Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/rEdtMcpSN_G2gdEeRAsHslHP1EM.roa
File:                     rEdtMcpSN_G2gdEeRAsHslHP1EM.roa (raw, json)
Hash identifier:          5TQ8BHQsyPtDqE6NmINaXqq+P0pP8PZTem/0RfNEloA=
Subject key identifier:   AC:47:6D:31:CA:52:37:F1:B6:81:D1:1E:44:0B:07:B2:51:CF:D4:43
Certificate issuer:       /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial:       0187D93EC9E95F2A5105F6A06BE476AF45A5
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/rEdtMcpSN_G2gdEeRAsHslHP1EM.roa
Signing time:             Mon 01 May 2023 21:36:23 +0000
ROA not before:           Mon 01 May 2023 21:36:23 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208476
IP address blocks:        185.244.31.0/24 maxlen: 24
                          185.244.26.0/24 maxlen: 24
                          194.5.97.0/24 maxlen: 24
                          194.5.99.0/24 maxlen: 24
                          87.237.165.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 16 Nov 2023 13:25:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:d9:3e:c9:e9:5f:2a:51:05:f6:a0:6b:e4:76:af:45:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
        Validity
            Not Before: May  1 21:36:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ac476d31ca5237f1b681d11e440b07b251cfd443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:be:45:6b:5c:08:a5:10:87:3d:b6:19:dc:40:
                    97:5b:2c:ff:f5:f9:1b:ef:e2:a4:2a:fa:af:5f:de:
                    fd:da:1c:5d:01:5e:57:71:ec:ad:7b:8f:2b:2b:7c:
                    2b:f5:a6:4f:09:5a:cd:0f:0c:0d:f8:be:22:49:37:
                    d3:a5:44:86:6f:26:73:a4:61:eb:c7:8d:f0:ba:44:
                    99:f4:fb:01:23:84:10:b5:5d:2e:b1:17:c9:fe:e7:
                    c6:e3:bf:6c:6d:b6:e5:89:a0:82:3a:da:15:f1:83:
                    56:92:6e:5e:9e:09:1c:2d:0b:7c:e1:29:f0:fc:0a:
                    8d:1b:03:31:bd:64:50:41:7b:b9:9f:6e:4d:bd:d5:
                    e2:f0:4a:00:c7:df:6e:21:9f:12:a2:c0:f8:17:83:
                    fc:fb:eb:e5:3f:bb:e4:60:c5:03:50:af:e5:0d:a4:
                    10:e6:3a:60:5d:4c:74:2b:24:b1:df:70:15:ea:4c:
                    b8:1f:cc:0a:ba:f9:ba:34:56:8a:94:89:fd:a2:f1:
                    2e:6a:b9:8e:e9:e4:7b:6a:7a:6b:df:ce:ad:78:99:
                    9b:7d:67:79:0a:3d:80:3b:2a:0d:81:37:e3:99:41:
                    99:44:b4:61:a6:88:18:b6:de:45:32:83:7e:21:f3:
                    2c:a7:60:7c:ad:72:84:68:4f:69:2b:85:8d:b2:4e:
                    7f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:47:6D:31:CA:52:37:F1:B6:81:D1:1E:44:0B:07:B2:51:CF:D4:43
            X509v3 Authority Key Identifier:
                keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/rEdtMcpSN_G2gdEeRAsHslHP1EM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.237.165.0/24
                  185.244.26.0/24
                  185.244.31.0/24
                  194.5.97.0/24
                  194.5.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:2e:00:78:d3:42:e9:27:2b:e4:bc:ec:a9:73:19:33:b0:94:
         dd:b0:97:ee:2a:47:84:92:6f:d3:13:f9:33:73:ba:ec:ac:a4:
         65:c4:d4:7a:4d:2c:fb:e2:f6:18:ba:7f:d3:d4:68:f4:e9:cf:
         91:35:b7:f7:8d:10:3d:6a:e8:13:9f:2f:2e:7e:e4:da:86:3c:
         f4:16:de:99:aa:d9:1e:ed:53:ce:eb:ea:94:e7:df:f1:23:95:
         de:1e:1d:b4:d9:bb:4c:f5:9f:5e:f5:70:65:f2:86:a6:52:3a:
         44:39:52:7e:62:e3:86:70:0e:b5:67:0d:e8:d1:4f:81:dd:c8:
         83:f7:16:8d:5b:09:7a:58:94:f5:6e:2d:9f:a0:fc:12:a5:b2:
         b0:d8:ad:8d:75:b8:0c:4a:85:a5:5b:13:00:6b:9a:7c:9a:b5:
         57:6a:19:c4:79:92:9a:01:26:1f:3b:f4:91:e6:e5:c1:43:52:
         ac:9d:d4:1e:06:1c:f0:61:10:51:de:b4:8e:f8:7c:67:8a:6b:
         02:58:7e:3c:42:8e:9f:d8:15:1c:d4:ff:09:1d:dd:94:13:63:
         39:e5:d2:8e:a3:82:71:08:bd:ec:f7:a2:18:fe:3c:c4:25:b6:
         f7:79:47:d5:8c:65:fc:dd:b2:4d:90:1c:69:ec:e5:f9:ab:06:
         75:90:c8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:39 2024 by rpki-client on console-fra.rpki-client.org