Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/eqN1FMwh-Oe7aNXnRoaX4H2z_Uc.roa
File:                     eqN1FMwh-Oe7aNXnRoaX4H2z_Uc.roa (raw, json)
Hash identifier:          icR2VgeKpq1pcO2b9j0bNuSPr/4XSWYSIRhju0Ggfk8=
Subject key identifier:   7A:A3:75:14:CC:21:F8:E7:BB:68:D5:E7:46:86:97:E0:7D:B3:FD:47
Certificate issuer:       /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial:       018A98290A613797600EAD56C9535753978B
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/eqN1FMwh-Oe7aNXnRoaX4H2z_Uc.roa
Signing time:             Fri 15 Sep 2023 09:25:40 +0000
ROA not before:           Fri 15 Sep 2023 09:25:40 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51610
IP address blocks:        213.175.77.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:98:29:0a:61:37:97:60:0e:ad:56:c9:53:57:53:97:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
        Validity
            Not Before: Sep 15 09:25:40 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7aa37514cc21f8e7bb68d5e7468697e07db3fd47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:38:5f:9d:e4:7b:d5:bd:60:95:b0:54:9b:7d:
                    b8:cd:bc:08:3a:89:55:1f:c0:bb:fe:22:83:8a:15:
                    21:2e:da:db:a8:b1:4f:aa:41:b9:3b:68:f1:27:90:
                    66:1e:c0:5c:0b:af:88:3f:5b:47:14:67:14:68:73:
                    1f:d6:a9:dd:a7:16:2a:bc:2a:f8:bf:f0:7d:ba:28:
                    4e:4c:27:f5:4e:9e:a7:95:77:cb:df:11:a3:ab:4d:
                    a5:2b:22:e5:d7:b0:26:f2:e5:02:cd:25:87:84:4a:
                    56:6d:4b:6a:35:85:4f:aa:cf:72:b3:a0:ce:a6:fc:
                    72:57:10:ef:8a:b1:06:e9:78:74:b7:d1:ed:96:27:
                    2e:f8:34:5e:d9:e3:80:e6:49:3d:c1:50:7e:e2:1e:
                    b9:a3:48:64:e9:ef:16:f8:a4:c6:eb:c6:ed:02:bb:
                    34:14:c9:67:44:c7:dd:99:24:ae:97:f8:13:5a:cc:
                    58:ca:cf:3f:40:08:11:37:d7:7b:b7:44:64:c8:21:
                    d5:21:29:43:66:bc:33:57:e8:fa:f4:cf:c5:7a:aa:
                    84:ca:6c:15:e2:47:e4:06:76:de:25:2c:80:37:1a:
                    b1:89:8c:f5:a2:86:a4:79:30:69:21:e5:c4:6b:c2:
                    09:db:20:e3:23:91:d6:de:50:97:7b:fa:9a:22:23:
                    a3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A3:75:14:CC:21:F8:E7:BB:68:D5:E7:46:86:97:E0:7D:B3:FD:47
            X509v3 Authority Key Identifier:
                keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/eqN1FMwh-Oe7aNXnRoaX4H2z_Uc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.175.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:43:a0:14:14:41:8e:88:c2:d2:e7:88:6f:29:1d:c3:8b:41:
         ea:6e:e4:bc:cb:41:c4:78:01:25:d1:d6:ff:15:07:d1:dd:17:
         10:8e:2a:49:80:5b:ba:15:5a:db:88:e1:7a:99:2e:53:76:5d:
         a5:20:79:18:4a:53:5f:bc:bc:d0:a2:eb:b6:17:c9:81:b8:40:
         c6:1f:10:2f:6b:77:03:08:9d:be:c0:eb:7d:f4:fa:4a:a5:ac:
         d9:cb:32:50:d6:9a:b4:4b:dd:92:1d:e8:d4:0f:e4:df:62:b4:
         6a:3f:c6:e8:88:ff:36:aa:74:9e:23:72:cf:17:b7:49:71:e8:
         2a:ab:0e:4e:02:8e:48:9a:45:ba:2b:bd:ce:66:24:95:39:7a:
         5b:b2:90:01:69:94:4e:b3:b1:e6:47:e6:2b:66:d9:78:04:29:
         28:30:30:f3:77:51:bf:6a:b1:24:76:82:30:b2:0e:78:97:9a:
         30:e5:b3:f1:ce:a8:6f:0e:24:47:71:a3:94:e5:fa:97:e6:c3:
         5b:93:ed:34:3e:7e:60:ff:a0:81:cb:9a:1c:94:d1:bc:e3:59:
         04:7e:66:ff:0c:d9:0b:b0:41:da:a3:35:85:c4:e7:c7:6e:3c:
         45:9c:62:35:f0:ec:78:1f:f2:f4:e3:d1:0c:2b:dc:0a:bd:74:
         74:3a:ad:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:47 2024 by rpki-client on console-ams.rpki-client.org