Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/EeZ4oH-cbEq82Bln6CUIqTC05kY.roa
File:                     EeZ4oH-cbEq82Bln6CUIqTC05kY.roa (raw, json)
Hash identifier:          eX/KurBoIESwVl5gzzvNI1KV8dfqiTItpcs55r4p/9A=
Subject key identifier:   11:E6:78:A0:7F:9C:6C:4A:BC:D8:19:67:E8:25:08:A9:30:B4:E6:46
Certificate issuer:       /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial:       01856B4A368E81376A9766D0EBA4CBC5813F
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/EeZ4oH-cbEq82Bln6CUIqTC05kY.roa
Signing time:             Sun 01 Jan 2023 03:05:03 +0000
ROA not before:           Sun 01 Jan 2023 03:05:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61326
IP address blocks:        178.170.186.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:4a:36:8e:81:37:6a:97:66:d0:eb:a4:cb:c5:81:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
        Validity
            Not Before: Jan  1 03:05:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=11e678a07f9c6c4abcd81967e82508a930b4e646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d1:8f:76:2b:2b:49:3e:62:25:b4:ce:94:ba:
                    3b:98:93:1e:01:0a:55:c5:af:98:62:f9:38:11:e7:
                    b0:64:f1:9b:25:d0:00:35:e7:de:d9:49:d4:99:e5:
                    10:00:32:8e:d7:33:e5:b8:f1:fa:33:c6:fd:8a:31:
                    a2:8e:ee:92:5a:1a:1d:cc:47:ef:79:5b:31:fd:15:
                    45:2c:1b:c4:b2:8c:59:db:22:2d:55:30:e6:4c:3b:
                    31:fe:de:7e:be:fc:03:89:00:05:13:af:d3:20:f4:
                    63:be:95:3f:16:a1:99:2c:ba:79:bd:5c:ea:f0:1c:
                    b2:40:f4:0c:c1:f0:a1:5b:7d:a7:7c:0f:1d:f0:8b:
                    82:03:99:dd:bd:c2:29:6c:80:bf:ff:0a:29:68:31:
                    0e:94:33:cd:53:be:8d:dd:77:9e:ed:b7:02:a3:cf:
                    ba:be:6b:3e:a1:a9:c1:25:aa:d3:40:50:89:e8:f3:
                    21:e5:6a:77:35:aa:8b:3a:36:0f:42:7b:10:5a:6d:
                    9f:25:38:8e:99:34:5c:cf:aa:a1:4e:a5:38:7d:c2:
                    1a:11:14:09:4e:d4:72:1c:15:57:d9:31:82:c8:0a:
                    a8:8d:84:56:94:86:00:e1:9c:a8:1a:75:dd:e9:53:
                    9f:38:10:5b:2a:81:24:00:9f:91:6d:86:0e:86:f0:
                    8c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E6:78:A0:7F:9C:6C:4A:BC:D8:19:67:E8:25:08:A9:30:B4:E6:46
            X509v3 Authority Key Identifier:
                keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/EeZ4oH-cbEq82Bln6CUIqTC05kY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.170.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:5a:88:0d:96:41:df:23:b4:d0:a3:d2:8e:ca:dd:04:55:7d:
         40:9e:02:9d:3f:c8:a6:a3:11:c8:d6:bb:8d:7e:46:c9:54:4d:
         0f:4d:4a:a2:62:22:80:6e:46:e8:49:c5:38:05:a0:c6:89:9c:
         f3:f0:b3:02:fe:65:e4:43:dc:58:9c:80:8d:e5:93:06:fc:4e:
         b6:48:d6:c2:76:c2:29:56:cb:3e:36:11:18:ed:73:54:f0:71:
         59:64:44:63:ab:ca:a3:dd:0a:ba:a4:f1:21:b8:84:9c:08:c2:
         7e:45:75:6e:1a:e7:99:77:a9:0e:fc:12:a5:41:74:b5:34:7f:
         65:55:d0:8c:b9:1e:72:27:93:b9:f4:a7:b8:f4:6e:a6:4b:cd:
         ac:ca:01:6c:e3:c8:a4:74:f4:ea:8e:59:0d:47:9e:81:75:55:
         54:32:e1:33:43:e7:44:7d:4d:5a:58:35:20:b0:68:6d:52:35:
         92:0f:69:81:b6:29:13:99:20:bd:28:99:76:cc:4a:75:c6:26:
         71:16:45:65:da:64:2c:de:92:eb:05:82:37:bf:66:f9:0c:7b:
         00:26:89:18:e9:09:ec:2e:8e:ed:97:5c:e3:41:bc:49:c0:1e:
         52:27:38:48:f5:43:37:12:f9:99:1a:87:1f:66:e1:8b:24:90:
         a4:4e:ea:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:33 2024 by rpki-client on console-ams.rpki-client.org