Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/uWBZ_asTIzYq5ggplN3iovqmGGc.roa
File:                     uWBZ_asTIzYq5ggplN3iovqmGGc.roa (raw, json)
Hash identifier:          GaGj0bNM2LYbiVe09B6AFRG4z4VEesBa9J/4z34LKJw=
Subject key identifier:   B9:60:59:FD:AB:13:23:36:2A:E6:08:29:94:DD:E2:A2:FA:A6:18:67
Certificate issuer:       /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial:       0187EBD91557EBC3C9928B8E0402BC5D18C0
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/uWBZ_asTIzYq5ggplN3iovqmGGc.roa
Signing time:             Fri 05 May 2023 12:18:05 +0000
ROA not before:           Fri 05 May 2023 12:18:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7018
IP address blocks:        193.109.160.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 02:29:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:eb:d9:15:57:eb:c3:c9:92:8b:8e:04:02:bc:5d:18:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
        Validity
            Not Before: May  5 12:18:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b96059fdab1323362ae6082994dde2a2faa61867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:19:49:89:df:af:a7:b6:21:64:56:75:68:0a:
                    01:d1:58:a1:aa:41:7b:63:99:aa:a2:38:77:b2:a9:
                    ab:e4:98:a6:0b:0b:ff:0d:97:71:f9:1e:36:9d:b7:
                    bf:cb:1e:c8:9c:e8:1e:24:8b:46:bb:3a:d6:da:18:
                    08:98:dd:91:bd:9c:3c:2d:ad:22:2f:64:e0:96:cb:
                    a7:d5:36:9e:05:5d:a1:55:39:8a:99:11:98:f2:db:
                    9e:16:97:a3:d9:7c:7a:fc:7d:8d:73:bd:28:dc:ac:
                    d7:69:af:53:52:c0:bc:a5:31:a0:10:8e:de:be:3b:
                    c5:a7:8a:cb:98:b3:16:d1:76:07:59:1b:fd:05:23:
                    cb:00:41:2f:22:ed:cb:93:e8:5e:8f:09:fe:36:8c:
                    1e:ce:c8:0e:eb:3c:2b:6a:83:9e:ea:00:51:a0:ab:
                    bf:e2:a9:fc:2a:b4:62:8a:a4:99:f7:5a:6a:37:ff:
                    9f:d6:b8:90:f0:14:21:98:24:a9:1b:ca:65:0c:79:
                    f7:82:c0:a6:96:ed:3d:98:4e:d9:28:5f:e3:25:ce:
                    b3:c5:fe:81:8d:6e:4d:ac:45:4d:c9:da:72:7b:4d:
                    29:f3:a0:4b:5c:18:e4:44:33:83:7f:a0:69:04:61:
                    28:ec:f3:ab:75:3a:bd:a9:9e:35:02:eb:9e:88:44:
                    c3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:60:59:FD:AB:13:23:36:2A:E6:08:29:94:DD:E2:A2:FA:A6:18:67
            X509v3 Authority Key Identifier:
                keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/uWBZ_asTIzYq5ggplN3iovqmGGc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.109.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:43:ed:65:03:39:37:7a:4e:7a:56:ae:64:5a:f0:28:fa:73:
         e8:45:ef:b4:69:0a:42:dd:60:42:64:8b:6b:8d:89:19:55:e4:
         28:fd:94:c2:7a:e7:5a:a4:48:88:e4:03:8e:35:60:e1:4e:c9:
         cb:5f:34:30:c1:b5:5f:88:b1:27:31:5c:d1:00:66:4c:cb:cd:
         52:0f:59:26:eb:3b:6e:0e:54:2e:93:7c:49:03:17:b9:a0:46:
         a2:91:f9:78:78:0e:98:c9:55:49:e6:8e:ae:50:ec:d4:d0:1a:
         ba:a8:81:dc:8a:f4:73:cf:b1:54:7a:48:24:d0:15:55:4a:83:
         73:32:da:c8:bf:2a:91:a4:fb:bb:14:a2:5c:48:8d:6c:75:e5:
         31:02:fd:d4:92:b9:b4:e6:6b:4d:22:a0:a3:f8:da:59:b2:59:
         20:71:b7:56:d8:ca:2e:84:52:16:93:a8:71:81:f7:64:07:a4:
         45:72:9a:3a:be:bb:16:da:9b:8f:f7:b7:f4:06:44:a9:ff:2e:
         61:b4:4a:ba:42:84:3b:6f:30:5d:3a:70:74:29:5e:76:2a:d2:
         7c:7a:16:f2:ab:71:3b:27:10:94:16:24:5c:5c:47:3d:97:46:
         d0:6f:2c:a4:ed:b3:fa:0b:d3:da:d7:40:ff:e1:8a:06:d2:96:
         e1:36:18:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:05 2024 by rpki-client on console-fra.rpki-client.org