Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/F5E2tDvVcHnDUljOEbzIxpUztaY.roa
File:                     F5E2tDvVcHnDUljOEbzIxpUztaY.roa (raw, json)
Hash identifier:          lMoOW0xIhlQAzJm5koMiQPPNaZDuXWUn0SFjD24Q6zQ=
Subject key identifier:   17:91:36:B4:3B:D5:70:79:C3:52:58:CE:11:BC:C8:C6:95:33:B5:A6
Certificate issuer:       /CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Certificate serial:       0185712774EFBBB198EC6DE05016D812211A
Authority key identifier: 0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/F5E2tDvVcHnDUljOEbzIxpUztaY.roa
Signing time:             Mon 02 Jan 2023 06:24:49 +0000
ROA not before:           Mon 02 Jan 2023 06:24:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15830
IP address blocks:        193.110.34.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 16:29:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:27:74:ef:bb:b1:98:ec:6d:e0:50:16:d8:12:21:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
        Validity
            Not Before: Jan  2 06:24:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=179136b43bd57079c35258ce11bcc8c69533b5a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:91:c2:17:51:13:81:a6:6a:7e:e5:e0:92:27:
                    99:1d:c1:be:b7:49:8a:5b:87:65:c0:3b:06:d3:d3:
                    01:7f:e8:63:09:4e:f4:fa:33:a6:ec:bb:36:ed:9e:
                    1d:37:bf:e9:6e:3c:93:51:3b:32:40:e2:9b:51:39:
                    81:4d:30:9b:e9:8f:47:eb:a8:c7:70:b1:a6:70:e7:
                    3b:09:09:6d:a7:1d:ef:b5:7e:51:b8:df:7a:3c:3b:
                    c8:1e:4e:68:e8:f6:ae:d9:20:62:b7:2d:de:6f:3f:
                    a7:94:1f:f3:ca:c2:a8:20:16:3f:43:ec:f5:aa:26:
                    c0:0f:a8:29:2b:ec:58:1e:02:e1:bf:e0:f8:8c:e6:
                    f0:85:9d:43:45:56:19:0c:d3:04:42:a2:d5:82:b6:
                    69:75:d0:5a:da:c6:94:2b:e2:2d:31:0f:64:76:35:
                    e5:28:05:8d:d7:5c:6f:7b:91:2f:60:ef:61:ef:fc:
                    64:05:07:de:98:72:88:54:3a:88:81:93:27:fd:f8:
                    86:1b:75:c6:e5:fc:bc:0a:5b:38:b8:4c:3e:c8:95:
                    49:0b:9e:17:62:bd:0c:76:0a:3b:ed:8a:a4:d6:45:
                    fd:e6:e8:ac:28:32:65:e1:7f:5d:92:7d:39:ad:7f:
                    9b:07:ad:73:10:17:b3:81:cb:ca:e9:d1:d2:d9:02:
                    a6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:91:36:B4:3B:D5:70:79:C3:52:58:CE:11:BC:C8:C6:95:33:B5:A6
            X509v3 Authority Key Identifier:
                keyid:0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/F5E2tDvVcHnDUljOEbzIxpUztaY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.110.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:2e:24:68:ed:89:ab:0d:48:4d:27:db:b4:15:c0:1d:0f:3b:
         f2:bc:e3:db:da:b7:1d:eb:52:9a:71:1d:4a:e3:cc:d4:1b:2b:
         65:4b:68:80:c6:76:cb:a3:1b:31:b5:40:d3:d9:16:87:ff:d1:
         9b:e4:26:05:74:c8:d7:e8:cd:a2:34:7c:d2:bb:84:d2:0e:7a:
         bd:6b:66:05:a7:54:57:f3:27:a3:d4:c8:a2:52:6a:ec:c1:97:
         a3:89:7d:d8:d7:44:97:a0:39:50:c4:bc:bd:ef:e7:14:0a:38:
         c0:97:44:4f:86:bf:a2:6e:5c:ab:97:bf:1c:fa:96:bd:ba:6b:
         b5:1e:b9:5b:40:5f:ea:9b:ae:04:24:4d:57:0d:db:2f:e2:c4:
         5d:6c:15:3e:e1:87:35:6d:a8:78:31:75:a8:11:14:59:79:eb:
         b6:ef:c6:ef:06:08:13:06:5c:c7:12:67:69:0f:03:a3:bf:83:
         93:e8:da:a3:84:c1:08:9a:18:d9:5e:dc:88:14:fe:90:5f:8b:
         89:b8:98:ea:57:e1:1f:14:cf:1e:22:f3:e0:3f:03:cf:d6:52:
         d5:e1:68:36:37:a8:c7:b9:a0:fd:a2:69:5a:27:1b:1d:10:69:
         37:94:5d:45:8a:7b:e0:99:c6:69:9a:32:7d:67:e3:c0:76:06:
         6f:77:94:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:29 2024 by rpki-client on console-fra.rpki-client.org