Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/uiwVpKKuU_-gxDff6kVLcPx47Po.roa
File:                     uiwVpKKuU_-gxDff6kVLcPx47Po.roa (raw, json)
Hash identifier:          Pu+7ylA0JrOD4mV3OVuyTWe39ScwE9R/B8FGgMX9n9U=
Subject key identifier:   BA:2C:15:A4:A2:AE:53:FF:A0:C4:37:DF:EA:45:4B:70:FC:78:EC:FA
Certificate issuer:       /CN=9aee15c33de358938d6900a1b3c14480a389e85b
Certificate serial:       018A6462656D4DC62F850E1C4A148BE1148F
Authority key identifier: 9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/uiwVpKKuU_-gxDff6kVLcPx47Po.roa
Signing time:             Tue 05 Sep 2023 08:08:04 +0000
ROA not before:           Tue 05 Sep 2023 08:08:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207713
IP address blocks:        185.105.47.0/24 maxlen: 24
                          185.77.138.0/24 maxlen: 24
                          185.77.139.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 19 Sep 2023 10:29:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:64:62:65:6d:4d:c6:2f:85:0e:1c:4a:14:8b:e1:14:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aee15c33de358938d6900a1b3c14480a389e85b
        Validity
            Not Before: Sep  5 08:08:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ba2c15a4a2ae53ffa0c437dfea454b70fc78ecfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:66:4e:7c:77:7f:34:98:9c:16:99:3c:27:70:
                    81:f6:d6:92:75:76:fc:06:5c:c6:74:0c:cf:68:c6:
                    e8:86:f5:af:94:79:25:1e:2d:ba:04:5c:f0:e5:14:
                    9b:32:61:d5:b9:1c:25:fe:01:39:fb:a2:9d:ad:01:
                    6f:a3:a2:11:42:f2:2d:25:c8:7a:4a:f8:02:8b:6b:
                    af:86:86:92:d6:84:f9:6a:3a:67:3c:9f:aa:15:dc:
                    10:2b:b5:fe:6f:8e:41:98:b1:86:92:b8:a9:3d:6b:
                    d0:c3:b6:6d:4e:70:2d:96:47:ab:67:68:b3:29:5b:
                    ce:42:a2:71:05:0e:34:6b:40:2a:1b:e9:20:51:b9:
                    10:aa:6a:9c:c7:2d:12:5d:bb:14:b0:86:1d:4f:f8:
                    fe:21:6c:12:73:10:0f:b2:75:a4:e9:81:e5:17:a2:
                    6b:40:83:ad:49:05:a3:f4:13:a5:7c:77:b6:38:52:
                    0b:8c:64:d7:aa:3f:19:21:1e:79:ba:3d:7c:2e:84:
                    2c:3b:4f:30:34:c9:3c:23:dc:db:ea:f1:79:8a:a4:
                    43:fb:7b:ea:dc:ee:d6:8d:54:cf:90:d1:e1:e2:18:
                    e9:ae:79:9d:de:ad:aa:4d:2e:7b:08:b7:8b:fa:42:
                    8e:50:3b:bb:56:bc:16:95:92:e5:44:13:6b:ec:0f:
                    d5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:2C:15:A4:A2:AE:53:FF:A0:C4:37:DF:EA:45:4B:70:FC:78:EC:FA
            X509v3 Authority Key Identifier:
                keyid:9A:EE:15:C3:3D:E3:58:93:8D:69:00:A1:B3:C1:44:80:A3:89:E8:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/uiwVpKKuU_-gxDff6kVLcPx47Po.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/72f77f-76ab-4e79-a062-6ee534d92e52/1/mu4Vwz3jWJONaQChs8FEgKOJ6Fs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.77.138.0/23
                  185.105.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:97:58:88:ab:27:03:e6:8e:ee:f2:56:2b:ae:29:f4:8f:14:
         95:2b:a3:c8:a4:f8:ac:bb:90:ce:76:11:eb:34:c2:6a:a9:09:
         3b:ef:31:1a:19:51:df:8f:ad:d2:3c:f3:ec:d4:67:ae:ff:76:
         09:c9:3a:41:bd:75:12:18:0c:47:e5:03:d1:5e:64:f5:22:38:
         1b:22:31:c4:de:78:c1:2d:83:fe:c0:52:40:20:65:92:c6:20:
         e2:e8:17:bc:69:73:0a:26:33:4a:c1:f6:7c:2c:c7:df:34:b4:
         0c:43:d3:93:76:06:85:ca:39:65:31:97:be:ab:99:93:44:a5:
         d2:ee:d9:54:b7:0b:6d:d0:73:70:7d:a9:d3:b3:18:2e:33:16:
         f6:7e:6b:f8:18:41:c7:fb:2c:f9:4d:83:94:50:55:02:3c:98:
         fd:f6:52:d3:51:d5:c9:56:8f:42:90:7d:74:66:b5:a7:c0:21:
         f0:f9:dd:f9:3a:20:31:9f:d8:95:70:7c:10:9e:f0:16:c1:63:
         73:7a:c0:0a:51:2b:78:99:4c:b2:7f:d5:f6:a7:77:3d:f0:4b:
         ba:f9:f9:d1:94:a8:89:9f:df:22:1e:fc:9f:8d:5a:7a:22:1d:
         4a:2a:63:4b:8c:54:8b:5c:75:5c:76:c3:bd:2a:12:32:20:b1:
         88:27:a7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:59 2024 by rpki-client on console-fra.rpki-client.org