Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/C0PpBDdYOUOIZrZOdnWPP_yY4Yo.roa
File:                     C0PpBDdYOUOIZrZOdnWPP_yY4Yo.roa (raw, json)
Hash identifier:          jCAs995dG2mJn/BKS3JsaBn8Bsuz18cTfIBUQVUiff8=
Subject key identifier:   0B:43:E9:04:37:58:39:43:88:66:B6:4E:76:75:8F:3F:FC:98:E1:8A
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       018A670976152BDF7704991700337CCB57F1
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/C0PpBDdYOUOIZrZOdnWPP_yY4Yo.roa
Signing time:             Tue 05 Sep 2023 20:29:47 +0000
ROA not before:           Tue 05 Sep 2023 20:29:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203377
IP address blocks:        86.107.50.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 06 Oct 2023 05:11:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:67:09:76:15:2b:df:77:04:99:17:00:33:7c:cb:57:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Sep  5 20:29:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0b43e904375839438866b64e76758f3ffc98e18a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b9:9d:2e:13:6c:ae:b9:b5:2d:53:d1:2c:ce:
                    20:fb:cf:16:af:28:83:aa:e4:fb:6b:f9:56:28:2e:
                    30:5f:9e:16:93:51:93:85:6c:c0:1f:ef:61:2d:bc:
                    59:13:90:d5:0f:a7:f2:e4:b3:80:4a:e9:40:1f:4f:
                    04:94:9c:ad:a3:1d:63:f6:ab:57:55:ae:a8:1b:a5:
                    30:96:f7:1b:fc:32:d5:cb:7f:d8:e3:4f:f2:15:30:
                    a7:18:71:b3:66:27:d1:1c:ba:96:e7:25:04:3e:f3:
                    76:79:54:be:cb:ca:aa:a5:da:aa:f8:0a:b9:62:4c:
                    19:be:4a:7c:4b:d2:55:b4:0c:a9:f1:19:9c:f7:d2:
                    bc:67:1a:63:2e:22:a8:d2:ec:41:d2:a7:dc:86:70:
                    3a:a0:24:bf:38:de:74:73:45:64:fa:37:f5:67:cd:
                    31:d3:60:7c:c4:f0:d8:f1:2a:49:1a:64:40:e9:ae:
                    37:23:2d:ac:a4:d2:9e:71:2c:92:c7:d0:f4:b7:8a:
                    e3:f6:bf:9e:50:ee:05:51:bf:b2:71:2c:44:52:33:
                    b7:a8:3a:a3:e4:4f:1f:07:ad:12:c9:02:1f:02:0b:
                    29:2c:e9:3b:0f:ca:b3:8b:3d:e1:2c:a3:71:79:fa:
                    65:d0:d8:bf:ad:47:c7:2b:da:b9:f1:05:6c:f2:ab:
                    db:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:43:E9:04:37:58:39:43:88:66:B6:4E:76:75:8F:3F:FC:98:E1:8A
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/C0PpBDdYOUOIZrZOdnWPP_yY4Yo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.107.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:b4:ac:7f:1c:cd:2e:f3:52:8e:a6:5a:fd:1c:7b:43:7a:92:
         e2:fc:73:99:d4:61:dd:14:d2:cb:57:49:ff:8c:88:08:3a:1a:
         2f:e4:62:88:c5:30:e7:21:45:f6:87:09:e9:6b:83:7f:f7:35:
         1c:d0:fc:5d:b2:37:35:61:4b:06:41:8b:62:a7:f9:94:fc:68:
         7f:fd:c6:95:d9:05:d6:3d:c3:3a:ab:c9:b4:2c:5c:90:40:08:
         41:09:fd:d3:73:14:05:5d:6b:96:06:70:c5:8f:c1:0c:6f:68:
         0c:34:b1:94:90:3b:a0:00:f9:bb:1f:40:e2:8e:0c:00:42:f0:
         02:93:1b:75:bd:1f:1b:49:e3:3d:1f:65:83:58:5b:b9:70:54:
         a0:b8:7f:0f:7a:a1:a9:82:d7:b3:06:b1:4f:80:f4:41:64:e7:
         a0:13:36:6f:f7:d9:88:43:51:bc:d9:e2:db:88:ca:61:9b:0c:
         b8:c4:e9:d3:cc:72:16:ab:82:1a:07:ea:11:e1:72:18:22:68:
         e9:bb:7c:07:1e:7e:42:0b:8f:25:b4:4c:95:62:36:f9:68:35:
         43:5c:8c:c6:ca:44:95:20:0c:e5:e3:49:03:1b:24:5a:52:6c:
         c2:9b:83:80:8d:2c:4c:ca:ce:4e:f5:66:54:ec:9c:84:68:2f:
         a7:bd:1a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org