Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/UZO-hHoCnW0EVZf7hZaq8DPt5hA.roa
File:                     UZO-hHoCnW0EVZf7hZaq8DPt5hA.roa (raw, json)
Hash identifier:          c5LRtY8B5njTlpLQYWUbvydV4cfzgW33YosIrlvTbRU=
Subject key identifier:   51:93:BE:84:7A:02:9D:6D:04:55:97:FB:85:96:AA:F0:33:ED:E6:10
Certificate issuer:       /CN=ae83f7879c2c74a11652b5e08af64aac90800b04
Certificate serial:       01856F9DF5B814D36A61E812DC9AED6AD977
Authority key identifier: AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/UZO-hHoCnW0EVZf7hZaq8DPt5hA.roa
Signing time:             Sun 01 Jan 2023 23:15:01 +0000
ROA not before:           Sun 01 Jan 2023 23:15:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1213
IP address blocks:        136.206.0.0/16 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 00:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:9d:f5:b8:14:d3:6a:61:e8:12:dc:9a:ed:6a:d9:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae83f7879c2c74a11652b5e08af64aac90800b04
        Validity
            Not Before: Jan  1 23:15:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5193be847a029d6d045597fb8596aaf033ede610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a3:1d:b9:39:37:6c:c4:30:7b:0d:20:4f:3a:
                    06:be:94:a9:73:a3:37:a2:38:d2:5b:bc:a9:ea:62:
                    fd:88:5b:cc:24:94:e6:9c:e5:3e:d6:5e:a0:69:da:
                    6d:50:38:1f:da:3f:9a:31:a2:11:8e:5f:37:21:72:
                    95:ca:18:86:fe:ea:62:d4:0e:dc:a3:93:30:e2:a1:
                    d2:56:dc:19:eb:e6:05:f4:02:6f:2a:81:0e:f6:55:
                    fe:98:99:ed:5f:8c:ad:ec:f4:1f:64:d4:2f:85:b2:
                    2d:3e:cc:cb:eb:db:7e:e6:f7:48:c1:26:1c:6b:f2:
                    34:0f:ab:34:7a:73:0b:76:02:29:33:ce:f2:bb:2f:
                    ae:21:f2:b6:3f:1f:8b:67:03:b2:af:13:1a:e5:4e:
                    60:da:43:81:b0:00:f3:23:21:ac:0a:ed:04:8a:45:
                    33:62:9d:5f:4f:89:19:db:b9:33:2a:1a:1d:a3:19:
                    9d:23:15:d6:6e:33:9f:54:03:15:5f:4b:ce:66:35:
                    af:7e:44:49:16:a3:b1:df:df:16:f7:20:51:9b:cc:
                    a7:73:95:06:bb:f0:a3:22:6e:38:2f:59:1a:68:b4:
                    4e:16:6a:04:9f:c0:5d:ab:62:9a:35:c3:62:2c:3a:
                    a1:dc:47:09:20:25:fc:d2:5b:44:d5:4a:58:26:e6:
                    b0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:93:BE:84:7A:02:9D:6D:04:55:97:FB:85:96:AA:F0:33:ED:E6:10
            X509v3 Authority Key Identifier:
                keyid:AE:83:F7:87:9C:2C:74:A1:16:52:B5:E0:8A:F6:4A:AC:90:80:0B:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/roP3h5wsdKEWUrXgivZKrJCACwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/UZO-hHoCnW0EVZf7hZaq8DPt5hA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/84d026-17e4-4787-a439-473d74a5e20f/1/roP3h5wsdKEWUrXgivZKrJCACwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.206.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b9:27:15:ef:a2:4a:21:5d:59:55:bd:6d:59:5d:6b:50:c3:01:
         a1:88:a5:88:b1:90:2a:87:39:d9:53:2f:b1:ad:c3:af:66:f6:
         d2:85:f1:fd:de:1a:94:15:0e:f2:d0:3d:79:ca:61:af:eb:26:
         96:a7:b1:c3:a7:38:82:ea:12:b7:ac:2b:19:2f:2f:c4:15:37:
         97:db:1d:4b:39:15:8a:b5:82:96:4e:0d:eb:26:89:f5:51:cd:
         46:5a:7a:65:c1:e4:f7:39:5d:6f:44:4f:4e:0d:f5:7d:d2:a8:
         90:ea:3f:31:cd:12:bb:42:05:39:d0:5d:d2:b2:78:04:9f:86:
         42:21:a4:ce:37:4c:a3:a5:9c:6e:bf:08:b4:03:40:64:37:0a:
         a3:c1:c4:1b:22:cc:04:7c:35:30:fe:92:e5:5f:7d:75:18:72:
         00:28:ed:82:ee:98:0d:23:1a:9b:bf:43:8d:bb:5a:42:4b:a9:
         27:39:10:95:dd:29:2a:85:1c:52:64:0b:fe:03:cb:02:59:91:
         3f:eb:a8:df:1c:c9:eb:ae:b2:bb:f9:86:cc:ae:61:cc:a6:e1:
         f7:ad:79:f1:62:f6:51:9a:19:4f:dc:4d:c9:38:a3:2b:a7:2e:
         33:a8:ab:42:8f:e0:a2:fc:ac:27:7f:50:73:7d:c5:44:c0:bc:
         cf:5d:b7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:54 2024 by rpki-client on console-ams.rpki-client.org