Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Jxd5yVfPq92rStqFdoq3c5Nj4aw.roa
File:                     Jxd5yVfPq92rStqFdoq3c5Nj4aw.roa (raw, json)
Hash identifier:          QQxZXIsWjFlATs3CPdpjCKcusT5NWTJAB6XtATnweLs=
Subject key identifier:   27:17:79:C9:57:CF:AB:DD:AB:4A:DA:85:76:8A:B7:73:93:63:E1:AC
Certificate issuer:       /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial:       01912749F9445F86822ECBFE489ABCB5FA52
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Jxd5yVfPq92rStqFdoq3c5Nj4aw.roa
Signing time:             Tue 06 Aug 2024 10:44:04 +0000
ROA not before:           Tue 06 Aug 2024 10:44:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     60117
IP address blocks:        5.180.233.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 02 Sep 2024 12:25:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:27:49:f9:44:5f:86:82:2e:cb:fe:48:9a:bc:b5:fa:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
        Validity
            Not Before: Aug  6 10:44:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=271779c957cfabddab4ada85768ab7739363e1ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0b:71:2f:c0:fc:e8:56:37:93:a7:62:a3:e9:
                    5c:9b:91:3b:e8:f9:57:03:a7:39:00:26:ce:ba:d5:
                    2b:6c:50:fb:f8:fd:8e:d0:40:fd:0e:77:09:18:14:
                    48:49:dc:6e:aa:c6:84:d9:c1:da:b9:a0:43:53:de:
                    fd:10:ef:3c:5d:60:d0:bd:f0:9f:8d:f2:0d:d6:ac:
                    2a:b9:b5:73:b9:85:cb:17:07:46:b2:05:79:07:a9:
                    2b:d0:17:66:c3:30:6b:d7:ac:45:44:af:2f:9f:5b:
                    01:94:4a:7c:7c:3b:7e:51:7e:c3:c6:70:64:4c:f3:
                    99:41:13:e3:07:91:26:fd:89:da:df:2a:91:80:91:
                    30:2b:01:1b:31:7c:f5:70:19:26:45:79:b1:c6:aa:
                    3f:d3:b0:e1:65:6f:38:bc:1f:97:7e:03:43:3c:f9:
                    30:ec:4e:0a:0d:a2:c4:7b:bd:ab:f7:24:a6:20:92:
                    30:68:cf:72:67:2c:4a:71:8c:f3:09:86:40:f8:ae:
                    85:c0:9e:68:69:93:6f:b5:20:10:7c:8e:52:16:ad:
                    d7:b6:88:53:33:e8:d6:11:32:6e:f2:d4:29:bc:47:
                    fb:66:46:6f:2b:0f:29:79:43:9e:e1:7d:c0:1f:1a:
                    c5:83:90:b2:9e:64:c8:22:14:e0:85:31:94:99:dc:
                    2f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:17:79:C9:57:CF:AB:DD:AB:4A:DA:85:76:8A:B7:73:93:63:E1:AC
            X509v3 Authority Key Identifier:
                keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Jxd5yVfPq92rStqFdoq3c5Nj4aw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:7e:34:50:4f:2b:b3:4d:0a:f7:16:81:99:1d:e8:85:7a:24:
         0e:fc:88:78:f2:ed:19:c6:df:a9:43:47:f0:a6:72:86:e1:47:
         9e:56:39:b0:77:23:93:ed:b4:49:77:e7:27:e2:fc:2c:8d:f8:
         c7:f5:36:9a:ad:24:76:d6:1e:ff:ab:f8:29:f6:4b:55:73:7b:
         71:b1:92:53:d3:e1:9e:78:20:75:33:e1:39:4c:b0:e1:0c:ac:
         71:33:fd:cd:1b:08:8c:ee:6b:a9:53:54:fe:b7:ac:a1:94:ed:
         2c:b9:6d:b6:24:80:7d:89:7c:b8:f1:10:69:6d:99:6c:d9:68:
         59:0c:65:54:2e:52:6a:69:8a:de:33:9d:02:03:91:e4:16:d5:
         c7:63:a1:ec:2e:0f:af:80:e0:25:ec:d8:e5:44:7d:8b:94:e2:
         83:de:a5:cc:51:20:0b:3b:08:a3:1d:30:a1:0f:08:8f:7a:7d:
         23:cf:f4:d3:ec:35:be:bb:6e:a6:05:39:89:27:be:ec:2f:9b:
         fc:6f:4c:3a:29:7c:de:7e:10:d0:b0:3c:b6:7c:43:c3:c8:2f:
         07:ee:b6:9f:29:23:41:9f:e9:34:8a:c6:69:2c:22:b1:5a:25:
         5e:5c:2b:88:fb:e2:62:0e:19:c0:09:18:0d:5a:69:7d:fc:0f:
         75:da:69:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 15:00:47 2024 by rpki-client on console-fra.rpki-client.org