Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/JR0Wx1SHHKx5U_bbNb4cZlWJRU0.roa
File:                     JR0Wx1SHHKx5U_bbNb4cZlWJRU0.roa (raw, json)
Hash identifier:          vEftOYnQyv5vPdtOxR7++KTpVXMg2P3AxJfRXmA8/HI=
Subject key identifier:   25:1D:16:C7:54:87:1C:AC:79:53:F6:DB:35:BE:1C:66:55:89:45:4D
Certificate issuer:       /CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Certificate serial:       01857102CD441992522AA402C40D1D2CCFFD
Authority key identifier: 9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/JR0Wx1SHHKx5U_bbNb4cZlWJRU0.roa
Signing time:             Mon 02 Jan 2023 05:44:47 +0000
ROA not before:           Mon 02 Jan 2023 05:44:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     12302
IP address blocks:        194.102.127.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 08:30:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:02:cd:44:19:92:52:2a:a4:02:c4:0d:1d:2c:cf:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
        Validity
            Not Before: Jan  2 05:44:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=251d16c754871cac7953f6db35be1c665589454d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fe:14:cd:a9:20:a3:98:60:35:7f:f6:98:fc:
                    7e:d7:eb:c6:50:19:3e:02:cf:9c:17:2c:aa:4e:51:
                    c9:ac:c9:90:87:97:27:61:0c:af:9f:2e:20:cc:1d:
                    a1:1e:e2:ab:21:17:e3:23:f1:21:75:1c:75:9c:ec:
                    a4:54:48:9a:f8:21:fa:2d:35:ae:cb:b3:bf:97:a8:
                    01:a7:a4:0c:69:a4:51:6f:90:f5:ac:92:1b:84:5b:
                    25:9e:8f:8c:c2:a5:9f:12:3a:4b:eb:fd:50:84:60:
                    a7:de:1d:f5:4b:f0:c1:f3:f7:65:55:e6:1f:0e:85:
                    9b:80:03:ae:25:c1:6f:8c:ce:af:b3:ed:58:79:d0:
                    e3:70:bd:df:79:c4:ac:d4:11:cf:fe:37:b1:3a:ed:
                    0a:74:df:5e:f9:41:49:da:ad:55:9e:44:fe:53:5b:
                    5a:fa:1f:e9:af:d5:7c:41:53:3d:5e:25:1f:32:7f:
                    83:78:8f:2b:6b:14:44:2f:5e:6d:0f:93:57:f8:f3:
                    c4:fc:cf:3d:4b:77:84:f2:cb:26:e4:cb:46:22:de:
                    34:c5:13:70:a1:25:88:e2:e0:cc:ec:a5:d2:0c:45:
                    7b:a3:20:e6:6b:74:a4:31:dc:09:96:72:0a:dc:17:
                    bd:89:9d:d1:2a:90:e1:15:0b:e3:62:85:19:1f:04:
                    b4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:1D:16:C7:54:87:1C:AC:79:53:F6:DB:35:BE:1C:66:55:89:45:4D
            X509v3 Authority Key Identifier:
                keyid:9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/JR0Wx1SHHKx5U_bbNb4cZlWJRU0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.102.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:be:8d:45:2d:70:05:f6:1b:10:ce:09:c2:17:f2:5a:29:62:
         20:c2:44:8e:ee:03:82:61:20:7d:62:7f:7e:a6:86:4c:7c:1b:
         49:8e:26:aa:f5:0f:39:bd:a6:e2:00:3b:65:55:0f:5b:f4:23:
         60:05:74:14:29:e6:f4:74:f8:a4:2c:2d:d2:ea:77:cd:b6:1c:
         7b:45:8e:c6:45:7a:5f:18:ad:b1:43:dc:e8:55:24:02:ce:e2:
         75:a2:95:17:0a:fc:60:56:06:05:76:d1:da:09:0b:95:f8:d7:
         22:84:5f:f2:40:e9:1c:e0:c6:b1:ba:e5:bb:4f:cd:66:c2:a9:
         a0:6b:4c:ec:ca:d1:a7:60:be:41:a2:f3:9b:12:6f:72:92:13:
         78:9a:2c:de:14:46:44:ef:c2:c2:4c:02:93:04:a7:fb:80:a6:
         69:4c:59:92:62:76:62:14:d5:78:18:bf:5e:b5:bb:e1:0f:31:
         ed:11:13:86:88:73:fb:62:8c:5b:c3:7b:3f:5a:e0:d8:da:4c:
         fe:6b:fc:31:47:17:23:23:68:16:aa:48:6d:6b:f8:24:aa:20:
         d2:ed:a3:07:ee:8d:b7:d7:cb:63:af:77:db:a2:62:8c:75:b6:
         10:f7:6e:89:64:50:33:2f:e1:b0:9f:4b:2d:04:ee:8f:85:a7:
         0a:af:59:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:45 2024 by rpki-client on console-ams.rpki-client.org