Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/J4THxgXM4EkeYYjY0GzMn7pJDW0.roa
File:                     J4THxgXM4EkeYYjY0GzMn7pJDW0.roa (raw, json)
Hash identifier:          bir5IXsXM/RZYSg0AySMV50b4TEAMy6qhGLc6EXdpKY=
Subject key identifier:   27:84:C7:C6:05:CC:E0:49:1E:61:88:D8:D0:6C:CC:9F:BA:49:0D:6D
Certificate issuer:       /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial:       0187EBD915A2601059072F701FF1E2394EA1
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/J4THxgXM4EkeYYjY0GzMn7pJDW0.roa
Signing time:             Fri 05 May 2023 12:18:05 +0000
ROA not before:           Fri 05 May 2023 12:18:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207967
IP address blocks:        193.109.160.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 02:29:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:eb:d9:15:a2:60:10:59:07:2f:70:1f:f1:e2:39:4e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
        Validity
            Not Before: May  5 12:18:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2784c7c605cce0491e6188d8d06ccc9fba490d6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:af:75:3f:1a:59:44:df:3a:9f:58:e2:05:63:
                    73:d8:57:4f:48:72:6b:53:22:87:b6:bc:97:a9:63:
                    35:0e:57:f1:4f:3d:39:e8:44:04:89:68:6d:d3:95:
                    57:11:cd:a9:32:7d:bb:5a:41:4a:c5:4a:e2:14:19:
                    92:82:cb:ba:cc:d2:78:d5:17:52:70:52:62:7f:f0:
                    fa:70:7f:0d:83:e1:d3:23:ea:13:31:26:b2:15:5e:
                    18:08:be:12:06:a0:86:9e:0b:f2:e5:81:8d:32:05:
                    38:55:a1:c3:9f:66:19:09:a3:46:4b:00:12:c7:99:
                    7e:55:d0:00:26:97:bf:2a:fb:3c:3a:49:bf:f2:6b:
                    c5:56:2e:fe:df:a1:c4:29:88:36:3f:c9:3d:7d:22:
                    f2:2e:4e:de:c4:f2:45:cb:e4:a9:07:d4:6f:38:b3:
                    94:cd:da:ab:66:bc:ed:35:b7:9e:6b:62:10:65:7e:
                    58:64:3f:52:f1:17:02:17:a3:08:76:72:02:ce:2f:
                    0f:1f:f6:39:04:03:18:b7:9e:56:d5:6e:54:55:b6:
                    68:cd:8d:6e:7b:ee:ec:e3:f6:b1:7f:eb:88:84:67:
                    f0:17:63:6f:46:3a:b4:db:8e:76:43:bb:3c:4c:b1:
                    6b:6b:71:20:8d:33:89:ff:56:4f:37:fe:f1:4d:99:
                    86:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:84:C7:C6:05:CC:E0:49:1E:61:88:D8:D0:6C:CC:9F:BA:49:0D:6D
            X509v3 Authority Key Identifier:
                keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/J4THxgXM4EkeYYjY0GzMn7pJDW0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.109.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:9a:03:9f:6b:38:41:4c:6f:17:13:29:4e:34:c0:ce:a6:fe:
         fd:0a:08:91:f9:ac:86:a2:63:ab:2f:f2:eb:a8:d1:21:a8:13:
         1b:08:ab:7e:fb:13:51:1a:db:73:31:bb:9d:cb:45:fa:bc:08:
         4d:07:5b:68:c6:81:a5:f9:29:2d:d4:95:3a:5a:78:42:73:f7:
         d4:1e:b1:54:b3:73:57:4f:30:ad:55:4b:e4:7b:c5:ab:a3:1e:
         fc:d2:92:78:5d:b0:97:73:ef:17:42:79:6b:f1:06:9f:29:41:
         7b:53:ec:b5:aa:fc:80:9e:56:cf:47:00:9e:1f:cd:dc:52:a2:
         f2:83:b7:d9:2b:eb:65:93:4f:bc:a3:8c:58:06:ef:5f:2b:84:
         eb:2b:0a:eb:59:e9:0d:1e:97:a3:b6:aa:0e:8c:47:46:dd:80:
         66:45:f0:87:8b:fe:4d:ad:22:ca:3b:f7:58:29:dc:28:f7:68:
         92:bb:95:85:7a:3a:e3:4e:a0:35:3f:9c:ce:a3:e4:f6:9c:fb:
         8f:52:0c:50:4d:62:f1:6f:30:ea:e5:5a:f0:07:13:a8:b6:6c:
         86:62:51:be:9d:b2:a4:dd:14:4b:70:19:15:f1:06:90:d4:9a:
         a0:56:e8:f6:dc:43:a2:a1:01:3a:3b:9f:0b:cb:79:7d:28:43:
         ca:3d:7f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:25 2024 by rpki-client on console-ams.rpki-client.org