Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/Tr_pA-pIGwO08vi6cj7TOZ-6HEc.roa
File:                     Tr_pA-pIGwO08vi6cj7TOZ-6HEc.roa (raw, json)
Hash identifier:          sv45OmHIdEHJla5m4D3+rXYzrjYKAYuia2RHiZUzFBg=
Subject key identifier:   4E:BF:E9:03:EA:48:1B:03:B4:F2:F8:BA:72:3E:D3:39:9F:BA:1C:47
Certificate issuer:       /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial:       01856E790AE3CAD611E4123C254A364DECE8
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/Tr_pA-pIGwO08vi6cj7TOZ-6HEc.roa
Signing time:             Sun 01 Jan 2023 17:55:04 +0000
ROA not before:           Sun 01 Jan 2023 17:55:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     396426
IP address blocks:        176.111.219.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 16:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:79:0a:e3:ca:d6:11:e4:12:3c:25:4a:36:4d:ec:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
        Validity
            Not Before: Jan  1 17:55:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4ebfe903ea481b03b4f2f8ba723ed3399fba1c47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fb:55:4e:ca:d5:10:76:77:80:e1:b4:21:bf:
                    97:b4:e6:cb:10:09:cb:4c:7a:bf:4c:bd:c6:9e:ba:
                    5b:63:13:dd:70:db:61:a4:e5:77:fe:ba:73:c0:f8:
                    7c:fa:7c:07:37:b2:9a:8d:54:4a:b8:e0:c4:a1:60:
                    cb:a0:5f:23:ce:ef:79:5a:b6:8c:ae:a6:1d:12:b4:
                    62:50:41:5e:1a:64:2c:e3:d9:c4:c9:24:ce:aa:7e:
                    ab:14:14:fd:5a:2e:1f:76:34:77:85:09:8d:41:03:
                    56:49:ab:c3:75:26:22:dc:07:c7:be:56:1b:da:81:
                    c7:92:cb:f8:e7:98:25:1e:84:b6:f4:cc:0d:fa:d0:
                    b8:1c:25:93:00:e8:e5:8f:24:c8:05:3c:2e:79:67:
                    d4:2a:46:5d:c6:32:65:e5:dc:e6:d8:5e:78:07:5c:
                    58:33:f5:3a:33:71:88:f3:15:20:bb:48:c3:50:d9:
                    ae:72:23:cf:7a:5c:24:06:27:a8:53:25:79:92:38:
                    fb:f2:38:4e:72:84:cc:02:03:df:f8:f8:28:08:c6:
                    65:78:8c:ee:e7:7b:58:34:61:3d:84:55:9e:3b:72:
                    81:93:13:6f:dc:18:ac:05:58:b3:7a:31:e8:27:65:
                    3f:eb:55:2f:55:78:c2:b6:aa:00:81:ab:13:f5:c5:
                    0f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:BF:E9:03:EA:48:1B:03:B4:F2:F8:BA:72:3E:D3:39:9F:BA:1C:47
            X509v3 Authority Key Identifier:
                keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/Tr_pA-pIGwO08vi6cj7TOZ-6HEc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.111.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:7e:d6:d2:b9:12:0a:ab:a9:78:e3:be:be:9f:07:10:e6:38:
         08:c8:46:29:3b:0d:90:9e:89:7b:fd:c1:c6:49:cc:26:d3:c7:
         c0:2c:74:4f:ea:56:c3:bd:34:2f:cf:cc:0b:e8:e9:62:c2:fd:
         76:07:c6:61:1a:cc:52:29:93:04:0a:d8:d4:77:3f:90:86:9a:
         f2:8e:e6:8a:46:ae:e5:0f:ff:f8:a7:5b:76:6a:82:95:bb:61:
         72:39:09:8b:a5:f2:f9:59:d4:3b:f8:b0:eb:cd:3e:20:1a:e4:
         8e:d6:50:08:c5:57:e5:ad:65:5d:71:b7:03:10:e0:a9:2f:a3:
         8c:d6:65:55:ae:6d:d6:55:94:fb:85:75:ef:e2:3b:18:58:1f:
         a0:02:8f:a1:ae:24:bc:a2:49:43:ac:5d:94:f3:1f:05:47:79:
         0c:a1:20:b6:e9:81:64:26:66:d8:6e:b2:36:1c:9e:c0:f2:cc:
         dc:e6:23:b7:ab:c4:0b:67:2c:4f:18:3f:7b:6b:cf:03:cf:7a:
         46:00:0a:71:68:36:bb:d4:33:ae:03:1c:24:9e:27:ea:e4:df:
         8d:d8:32:75:8f:1a:f3:da:de:ae:e3:b9:9e:1d:b6:55:b6:82:
         de:93:c0:70:c9:13:a6:66:ea:66:9a:59:7e:e9:e3:c3:63:d0:
         0a:a8:33:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:12 2024 by rpki-client on console-fra.rpki-client.org