9:ff:27:51:c2:bd:51:6d:
                    98:2d:da:0f:b9:48:ab:ab:e1:23:c5:57:07:17:3e:
                    f2:75:af:05:6a:95:5c:36:72:df:a5:6e:1c:a2:47:
                    37:17:08:0b:0e:da:15:a9:2a:86:f6:02:a3:8a:63:
                    55:2c:88:4a:7b:95:99:01:de:bc:43:e5:a0:93:80:
                    ea:d9:f6:47:0a:6d:c8:b5:96:94:fd:cd:8b:3b:23:
                    04:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:8B:3A:4A:7D:49:2B:09:98:75:2A:B1:CA:8C:2C:F1:82:5B:32:77
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/7Is6Sn1JKwmYdSqxyows8YJbMnc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.107.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:7e:a1:d3:55:08:d6:63:99:e8:b3:20:bf:02:f1:8d:65:68:
         f9:0a:e8:2f:a6:0a:61:56:e2:47:1f:f1:a7:e6:48:c1:92:6c:
         38:bc:6f:fe:d4:03:43:f3:26:51:0c:cc:4f:c9:c1:25:49:6f:
         12:b0:f7:c4:71:b6:24:29:a3:c8:71:4b:bb:b9:9f:a6:a3:95:
         bf:ec:51:f9:14:29:33:1a:4f:07:52:f5:1a:25:39:ac:f7:0b:
         2b:b7:8f:54:72:78:3d:58:a6:0b:c4:03:c8:06:c6:11:11:9d:
         f2:cc:ec:73:80:16:96:b1:aa:78:c5:85:25:8f:05:25:18:f8:
         63:a9:ad:e8:11:39:f2:84:eb:f2:d1:0c:2b:3d:2f:a6:8b:6a:
         a3:c8:37:d1:bf:c1:51:62:f3:01:ce:8a:2b:15:49:9c:27:d2:
         10:4f:7a:55:1d:01:b3:d1:ff:b3:1e:e7:e7:5f:ed:d3:b6:24:
         ca:aa:97:ab:76:58:23:df:d5:a0:43:b2:6d:96:b0:3b:88:aa:
         56:7e:2e:99:55:78:c0:ff:67:df:32:08:7a:10:6e:fd:03:68:
         07:59:20:da:2f:56:35:d7:7a:36:0a:51:f0:0b:95:7a:46:d1:
         74:00:5b:9b:20:03:44:70:2b:04:cc:61:ff:90:3c:0a:f2:d9:
         1f:90:f1:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org