Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/GaU_4YcWufLsLj0Jy1iMWYqRU4g.roa
File:                     GaU_4YcWufLsLj0Jy1iMWYqRU4g.roa (raw, json)
Hash identifier:          kjPpGkdrEK0D+B00yrjYw9IbG6EhBGApd1pNwxkmRXg=
Subject key identifier:   19:A5:3F:E1:87:16:B9:F2:EC:2E:3D:09:CB:58:8C:59:8A:91:53:88
Certificate issuer:       /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial:       0189680D58DF798A1B9A41D6EB03D42BAC7E
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/GaU_4YcWufLsLj0Jy1iMWYqRU4g.roa
Signing time:             Tue 18 Jul 2023 08:10:52 +0000
ROA not before:           Tue 18 Jul 2023 08:10:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     32181
IP address blocks:        81.28.255.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 12:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:68:0d:58:df:79:8a:1b:9a:41:d6:eb:03:d4:2b:ac:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
        Validity
            Not Before: Jul 18 08:10:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=19a53fe18716b9f2ec2e3d09cb588c598a915388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0d:59:65:55:02:64:2a:61:c1:d7:c0:ad:8e:
                    6f:65:9d:c0:10:df:a5:e4:e3:a2:01:8e:85:65:c4:
                    67:f1:dc:b0:0a:3f:ff:d7:8a:d6:ad:df:b5:71:2d:
                    fc:7b:61:2b:ed:5f:5e:51:a6:0d:9a:dc:16:8f:a2:
                    e9:cd:5b:a1:a5:41:0c:65:db:b1:56:67:2f:57:58:
                    bb:4c:55:c4:37:20:73:7e:c8:f4:c7:aa:27:cb:dd:
                    d8:87:97:f1:50:e6:7d:b6:56:16:1e:ec:fb:68:68:
                    bc:d3:f8:99:c5:d5:bf:d8:b1:ad:1f:a6:74:ef:9c:
                    23:53:7b:c2:17:63:14:82:ee:5a:98:e5:cf:d4:e4:
                    45:ad:43:18:52:0d:4c:e1:70:20:13:ff:75:3a:ab:
                    64:23:6c:3c:0b:c4:44:ad:91:11:cf:ca:c3:4f:b4:
                    56:5b:73:0e:74:c8:80:4f:88:9e:d8:3b:96:71:a5:
                    67:97:57:d7:2b:b0:78:91:ab:73:c9:7f:3a:7e:de:
                    22:19:cf:10:4b:78:e5:96:81:79:8b:5c:be:fa:ff:
                    67:df:85:c6:e3:12:63:87:d4:ea:ba:73:fa:37:18:
                    a9:ad:06:e9:65:5c:b7:2c:55:e9:02:91:c6:df:25:
                    10:1f:e3:89:d5:6d:06:59:b3:4f:b4:00:fd:77:8e:
                    fd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A5:3F:E1:87:16:B9:F2:EC:2E:3D:09:CB:58:8C:59:8A:91:53:88
            X509v3 Authority Key Identifier:
                keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/GaU_4YcWufLsLj0Jy1iMWYqRU4g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.28.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:d1:4a:59:c8:02:cb:e1:fc:bd:dc:77:72:77:ec:c7:84:03:
         5b:57:10:9e:7d:e2:73:ea:4e:0f:f9:5a:6b:e6:e8:3b:7f:ab:
         70:0f:6f:9c:eb:93:73:80:81:b9:19:c3:07:c9:4e:68:00:c2:
         bc:4a:60:96:64:0e:08:f2:5d:08:72:42:a2:24:95:5b:38:e2:
         93:39:1f:8f:a3:99:38:88:3d:d9:77:bc:b1:e4:cb:c0:3c:69:
         f5:24:50:f3:cd:f1:30:fd:70:f0:59:8e:a0:ed:17:2d:37:a8:
         7a:17:ff:83:90:a1:de:70:27:91:ea:c5:24:05:2f:d9:11:2b:
         53:0b:9b:60:9e:c4:5a:cd:dd:25:87:67:30:2e:89:7e:39:95:
         0d:af:19:12:47:01:a3:e3:e0:f7:56:fa:af:42:7a:d7:c4:ad:
         ac:69:84:18:82:4b:65:c2:85:34:9d:e9:5a:a2:b5:eb:fc:3b:
         1f:33:47:ba:32:6d:53:8b:f8:c3:b5:90:33:d6:64:d5:ed:78:
         17:2b:83:c2:b5:50:65:e9:5f:3a:c6:79:4a:8a:bc:63:2e:83:
         1a:e7:f0:4f:2c:3b:aa:da:3c:d9:6f:99:25:a4:92:a3:59:3a:
         98:8a:22:74:c6:dc:19:b6:0c:cc:4a:12:6f:d2:e9:df:cb:a8:
         d9:f1:f0:43
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYloDVjfeYobmkHW6wPUK6x+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjMwNzE4MDgxMDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOWE1M2ZlMTg3MTZiOWYyZWMyZTNkMDljYjU4OGM1OThhOTE1Mzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2g1ZZVUCZCphwdfArY5vZZ3AEN+l
5OOiAY6FZcRn8dywCj//14rWrd+1cS38e2Er7V9eUaYNmtwWj6LpzVuhpUEMZdux
VmcvV1i7TFXENyBzfsj0x6ony93Yh5fxUOZ9tlYWHuz7aGi80/iZxdW/2LGtH6Z0
75wjU3vCF2MUgu5amOXP1ORFrUMYUg1M4XAgE/91OqtkI2w8C8RErZERz8rDT7RW
W3MOdMiAT4ie2DuWcaVnl1fXK7B4katzyX86ft4iGc8QS3jlloF5i1y++v9n34XG
4xJjh9TqunP6NxiprQbpZVy3LFXpApHG3yUQH+OJ1W0GWbNPtAD9d479BQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBmlP+GHFrny7C49CctYjFmKkVOIMB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvR2FVXzRZY1d1ZkxzTGowSnkxaU1XWXFSVTRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAURz/MA0G
CSqGSIb3DQEBCwUAA4IBAQC30UpZyALL4fy93Hdyd+zHhANbVxCefeJz6k4P+Vpr
5ug7f6twD2+c65NzgIG5GcMHyU5oAMK8SmCWZA4I8l0IckKiJJVbOOKTOR+Po5k4
iD3Zd7yx5MvAPGn1JFDzzfEw/XDwWY6g7RctN6h6F/+DkKHecCeR6sUkBS/ZEStT
C5tgnsRazd0lh2cwLol+OZUNrxkSRwGj4+D3VvqvQnrXxK2saYQYgktlwoU0nela
orXr/DsfM0e6Mm1Ti/jDtZAz1mTV7XgXK4PCtVBl6V86xnlKirxjLoMa5/BPLDuq
2jzZb5klpJKjWTqYiiJ0xtwZtgzMShJv0unfy6jZ8fBD
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:42 2024 by rpki-client on console-ams.rpki-client.org