Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/AgoI9X8tsqehWYZ2Qqdmt6sHSQ4.roa
File:                     AgoI9X8tsqehWYZ2Qqdmt6sHSQ4.roa (raw, json)
Hash identifier:          48fgZhKZHzna+96oYfGuH8RVga+RqnMrdXfAGuibev0=
Subject key identifier:   02:0A:08:F5:7F:2D:B2:A7:A1:59:86:76:42:A7:66:B7:AB:07:49:0E
Certificate issuer:       /CN=2e94ff0301be79d81260ac66ac7362efad968a41
Certificate serial:       018570028B3B537255174F587DDF97F96840
Authority key identifier: 2E:94:FF:03:01:BE:79:D8:12:60:AC:66:AC:73:62:EF:AD:96:8A:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LpT_AwG-edgSYKxmrHNi762WikE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/AgoI9X8tsqehWYZ2Qqdmt6sHSQ4.roa
Signing time:             Mon 02 Jan 2023 01:04:52 +0000
ROA not before:           Mon 02 Jan 2023 01:04:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42134
IP address blocks:        194.0.138.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 10:30:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:02:8b:3b:53:72:55:17:4f:58:7d:df:97:f9:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e94ff0301be79d81260ac66ac7362efad968a41
        Validity
            Not Before: Jan  2 01:04:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=020a08f57f2db2a7a159867642a766b7ab07490e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ab:52:b0:e7:a9:8e:57:3b:cb:7c:17:f3:86:
                    8a:64:55:fb:bb:2d:26:e7:e7:77:2f:03:00:3a:90:
                    b8:7b:49:a1:d3:a3:b9:d7:c5:70:cd:95:10:83:23:
                    85:1f:c0:b5:a3:ea:5b:df:2c:67:d6:2d:7b:5f:38:
                    13:e1:8b:73:27:3a:87:ca:8e:5a:1e:34:9b:f1:54:
                    7d:13:f1:3b:20:70:dd:67:58:82:aa:64:a0:b2:b3:
                    2b:41:99:f0:cd:19:78:58:1a:99:ed:83:48:11:dd:
                    c1:98:a0:ba:29:d3:76:be:d6:7b:8b:8d:84:e7:53:
                    cf:f2:af:ff:3c:c4:e7:05:a0:db:0c:da:c5:e1:6b:
                    ed:ba:44:f0:a2:f4:1a:3a:10:ca:34:f8:5d:d0:05:
                    4a:0e:b7:1e:b4:0a:1f:08:96:20:49:9f:ff:86:ed:
                    69:92:93:cd:9a:cb:21:9b:bc:6f:8d:c9:44:e2:e1:
                    a5:cd:5f:91:2c:60:5a:58:77:3f:34:71:d5:0e:06:
                    ce:1d:ec:ee:21:bf:f4:02:11:9a:06:f9:9c:12:d3:
                    e2:fb:92:1a:10:d2:ca:86:9b:da:fc:26:d1:cd:a7:
                    18:bb:3b:ca:9b:76:a3:20:5f:1b:47:98:b8:3f:42:
                    cf:4d:6d:42:fd:de:d3:a4:45:48:c3:43:c1:23:2c:
                    a3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:0A:08:F5:7F:2D:B2:A7:A1:59:86:76:42:A7:66:B7:AB:07:49:0E
            X509v3 Authority Key Identifier:
                keyid:2E:94:FF:03:01:BE:79:D8:12:60:AC:66:AC:73:62:EF:AD:96:8A:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LpT_AwG-edgSYKxmrHNi762WikE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/AgoI9X8tsqehWYZ2Qqdmt6sHSQ4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ef7787-404b-4a1e-ba8b-68e7fb17a44b/1/LpT_AwG-edgSYKxmrHNi762WikE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.0.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:d3:dd:06:cf:fd:14:92:eb:96:51:3b:9a:c9:57:9d:fc:eb:
         94:a2:ab:d8:17:40:c1:7e:0c:11:ca:a7:de:28:61:58:de:75:
         67:5e:62:f9:cc:88:fb:69:d9:40:99:2d:5e:dc:f7:3a:99:d9:
         45:bb:e8:9a:82:6b:9d:b9:48:ef:b6:fa:4b:f0:f4:9f:18:6b:
         37:88:51:6c:cf:f9:da:b3:c0:f9:6a:59:c1:83:b5:2e:50:fa:
         da:7e:64:70:6e:35:75:08:6a:94:85:43:3e:13:78:e7:e1:25:
         ba:5d:85:2b:fc:01:be:aa:a5:01:5e:39:98:ab:e4:78:39:54:
         e5:5b:d4:bd:b0:c5:11:a4:25:1a:4b:57:55:71:fd:c6:a5:5d:
         6d:42:10:f3:4a:d9:d1:00:68:b6:ab:18:ef:0c:f6:0b:b1:8f:
         47:50:39:b7:72:7f:c0:1b:e1:e6:e6:41:56:b2:41:bc:5b:25:
         67:d7:4f:6c:4c:6d:30:00:a2:54:37:9e:29:4e:5f:32:7d:b1:
         dd:b1:e0:99:30:a6:08:e1:73:a7:d4:51:8c:c5:96:95:f2:a6:
         7b:2f:98:5f:9e:97:b3:5f:18:4d:6d:0d:c9:42:b5:51:f6:7a:
         61:ae:ea:9b:66:3a:0d:c9:00:c0:35:b2:2c:97:8a:41:60:2e:
         10:1a:b8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:33 2024 by rpki-client on console-fra.rpki-client.org