Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/AWOaomu8VqKe2Hl2IBO_51vzh8Y.roa
File:                     AWOaomu8VqKe2Hl2IBO_51vzh8Y.roa (raw, json)
Hash identifier:          lpHsnACkTD521MLaGviwfvjK5OqKlLD+InLiWGYIDbs=
Subject key identifier:   01:63:9A:A2:6B:BC:56:A2:9E:D8:79:76:20:13:BF:E7:5B:F3:87:C6
Certificate issuer:       /CN=b78678bd654ca6b10a5c773bc269754dc234cfd5
Certificate serial:       01929527E1D364B22D110F422EDE5A5D7BC7
Authority key identifier: B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/AWOaomu8VqKe2Hl2IBO_51vzh8Y.roa
Signing time:             Wed 16 Oct 2024 11:47:51 +0000
ROA not before:           Wed 16 Oct 2024 11:47:51 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     214113
IP address blocks:        103.115.182.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 18 Oct 2024 06:54:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:95:27:e1:d3:64:b2:2d:11:0f:42:2e:de:5a:5d:7b:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b78678bd654ca6b10a5c773bc269754dc234cfd5
        Validity
            Not Before: Oct 16 11:47:51 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=01639aa26bbc56a29ed879762013bfe75bf387c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:47:31:3b:ee:58:bd:25:1d:1f:6f:61:47:57:
                    00:9d:3f:32:a8:70:46:c2:80:d3:c5:2e:4b:0d:f7:
                    94:0c:b4:c3:85:48:96:e5:93:56:59:ae:db:fe:b6:
                    f9:8c:c6:5d:1b:57:0d:e4:86:1a:cd:2f:d5:f0:a9:
                    cd:18:4b:d8:2e:50:00:ca:9e:9b:82:af:5a:0f:42:
                    0c:c9:fe:24:59:d7:b9:eb:dc:bd:46:a9:d5:8f:b2:
                    e9:8d:1b:35:33:a8:2a:67:8d:fc:c5:84:7f:ed:79:
                    13:de:2c:e1:9d:a3:44:3e:76:af:ec:3b:c8:4c:98:
                    fe:26:3f:bb:23:c7:d5:e9:ce:74:08:17:32:aa:c6:
                    22:c7:b8:45:fd:f7:77:f3:d9:2f:f9:b8:ab:7f:57:
                    75:91:3c:af:9e:00:ff:a6:84:cd:12:70:cd:01:69:
                    6b:53:db:3c:a1:e9:f5:4d:da:46:88:29:fd:52:31:
                    2f:c6:57:ba:5e:df:b7:48:d3:51:d7:a4:f4:44:fc:
                    b1:9d:2a:07:f4:be:4f:72:d6:5f:5c:74:24:66:38:
                    ae:a3:c9:3e:40:b8:22:5a:8a:94:8b:7e:9f:a7:1a:
                    25:a7:45:6b:a6:f9:73:8d:d8:2d:7b:c0:be:e8:cf:
                    52:67:d5:39:6e:9a:05:08:16:5c:1e:4a:82:5c:a2:
                    f0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:63:9A:A2:6B:BC:56:A2:9E:D8:79:76:20:13:BF:E7:5B:F3:87:C6
            X509v3 Authority Key Identifier:
                keyid:B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/AWOaomu8VqKe2Hl2IBO_51vzh8Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:06:6e:ed:35:6a:60:c6:30:55:46:59:94:c0:a6:fb:c1:88:
         2b:0f:99:02:d5:7d:8a:6b:d1:04:90:4d:5c:09:31:71:68:f2:
         4e:cd:a3:20:78:52:2f:6d:2a:43:b5:54:6d:e6:f5:27:40:f5:
         fd:cf:d2:07:1e:03:5f:66:ae:9c:2c:5c:9c:45:04:d1:1b:37:
         67:eb:d8:2a:14:2d:ab:ef:8c:65:49:69:aa:f6:ef:c0:aa:fe:
         23:34:eb:51:c9:4b:a8:10:ae:db:9e:b9:03:b9:90:c6:76:6e:
         c8:64:3d:58:6e:b2:f4:da:a0:f8:9d:ed:e8:83:ed:3d:6c:ab:
         c8:92:1d:4d:67:7d:09:82:89:af:e5:48:50:1e:2c:41:cf:2a:
         6f:ff:d5:41:a7:22:61:44:c6:3c:8c:a6:17:77:3e:a4:34:82:
         1e:0b:ee:50:07:91:3b:d2:70:69:ff:f1:56:d2:02:16:22:ff:
         cb:66:7c:03:3a:ba:eb:9f:2c:c4:b7:88:16:d1:7b:b0:eb:30:
         40:f9:b5:1c:db:3d:3f:e5:b6:d5:d3:fb:66:80:77:c5:bd:af:
         02:53:fc:4e:90:41:c4:2c:4d:f0:8e:8e:53:35:4a:d6:a4:31:
         c4:52:8d:6d:b5:b7:e6:8a:cd:d3:85:79:40:bb:cf:04:fd:6b:
         92:f0:80:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 18 08:47:52 2024 by rpki-client on console-ams.rpki-client.org