Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/AX-6gufrQZJjND4AGgwKuGYTTWg.roa
File:                     AX-6gufrQZJjND4AGgwKuGYTTWg.roa (raw, json)
Hash identifier:          Hux48VZESkhFZi9Yyik+hrtWWeP1o2VMbEE9sBi/MBg=
Subject key identifier:   01:7F:BA:82:E7:EB:41:92:63:34:3E:00:1A:0C:0A:B8:66:13:4D:68
Certificate issuer:       /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial:       018BD37058C7CC4C6DCA299183FF22DD31A9
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/AX-6gufrQZJjND4AGgwKuGYTTWg.roa
Signing time:             Wed 15 Nov 2023 14:43:57 +0000
ROA not before:           Wed 15 Nov 2023 14:43:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60064
IP address blocks:        146.19.7.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:d3:70:58:c7:cc:4c:6d:ca:29:91:83:ff:22:dd:31:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
        Validity
            Not Before: Nov 15 14:43:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=017fba82e7eb419263343e001a0c0ab866134d68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:75:b4:6e:83:30:49:6f:5d:07:65:83:10:b9:
                    07:64:a0:08:84:53:41:4c:ac:94:25:65:9e:fe:fc:
                    1c:8d:36:e2:31:a1:f8:66:61:2c:c8:0a:40:5f:0f:
                    7e:84:cb:0a:2c:34:12:32:36:c6:88:50:04:28:22:
                    56:4a:b7:5b:09:73:d6:74:a7:ff:6f:3d:a0:cc:66:
                    97:50:3a:a1:3c:7b:3f:73:5e:6c:ee:ec:89:18:3c:
                    0c:9e:01:c0:cc:28:e3:4d:87:fc:c9:81:35:92:34:
                    be:4c:0a:67:2d:77:4c:c1:e8:8c:84:da:c1:1b:d7:
                    e2:f9:48:9d:f8:ba:97:a3:d8:76:ca:14:c4:17:7c:
                    7b:52:e5:17:30:03:70:8a:df:12:c0:6c:15:d0:47:
                    e0:17:3d:26:6d:57:3b:8c:3a:41:3d:24:a3:4a:b1:
                    1f:e2:22:a4:90:4d:4a:bf:d5:dd:67:1d:66:82:78:
                    5e:62:69:c4:bb:73:83:5e:75:c4:2a:5f:a9:ac:ba:
                    99:77:36:99:fd:cb:53:f8:1b:d4:c4:7d:f0:07:98:
                    95:a9:bb:8d:fe:57:71:8c:77:e8:e6:a4:3f:48:c2:
                    42:70:a0:34:d0:38:f6:76:01:12:41:d3:5a:4b:b6:
                    ac:23:0a:9a:fe:bb:0f:83:4f:3c:a4:ef:49:f8:37:
                    a0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:7F:BA:82:E7:EB:41:92:63:34:3E:00:1A:0C:0A:B8:66:13:4D:68
            X509v3 Authority Key Identifier:
                keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/AX-6gufrQZJjND4AGgwKuGYTTWg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.19.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:aa:7b:ae:4d:2c:2a:fb:54:76:57:5a:25:cb:0e:91:25:41:
         70:38:00:42:ee:92:dc:d4:a3:c6:22:e3:18:6f:bb:97:3d:1e:
         e7:0b:f8:f1:94:9e:84:bf:4b:aa:40:7b:df:b4:8f:6a:0d:da:
         9e:f4:73:ce:08:69:42:fa:d1:46:4d:44:87:9a:78:d2:c9:7f:
         5f:b8:19:1a:f7:ac:81:41:71:1b:ed:96:b0:89:f1:63:65:ae:
         f0:44:60:77:17:f3:57:6b:0e:48:ac:d7:44:2b:02:99:5f:6c:
         ae:da:6a:bd:1b:fc:e4:c8:28:c3:44:4d:69:89:74:ff:c2:30:
         5a:46:90:e8:f1:64:1e:b1:df:a1:f6:b0:7e:23:7e:69:1c:39:
         8d:a1:11:26:b1:5a:e7:51:2b:6f:d3:dc:3e:15:f1:ea:52:2b:
         e3:c0:49:9c:87:d5:68:8f:3e:d1:03:b2:3d:c6:b4:75:52:94:
         3e:a8:62:7c:00:86:5f:64:4e:69:da:05:ab:92:08:86:02:81:
         4b:e3:9f:cf:e6:34:ad:63:1b:a4:bb:dc:12:ae:49:75:23:72:
         3e:64:97:a6:c2:7a:d2:a7:39:23:33:24:5c:a5:f9:f7:2c:7f:
         b1:52:86:08:fd:cb:91:20:16:bd:f0:b2:3f:69:2f:4c:89:04:
         57:e0:2c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:06 2024 by rpki-client on console-ams.rpki-client.org