Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/7JHsPcUDzylfN2dm-SNZFAAVnNA.roa
File:                     7JHsPcUDzylfN2dm-SNZFAAVnNA.roa (raw, json)
Hash identifier:          mf0dzcy+r7sp4uYx9dTSUuk6HhT9/JYeqDeEVqF2kFQ=
Subject key identifier:   EC:91:EC:3D:C5:03:CF:29:5F:37:67:66:F9:23:59:14:00:15:9C:D0
Certificate issuer:       /CN=6c73a04a7d0eb2df47daf0c39fba75e365c8853d
Certificate serial:       0185E8E89095091A828AD7608AAC50CC7A5E
Authority key identifier: 6C:73:A0:4A:7D:0E:B2:DF:47:DA:F0:C3:9F:BA:75:E3:65:C8:85:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/7JHsPcUDzylfN2dm-SNZFAAVnNA.roa
Signing time:             Wed 25 Jan 2023 12:30:33 +0000
ROA not before:           Wed 25 Jan 2023 12:30:33 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     24675
IP address blocks:        193.178.2.0/24 maxlen: 24
                          193.178.3.0/24 maxlen: 24
                          193.178.4.0/24 maxlen: 24
                          193.178.1.0/24 maxlen: 24
                          193.178.9.0/24 maxlen: 24
                          193.178.10.0/24 maxlen: 24
                          193.178.11.0/24 maxlen: 24
                          193.178.5.0/24 maxlen: 24
                          193.178.6.0/24 maxlen: 24
                          193.178.7.0/24 maxlen: 24
                          193.178.8.0/24 maxlen: 24
                          193.178.16.0/22 maxlen: 22
                          193.178.12.0/24 maxlen: 24
                          193.178.13.0/24 maxlen: 24
                          193.178.14.0/24 maxlen: 24
                          193.178.15.0/24 maxlen: 24
                          193.178.20.0/24 maxlen: 24
                          193.178.21.0/24 maxlen: 24
                          193.178.30.0/24 maxlen: 24
                          193.178.29.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 02:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e8:e8:90:95:09:1a:82:8a:d7:60:8a:ac:50:cc:7a:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c73a04a7d0eb2df47daf0c39fba75e365c8853d
        Validity
            Not Before: Jan 25 12:30:33 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ec91ec3dc503cf295f376766f923591400159cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0b:0f:34:b5:a4:b1:8f:65:0a:3e:fc:c0:dd:
                    f2:97:bb:a2:2e:d9:1d:c4:24:80:36:27:21:24:e6:
                    26:14:49:68:02:cc:98:5a:1c:93:1c:ce:6c:66:0b:
                    c3:51:22:c8:ff:42:4d:d3:8b:9a:88:81:27:00:14:
                    78:f9:0b:8a:d7:20:61:5d:01:7b:96:ff:d0:e0:2a:
                    22:e0:fa:52:05:c8:26:df:a8:68:70:ea:51:c8:68:
                    a0:57:23:f5:b8:b6:4b:59:50:1a:1e:17:eb:13:a1:
                    f8:87:95:62:85:9f:7b:2c:0f:27:03:61:02:e9:86:
                    7b:fc:a8:35:d8:47:1c:d9:1b:92:6e:bb:f5:3d:44:
                    02:44:44:bc:e9:32:50:6b:06:1a:c8:28:a0:ad:5a:
                    a6:14:f6:44:50:f4:61:3a:53:ba:74:4c:04:68:d6:
                    45:4e:ea:2f:2c:61:5f:c5:55:0c:36:75:a5:d1:f1:
                    05:08:47:98:0b:7d:b6:62:ba:91:ec:7f:ca:ae:89:
                    8d:0e:82:8b:4b:59:25:5b:da:b6:08:2b:5e:c0:51:
                    0a:53:dd:cf:7a:4a:4e:e4:e3:a4:dd:d5:31:3f:c4:
                    8c:7f:4c:de:6d:e1:7c:10:0b:f3:4a:bd:f2:54:e9:
                    23:37:f2:65:86:66:85:44:a9:23:b4:81:bb:18:6b:
                    7a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:91:EC:3D:C5:03:CF:29:5F:37:67:66:F9:23:59:14:00:15:9C:D0
            X509v3 Authority Key Identifier:
                keyid:6C:73:A0:4A:7D:0E:B2:DF:47:DA:F0:C3:9F:BA:75:E3:65:C8:85:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/7JHsPcUDzylfN2dm-SNZFAAVnNA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.178.1.0-193.178.21.255
                  193.178.29.0-193.178.30.255

    Signature Algorithm: sha256WithRSAEncryption
         82:34:cb:7c:bc:f4:ea:e2:b6:af:a2:20:c6:de:c0:44:77:04:
         27:35:ef:22:55:40:88:ff:40:68:4c:f4:33:1c:05:cd:ab:a5:
         9a:aa:83:81:69:ed:2a:1c:ea:86:bd:20:ff:b3:95:05:90:8c:
         a1:4e:78:a4:f3:fe:83:c2:9a:5a:49:09:77:37:f9:45:83:3f:
         c3:fe:b7:7c:9b:7c:05:d6:80:67:1c:54:37:64:86:01:c1:1f:
         e2:2b:d6:31:e2:ff:ee:e6:4f:10:4f:13:0c:e4:13:3b:a1:d1:
         2e:2d:68:d6:b3:18:f6:f8:0d:92:7f:d2:0d:59:cc:42:6e:56:
         a8:5d:c5:29:17:c8:d5:ba:83:ce:7d:e9:3b:33:68:fb:d5:2e:
         b4:b1:20:35:6d:eb:22:64:25:f0:30:e3:d8:73:89:b4:65:29:
         5f:1a:85:92:c8:ec:be:2c:37:92:0b:49:35:52:a8:89:eb:75:
         d8:00:e4:36:02:97:b4:b1:57:4a:92:0f:f2:42:01:92:da:f3:
         37:80:9a:94:d9:ef:76:ae:f5:63:8c:0c:f1:01:1e:01:5c:b4:
         36:f6:ba:7a:e1:a6:ea:f1:89:6c:1e:34:1a:21:ca:8c:19:d4:
         83:be:4d:16:8b:55:54:66:ca:87:a3:a3:ef:37:37:d1:84:cc:
         f7:d8:9c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:16 2024 by rpki-client on console-fra.rpki-client.org