Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/ggumxSMtNb_cu8gJQgteLcuxv4A.roa
File:                     ggumxSMtNb_cu8gJQgteLcuxv4A.roa (raw, json)
Hash identifier:          XB3UQjnFJIrhVrjPnVnff7Oe36WqwAyPKSsGYZfIwqc=
Subject key identifier:   82:0B:A6:C5:23:2D:35:BF:DC:BB:C8:09:42:0B:5E:2D:CB:B1:BF:80
Certificate issuer:       /CN=11e5af4c72869209539b1194597b03fa3a4a554a
Certificate serial:       01856D789DD5E662D20827FCD834AD1238A9
Authority key identifier: 11:E5:AF:4C:72:86:92:09:53:9B:11:94:59:7B:03:FA:3A:4A:55:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/ggumxSMtNb_cu8gJQgteLcuxv4A.roa
Signing time:             Sun 01 Jan 2023 13:14:59 +0000
ROA not before:           Sun 01 Jan 2023 13:14:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        193.3.160.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 06:29:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:78:9d:d5:e6:62:d2:08:27:fc:d8:34:ad:12:38:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11e5af4c72869209539b1194597b03fa3a4a554a
        Validity
            Not Before: Jan  1 13:14:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=820ba6c5232d35bfdcbbc809420b5e2dcbb1bf80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:85:66:f6:db:87:53:a3:84:20:22:3c:02:c2:
                    2f:c5:71:6b:36:c3:b1:82:6e:bf:a1:28:c3:64:be:
                    f2:02:57:45:b6:80:9f:80:dc:41:5e:84:cc:1c:e4:
                    e7:c8:7e:8d:54:80:f1:c6:0c:16:f3:8f:79:d8:db:
                    77:48:f6:45:ac:3d:42:db:73:1a:c9:50:4b:5a:8c:
                    85:0e:77:78:ad:5f:51:d8:19:95:43:cf:56:db:4a:
                    ed:d6:b2:47:8c:11:aa:43:c6:a1:df:5a:1b:88:8d:
                    bc:76:af:98:ca:07:4f:d4:5b:3d:9a:f5:fe:18:65:
                    1e:5e:05:f7:09:75:a5:ec:02:09:a2:5b:83:51:68:
                    67:ef:7d:4c:bf:b0:ef:9a:6c:13:36:7d:44:f6:0b:
                    a2:22:f2:7d:c9:02:82:86:21:bc:6c:62:7a:5f:49:
                    40:f5:20:3f:60:8e:63:97:1d:16:ee:26:60:72:3d:
                    c5:e3:f1:85:cb:76:db:9e:4d:4e:56:98:37:92:29:
                    5f:a4:78:22:6d:84:38:07:ee:d4:9d:9e:81:19:9c:
                    e7:82:d1:cd:2a:8c:62:a5:1e:77:c1:18:e9:6e:10:
                    1c:95:1f:ec:5f:16:3c:0d:ca:a7:c5:59:dd:e6:4a:
                    83:fe:9a:21:25:38:c6:ae:ee:72:60:2c:c8:40:0d:
                    7d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:0B:A6:C5:23:2D:35:BF:DC:BB:C8:09:42:0B:5E:2D:CB:B1:BF:80
            X509v3 Authority Key Identifier:
                keyid:11:E5:AF:4C:72:86:92:09:53:9B:11:94:59:7B:03:FA:3A:4A:55:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeWvTHKGkglTmxGUWXsD-jpKVUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/ggumxSMtNb_cu8gJQgteLcuxv4A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/04d708-feea-4e96-94a1-f428b9954ab2/1/EeWvTHKGkglTmxGUWXsD-jpKVUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:77:67:ab:51:6a:a1:20:15:47:20:b4:9b:52:2e:3e:09:70:
         f8:25:fd:1f:b1:98:2f:39:a4:8a:aa:7f:af:89:22:71:2f:b9:
         86:4b:73:ba:6c:b4:5e:3e:98:ad:09:f8:6e:07:43:4c:1f:f7:
         09:df:d0:93:e7:5d:9f:dd:eb:e8:bb:87:72:08:19:1c:60:81:
         05:6b:7d:19:64:9d:eb:18:a4:da:d7:b4:ee:5e:6b:3e:d5:b0:
         9c:6f:77:44:3d:aa:05:51:50:c7:82:31:ed:25:6e:ca:9d:a6:
         10:3c:94:3a:aa:5f:45:5a:13:6a:58:5f:38:ad:6d:f2:94:79:
         38:74:58:1c:93:a5:aa:aa:06:37:4d:0c:15:7d:1d:90:33:98:
         d2:c3:d5:cf:b0:03:33:2c:91:18:23:c4:f4:86:9c:10:51:53:
         35:0d:63:db:cd:40:12:cf:f0:40:3e:5c:33:33:ef:df:8e:88:
         f0:b5:b1:ed:1a:7d:d2:04:20:52:4e:b6:3d:2f:b0:dd:58:02:
         54:31:17:69:48:df:9d:30:55:fb:95:bf:87:c9:38:5d:79:54:
         eb:7c:82:46:a7:28:9a:88:7e:e8:76:24:e9:f2:2b:5e:ea:41:
         7b:30:ef:8b:71:3b:eb:33:c9:01:2b:37:7d:c6:ae:6e:0b:49:
         bb:de:20:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:56 2024 by rpki-client on console-fra.rpki-client.org