Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/6wRG9ucTWOqXGeUGMCW1T5e5G8Q.roa
File:                     6wRG9ucTWOqXGeUGMCW1T5e5G8Q.roa (raw, json)
Hash identifier:          55fYckkV8SMhQp503wsj/5Mt5f7yvEJgH80OJmwwbwY=
Subject key identifier:   EB:04:46:F6:E7:13:58:EA:97:19:E5:06:30:25:B5:4F:97:B9:1B:C4
Certificate issuer:       /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial:       018655C4E6CF5774A1D5A21CBF711FD83CAA
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/6wRG9ucTWOqXGeUGMCW1T5e5G8Q.roa
Signing time:             Wed 15 Feb 2023 15:50:12 +0000
ROA not before:           Wed 15 Feb 2023 15:50:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204843
IP address blocks:        5.180.179.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 17 Apr 2023 12:32:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:55:c4:e6:cf:57:74:a1:d5:a2:1c:bf:71:1f:d8:3c:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
        Validity
            Not Before: Feb 15 15:50:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eb0446f6e71358ea9719e5063025b54f97b91bc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:99:cf:d3:4d:2c:35:e0:50:58:a3:9d:b7:40:
                    a3:de:70:1e:7e:e8:42:20:51:cb:28:a9:75:85:bd:
                    c1:02:7e:71:88:bd:94:25:5b:a9:28:9a:b3:68:3f:
                    21:0c:52:83:b5:06:90:c1:9d:03:78:b8:5f:85:a1:
                    67:98:55:f1:31:e5:c7:6b:41:2f:7d:56:12:3e:7b:
                    68:f2:e3:68:df:6f:67:5b:37:37:7a:cd:25:bf:4d:
                    3d:aa:28:64:f4:04:6d:aa:a0:c1:6d:eb:5c:58:e5:
                    6a:18:54:1a:89:9e:40:f0:99:82:1a:8b:ad:fa:35:
                    1c:c3:16:c1:05:b2:aa:92:88:e3:d6:95:60:1e:a0:
                    01:4f:89:9a:90:ab:2a:85:24:36:a1:b8:a6:7d:6d:
                    9d:3b:23:6a:64:bb:8b:0c:35:5d:af:5f:40:38:a1:
                    09:6d:51:8a:8c:c4:87:3c:78:12:50:35:0f:9c:eb:
                    72:89:d9:f9:cd:71:82:6d:50:6a:30:a5:52:de:ee:
                    6a:1e:7a:b4:42:6e:9c:00:2f:1c:28:20:44:3b:5f:
                    62:5d:f4:3d:72:c6:23:ee:11:c9:88:c5:e1:93:85:
                    96:46:63:63:dd:f7:a6:51:3b:b9:76:ce:ba:eb:6f:
                    ab:a5:be:da:23:49:fa:e2:c6:2b:c2:e6:a7:8d:6c:
                    36:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:04:46:F6:E7:13:58:EA:97:19:E5:06:30:25:B5:4F:97:B9:1B:C4
            X509v3 Authority Key Identifier:
                keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/6wRG9ucTWOqXGeUGMCW1T5e5G8Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:06:99:25:ce:da:33:c8:5d:9f:fd:8d:eb:71:e2:dc:5b:41:
         46:e6:f5:01:ed:26:f7:9a:39:d0:95:32:d7:d3:3c:54:69:ef:
         55:00:b1:09:33:d1:69:d7:1e:74:e7:75:43:78:ce:09:fc:e8:
         f6:f2:e8:5f:56:62:f7:96:4f:56:79:b5:00:88:ad:87:4a:6b:
         ba:d4:04:5d:8d:54:81:20:c0:5a:31:ea:d6:1b:2e:88:f3:82:
         ca:bc:3d:8d:4e:51:c5:9d:0a:2d:f4:36:39:dc:4c:78:ba:b4:
         e9:0e:59:78:ec:b4:c2:d3:b9:19:91:17:68:6f:7d:ce:1e:0a:
         07:59:47:43:c2:74:f2:84:49:de:cf:04:64:88:7e:13:1c:51:
         15:c5:72:a3:fb:b0:57:64:93:0b:a3:a2:0a:a5:7e:c4:bc:6a:
         8e:79:ba:6e:32:5c:ff:1b:50:d0:81:fa:c8:f3:5f:aa:cf:53:
         16:f9:7f:7b:c1:41:68:0b:c9:4b:76:e5:15:87:95:fd:e9:6b:
         e3:25:96:e6:de:61:51:72:6e:17:a9:35:35:88:65:96:df:bc:
         f4:df:2a:e0:4a:a2:ac:39:70:6a:ce:73:02:e6:13:37:83:a7:
         a0:2a:da:50:8d:2b:72:0d:4b:25:51:ff:1f:a5:36:e5:c5:10:
         a2:3b:cc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:14 2024 by rpki-client on console-fra.rpki-client.org