Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/7ljOPwEgltnvcGUUaJ6DjDv3G8g.roa
File:                     7ljOPwEgltnvcGUUaJ6DjDv3G8g.roa (raw, json)
Hash identifier:          zCEzeDuFI0EYBHy9jWd4JHUxx/SjYwTVDdwrbrVN7t8=
Subject key identifier:   EE:58:CE:3F:01:20:96:D9:EF:70:65:14:68:9E:83:8C:3B:F7:1B:C8
Certificate issuer:       /CN=a45ded68e2260321bca39e8465b49c25d58a56e6
Certificate serial:       01864D757D7247E61CEC85354896A7422144
Authority key identifier: A4:5D:ED:68:E2:26:03:21:BC:A3:9E:84:65:B4:9C:25:D5:8A:56:E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pF3taOImAyG8o56EZbScJdWKVuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/7ljOPwEgltnvcGUUaJ6DjDv3G8g.roa
Signing time:             Tue 14 Feb 2023 01:06:30 +0000
ROA not before:           Tue 14 Feb 2023 01:06:30 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206446
IP address blocks:        185.128.227.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 08 Mar 2023 19:47:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:4d:75:7d:72:47:e6:1c:ec:85:35:48:96:a7:42:21:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a45ded68e2260321bca39e8465b49c25d58a56e6
        Validity
            Not Before: Feb 14 01:06:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ee58ce3f012096d9ef706514689e838c3bf71bc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:dd:61:ff:e7:d5:eb:1b:58:47:53:b7:0c:67:
                    77:a5:6e:93:c9:3c:d9:a7:53:12:23:59:31:9f:75:
                    e0:50:ed:ea:0b:4c:4f:d1:7a:ca:99:0e:28:44:18:
                    fb:d5:16:f5:e9:00:8f:6f:38:9b:82:f1:a2:99:36:
                    c8:46:35:63:9b:cd:4e:54:13:67:03:64:55:31:95:
                    eb:b4:11:89:5e:6b:09:8b:24:3e:85:e7:7d:cd:da:
                    54:fb:ea:f3:18:47:e4:d6:77:3b:ad:89:8e:82:98:
                    19:10:58:21:5a:43:c7:26:74:f6:b6:cf:8e:6c:05:
                    cd:3a:0b:20:70:2a:34:92:f7:b4:4d:dd:ee:5b:c3:
                    21:2c:9b:c4:5d:7f:56:e0:35:e2:d0:21:bf:42:28:
                    c6:d1:46:59:10:93:92:b7:72:02:0d:20:dc:ae:e1:
                    8c:44:bf:d6:5e:08:7c:80:d9:18:7b:7e:9f:56:bf:
                    3a:d5:1c:2e:ee:11:94:f4:f6:3f:0e:cb:26:e4:e3:
                    ce:9e:a5:cb:60:c0:6a:47:3d:05:c5:1f:2f:8c:c0:
                    57:fc:bb:43:7f:a4:d2:3a:e7:0f:c2:d1:b4:fc:22:
                    29:d8:4d:af:6a:bd:8c:7b:e4:06:78:a0:32:98:3e:
                    38:5e:e3:ce:9e:99:51:7c:b6:e5:ae:c1:ab:7a:60:
                    d6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:58:CE:3F:01:20:96:D9:EF:70:65:14:68:9E:83:8C:3B:F7:1B:C8
            X509v3 Authority Key Identifier:
                keyid:A4:5D:ED:68:E2:26:03:21:BC:A3:9E:84:65:B4:9C:25:D5:8A:56:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pF3taOImAyG8o56EZbScJdWKVuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/7ljOPwEgltnvcGUUaJ6DjDv3G8g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/e4af0a-a170-4ca3-ab57-54853c47661f/1/pF3taOImAyG8o56EZbScJdWKVuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.128.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:62:d7:fc:ae:66:16:ca:fb:63:6f:00:95:15:63:72:3e:a6:
         01:ad:83:94:f4:c6:5c:f7:db:92:db:df:9c:c8:7e:5b:7d:1b:
         43:54:83:c3:b2:54:c8:39:29:97:35:e7:2c:17:0a:86:52:fc:
         a4:62:74:b5:26:22:5e:14:ae:4f:ec:15:02:a4:e0:08:e4:a5:
         35:bc:41:f0:60:9d:ce:75:ef:98:df:75:52:84:0d:1e:6b:dc:
         7a:c0:1b:be:f9:21:30:fc:7c:1c:94:3b:a5:a7:39:b0:cb:c4:
         12:99:e1:b0:11:9b:e0:7e:eb:e6:3c:c2:37:09:cf:28:db:2b:
         1d:48:97:9a:91:4c:96:fd:87:b4:75:ec:08:60:a0:61:04:18:
         a2:29:47:69:67:d5:98:67:47:07:e5:94:23:d7:3a:62:4e:bc:
         37:29:d4:e0:fe:fd:1a:3c:44:4e:17:80:3f:e1:37:a9:ad:97:
         44:12:6c:07:d0:7c:0a:81:c2:98:06:99:08:66:30:ac:42:7d:
         8a:ed:34:22:c2:dd:3f:b1:52:c7:b7:10:b9:76:84:8c:8b:59:
         1e:36:4c:fd:2f:0b:35:63:b4:ce:25:3b:81:75:21:e1:a9:8e:
         45:06:c7:73:a0:33:4e:c3:4e:7f:2c:46:8c:f8:b1:26:eb:1e:
         3d:88:fa:0d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZNdX1yR+Yc7IU1SJanQiFEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0NWRlZDY4ZTIyNjAzMjFiY2EzOWU4NDY1YjQ5YzI1ZDU4
YTU2ZTYwHhcNMjMwMjE0MDEwNjMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTU4Y2UzZjAxMjA5NmQ5ZWY3MDY1MTQ2ODllODM4YzNiZjcxYmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA391h/+fV6xtYR1O3DGd3pW6TyTzZ
p1MSI1kxn3XgUO3qC0xP0XrKmQ4oRBj71Rb16QCPbzibgvGimTbIRjVjm81OVBNn
A2RVMZXrtBGJXmsJiyQ+hed9zdpU++rzGEfk1nc7rYmOgpgZEFghWkPHJnT2ts+O
bAXNOgsgcCo0kve0Td3uW8MhLJvEXX9W4DXi0CG/QijG0UZZEJOSt3ICDSDcruGM
RL/WXgh8gNkYe36fVr861Rwu7hGU9PY/Dssm5OPOnqXLYMBqRz0FxR8vjMBX/LtD
f6TSOucPwtG0/CIp2E2var2Me+QGeKAymD44XuPOnplRfLblrsGremDW7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO5Yzj8BIJbZ73BlFGieg4w79xvIMB8GA1UdIwQY
MBaAFKRd7WjiJgMhvKOehGW0nCXVilbmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEYzdGFPSW1BeUc4bzU2RVpiU2NKZFdLVnVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9lNGFmMGEtYTE3MC00Y2EzLWFiNTct
NTQ4NTNjNDc2NjFmLzEvN2xqT1B3RWdsdG52Y0dVVWFKNkRqRHYzRzhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9lNGFmMGEtYTE3MC00Y2EzLWFiNTctNTQ4NTNjNDc2NjFm
LzEvcEYzdGFPSW1BeUc4bzU2RVpiU2NKZFdLVnVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYDjMA0G
CSqGSIb3DQEBCwUAA4IBAQAvYtf8rmYWyvtjbwCVFWNyPqYBrYOU9MZc99uS29+c
yH5bfRtDVIPDslTIOSmXNecsFwqGUvykYnS1JiJeFK5P7BUCpOAI5KU1vEHwYJ3O
de+Y33VShA0ea9x6wBu++SEw/HwclDulpzmwy8QSmeGwEZvgfuvmPMI3Cc8o2ysd
SJeakUyW/Ye0dewIYKBhBBiiKUdpZ9WYZ0cH5ZQj1zpiTrw3KdTg/v0aPEROF4A/
4TeprZdEEmwH0HwKgcKYBpkIZjCsQn2K7TQiwt0/sVLHtxC5doSMi1keNkz9Lws1
Y7TOJTuBdSHhqY5FBsdzoDNOw05/LEaM+LEm6x49iPoN
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-fra.rpki-client.org