Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/mEwzsMPN5aPNQZSxhvLS3zPrVjo.roa
File:                     mEwzsMPN5aPNQZSxhvLS3zPrVjo.roa (raw, json)
Hash identifier:          tFkf7GxiLPLQkQjo3j3j5ZBw+U+eiQMuxpdPlUoNs8o=
Subject key identifier:   98:4C:33:B0:C3:CD:E5:A3:CD:41:94:B1:86:F2:D2:DF:33:EB:56:3A
Certificate issuer:       /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial:       01856F5DBA14F80D2863338FBCE9441B3D3E
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/mEwzsMPN5aPNQZSxhvLS3zPrVjo.roa
Signing time:             Sun 01 Jan 2023 22:04:51 +0000
ROA not before:           Sun 01 Jan 2023 22:04:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59961
IP address blocks:        87.107.50.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 14:34:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:5d:ba:14:f8:0d:28:63:33:8f:bc:e9:44:1b:3d:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
        Validity
            Not Before: Jan  1 22:04:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=984c33b0c3cde5a3cd4194b186f2d2df33eb563a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b4:e0:82:88:43:3c:42:76:c9:a3:46:00:ca:
                    5d:66:04:d8:81:16:2c:ae:50:a7:d5:95:36:ed:d9:
                    f3:4d:6e:60:3f:fb:eb:1d:04:fc:6f:13:1c:78:4b:
                    35:5b:15:7d:1b:f1:06:9e:f0:ac:6e:c9:a7:86:e6:
                    06:ad:55:96:0e:35:a7:89:5d:32:f5:52:90:58:0f:
                    0c:ba:c0:0d:33:05:5e:f5:28:c3:a9:85:68:51:81:
                    25:5e:c5:02:81:8b:4b:32:98:6d:ed:86:50:32:1e:
                    61:c4:1e:e3:82:ae:ec:38:9b:0d:a1:32:42:ec:1d:
                    a3:9f:7a:83:ef:a4:65:2c:86:63:45:39:ea:27:0b:
                    e5:2e:d9:99:c2:2c:a2:7f:f2:7b:76:57:a7:b6:9e:
                    dc:cf:d9:29:1d:c1:4f:5c:58:74:5e:a1:90:6d:79:
                    21:c8:12:6c:94:09:4c:7f:e0:01:ba:9e:86:ee:4e:
                    6b:1f:8c:21:1c:22:74:9e:f1:4e:d1:1b:e9:79:e2:
                    b9:0d:c8:53:17:4d:8b:8c:46:e2:70:d5:74:a9:bc:
                    b4:e1:80:19:17:4a:08:3e:b4:b7:a2:b6:cb:c4:30:
                    46:40:83:81:da:2f:07:54:9c:0c:a4:5a:c8:c9:1e:
                    ed:1b:2c:9d:f0:c4:df:c7:72:8e:5d:96:1b:81:b8:
                    33:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:4C:33:B0:C3:CD:E5:A3:CD:41:94:B1:86:F2:D2:DF:33:EB:56:3A
            X509v3 Authority Key Identifier:
                keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/mEwzsMPN5aPNQZSxhvLS3zPrVjo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.107.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:5d:c8:56:4c:2a:83:55:c4:c2:26:16:7d:14:af:41:9e:df:
         94:30:b4:24:ed:5e:0f:9b:34:a4:a8:12:55:bc:ef:ca:40:81:
         db:7e:49:1c:23:98:f3:65:75:29:17:f1:95:d9:fa:53:36:94:
         af:46:6c:56:9b:d8:78:d9:d8:2a:f6:63:7d:8e:20:c7:7b:86:
         be:15:8a:41:ee:69:b7:99:f8:2a:32:25:b9:32:5b:ea:fd:08:
         18:93:8c:39:7f:ab:ab:0e:5b:32:d9:71:8a:40:6a:8e:16:b8:
         a1:45:1e:e5:83:e4:0c:58:8b:83:ac:4f:f9:78:9c:d6:72:44:
         12:f8:54:a5:a8:7c:13:4b:03:44:74:3f:c4:9f:b3:c5:42:c3:
         75:3f:65:3e:6f:7c:1e:c6:1d:32:ee:c0:6c:58:0d:c1:72:c2:
         c2:24:f3:6a:f6:75:ce:50:fd:a0:fd:3c:a0:78:b5:0d:14:ed:
         ef:fb:32:a3:98:1d:cc:c6:2c:51:a8:70:45:fc:7a:09:23:a0:
         8a:50:4b:02:7e:ca:83:77:a2:eb:52:7c:80:9d:27:ae:8c:8b:
         f2:fb:19:69:95:f7:df:cd:7c:cc:12:23:0b:85:a2:e6:18:27:
         6a:79:f4:6b:bd:4f:62:69:be:ae:9b:b7:54:2d:07:e6:6c:10:
         b8:11:ed:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:59 2024 by rpki-client on console-ams.rpki-client.org