Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/TZX8SHzHoh4-YTIoPiCHqVEIB7o.roa
File:                     TZX8SHzHoh4-YTIoPiCHqVEIB7o.roa (raw, json)
Hash identifier:          0SkJeTHFJdzH4UcD65plti3tqLra93TVvykyMpCwni0=
Subject key identifier:   4D:95:FC:48:7C:C7:A2:1E:3E:61:32:28:3E:20:87:A9:51:08:07:BA
Certificate issuer:       /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial:       018B1548D2F847733C543B108695532815A0
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/TZX8SHzHoh4-YTIoPiCHqVEIB7o.roa
Signing time:             Mon 09 Oct 2023 16:32:55 +0000
ROA not before:           Mon 09 Oct 2023 16:32:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        5.180.82.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 11 Oct 2023 17:18:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:15:48:d2:f8:47:73:3c:54:3b:10:86:95:53:28:15:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
        Validity
            Not Before: Oct  9 16:32:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4d95fc487cc7a21e3e6132283e2087a9510807ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:be:95:09:5f:2d:18:9d:45:98:0f:3e:d2:83:
                    d1:3f:8f:4d:e6:a3:79:c3:87:2a:47:eb:72:f5:b6:
                    25:68:9e:3b:c1:57:cd:83:a4:6c:57:b6:53:fa:48:
                    bc:5e:e3:62:bd:a0:b8:0b:af:18:6d:0b:64:a5:36:
                    e7:21:d7:36:4c:29:63:fa:1d:21:7e:b3:42:60:bb:
                    5d:8e:be:46:d2:ac:ac:37:77:0a:10:31:ca:ed:a6:
                    95:e3:6a:03:d5:47:c5:46:37:05:a9:8f:bb:bb:57:
                    09:bc:fe:f4:fb:41:e1:48:27:23:09:3d:d9:c7:0d:
                    8a:e3:26:c4:3f:00:00:b4:45:8c:e7:65:b7:6c:fa:
                    dc:95:e4:dd:d4:29:1f:1d:0b:ac:b6:c3:a8:a6:c8:
                    6b:b5:1c:52:bc:b2:fa:87:90:ec:f6:7e:06:3c:36:
                    5d:5c:52:d0:2e:64:24:95:d1:f4:89:93:c3:db:3e:
                    08:be:7d:80:99:6c:f4:8a:54:97:93:12:d1:2d:fd:
                    43:64:29:8a:77:17:cc:bd:b7:39:1d:8b:12:73:f8:
                    b3:b8:85:02:24:87:b8:04:29:85:ed:65:f0:d6:71:
                    1a:ca:90:94:4d:62:be:f8:5e:55:b9:e8:f9:e9:70:
                    e6:cd:0f:37:69:b2:e6:f5:66:35:87:b4:1d:af:9e:
                    cd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:95:FC:48:7C:C7:A2:1E:3E:61:32:28:3E:20:87:A9:51:08:07:BA
            X509v3 Authority Key Identifier:
                keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/TZX8SHzHoh4-YTIoPiCHqVEIB7o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:1f:7f:bb:3e:a3:d1:98:39:5c:f9:59:a8:ec:a4:1d:76:e1:
         27:56:2c:ec:d3:56:5c:ac:82:1b:b4:08:66:d4:47:6b:f5:1f:
         27:9a:e8:ce:ee:4b:f3:90:f6:c8:21:2e:07:27:a9:28:2f:d2:
         c4:c0:5b:d8:c3:24:ef:d2:6f:74:29:e5:1b:91:e4:4f:33:23:
         76:33:fa:b2:50:a1:ee:4d:73:0e:d3:26:93:d8:b2:bd:6b:74:
         90:85:80:94:db:07:3a:8e:15:ec:5b:b7:03:d1:e0:29:de:3f:
         65:a3:98:cb:12:8a:68:fa:f6:22:69:de:0a:d9:3d:a6:59:b4:
         b0:25:75:1a:4d:66:03:de:1c:ed:1b:b7:ba:fa:cf:53:5c:a4:
         cd:3b:5a:08:21:bf:4d:bf:65:c2:5a:e5:a3:b4:6e:ed:44:10:
         29:68:9b:53:b7:39:47:71:19:41:31:a3:fe:db:dd:6a:cf:eb:
         af:28:3d:df:82:51:4d:51:2f:b0:37:a1:ab:d5:70:cb:0d:39:
         a3:1d:a2:d7:78:ea:93:2e:ce:ca:96:10:0f:23:8b:b2:4e:dd:
         25:d0:14:a1:07:70:28:6d:9f:75:92:08:f6:11:2e:d8:b7:f0:
         a6:30:0f:f6:27:19:cc:05:f3:0d:93:22:70:0a:82:05:42:4c:
         59:05:66:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:24 2024 by rpki-client on console-fra.rpki-client.org