Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/7p7Vx5UoYlLfiealFarpl-DKDks.roa
File:                     7p7Vx5UoYlLfiealFarpl-DKDks.roa (raw, json)
Hash identifier:          Fm+4I0yFE70zzKalywB4y++3eM1JxooH6BL8ghrlnCk=
Subject key identifier:   EE:9E:D5:C7:95:28:62:52:DF:89:E6:A5:15:AA:E9:97:E0:CA:0E:4B
Certificate issuer:       /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial:       018CC49244E9EEF77CF672AE07DBA640077F
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/7p7Vx5UoYlLfiealFarpl-DKDks.roa
Signing time:             Mon 01 Jan 2024 10:29:29 +0000
ROA not before:           Mon 01 Jan 2024 10:29:29 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     201426
IP address blocks:        195.184.73.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 26 Aug 2024 09:49:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:92:44:e9:ee:f7:7c:f6:72:ae:07:db:a6:40:07:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
        Validity
            Not Before: Jan  1 10:29:29 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ee9ed5c795286252df89e6a515aae997e0ca0e4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:33:d2:79:b0:37:c2:47:3d:aa:cb:41:59:29:
                    8b:c4:38:8c:2c:03:49:00:da:26:a9:86:40:c2:8a:
                    d6:dd:de:42:a3:dd:e5:6e:9b:d1:da:6e:39:1f:13:
                    37:76:e2:87:25:bd:65:ce:b1:69:d7:bd:34:8d:6c:
                    e5:d1:3a:bd:ed:01:8f:b0:3d:aa:00:9c:00:91:f4:
                    3d:b9:ef:00:dc:45:09:f0:1c:a8:be:f0:09:2b:21:
                    23:4e:08:31:d2:3b:85:e0:f3:20:32:7d:51:1c:81:
                    13:4f:07:37:f5:68:21:9a:f1:0e:df:bc:d1:4e:cc:
                    52:a7:c6:0f:1f:20:a8:28:53:d1:23:51:a9:93:b8:
                    d0:b0:66:37:58:af:28:6d:47:47:59:5a:36:f0:15:
                    b7:c5:c0:49:e8:40:24:3a:0a:0c:07:5d:f2:79:7c:
                    e9:8d:01:09:39:e5:e0:66:40:02:51:02:65:35:f3:
                    ea:8d:b2:87:bf:75:eb:5f:ae:a8:db:6c:e7:b3:d3:
                    83:df:8e:ab:db:56:a5:4d:c1:57:15:57:19:ab:e5:
                    fa:a3:84:b9:a9:f7:cc:b0:ce:8d:3f:f5:01:2a:0a:
                    58:fc:be:2b:5f:41:9b:8e:02:30:36:bf:c8:e9:45:
                    90:0f:7d:dd:f7:41:e0:83:05:f4:8d:50:c5:1e:3a:
                    05:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:9E:D5:C7:95:28:62:52:DF:89:E6:A5:15:AA:E9:97:E0:CA:0E:4B
            X509v3 Authority Key Identifier:
                keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/7p7Vx5UoYlLfiealFarpl-DKDks.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.184.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:90:ca:cc:64:03:55:d0:ef:b7:46:52:9f:1a:13:fc:0b:82:
         fb:67:5c:4f:5e:72:55:54:ed:0c:e0:75:a7:8e:75:bd:db:47:
         8b:45:13:d5:19:da:02:c0:b0:7f:14:a9:c4:1c:37:c2:1f:fe:
         e0:af:39:d7:67:7e:6a:5b:4f:63:72:3a:27:1f:9d:cc:ff:2f:
         44:ab:f5:24:93:c7:6f:55:f9:7b:09:84:13:fe:7d:0b:6a:4e:
         1d:4a:b7:89:60:ce:a8:50:b5:6e:65:9c:0c:29:db:28:11:d8:
         9d:15:d5:ff:d6:6a:c7:a9:ea:64:37:d1:8e:dd:cf:f7:31:4d:
         02:23:05:0d:2b:60:d3:91:b9:dc:94:04:a3:32:b1:2b:21:b5:
         12:53:2c:87:95:91:eb:9b:a4:de:c2:a6:fa:2c:f7:91:fe:58:
         c6:ec:d1:6f:45:01:74:51:a6:65:c8:37:db:91:24:04:2a:17:
         28:3e:bc:b2:ec:0e:5b:0c:87:e6:5c:20:1c:07:07:c9:ec:fe:
         b2:7e:92:5a:e0:05:0f:8a:92:df:07:0d:c8:99:d0:82:81:af:
         47:85:97:65:96:95:df:c3:4e:9f:7b:d5:39:a0:e3:a0:22:6b:
         85:1b:63:4f:85:db:39:0a:c5:ea:0c:52:2e:d3:e0:64:34:35:
         bc:5a:22:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 26 12:49:06 2024 by rpki-client on console-fra.rpki-client.org