Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/r2IjbB8VzzlIn3pt3ocjioeHbgc.roa
File:                     r2IjbB8VzzlIn3pt3ocjioeHbgc.roa (raw, json)
Hash identifier:          MRncilGlb74BWlCdgmNQoEbKhwajN1jkiS5Fb9kLeCU=
Subject key identifier:   AF:62:23:6C:1F:15:CF:39:48:9F:7A:6D:DE:87:23:8A:87:87:6E:07
Certificate issuer:       /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
Certificate serial:       018573F198C555C2153B316A4776E0804E36
Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/r2IjbB8VzzlIn3pt3ocjioeHbgc.roa
Signing time:             Mon 02 Jan 2023 19:24:51 +0000
ROA not before:           Mon 02 Jan 2023 19:24:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     58269
IP address blocks:        87.246.183.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:f1:98:c5:55:c2:15:3b:31:6a:47:76:e0:80:4e:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491
        Validity
            Not Before: Jan  2 19:24:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=af62236c1f15cf39489f7a6dde87238a87876e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:33:65:0d:12:2d:2c:1b:d2:83:79:28:08:6d:
                    b2:0a:8c:ff:21:17:1e:a8:66:d0:e0:e0:31:f0:ef:
                    c0:b7:fe:61:f9:16:e2:9e:f6:bf:50:f5:e6:3e:2a:
                    b3:b2:bb:69:a5:9c:78:be:46:ad:e3:dc:30:2e:0a:
                    7f:9d:57:a2:78:38:44:b6:d1:56:9c:67:37:7e:3a:
                    94:29:d8:98:1e:cb:48:26:0d:1f:ca:65:97:d2:30:
                    92:fe:5e:12:8a:1f:20:67:d1:9e:92:e9:79:f8:f6:
                    03:cb:66:34:01:c7:ce:6a:64:d5:7a:ee:06:37:e9:
                    1d:01:d9:46:db:1d:3c:86:73:5b:d8:aa:53:23:00:
                    e3:30:28:72:7a:2a:1e:40:d3:2c:34:84:17:1a:54:
                    fe:79:61:30:53:01:bd:1e:5a:61:46:71:54:53:39:
                    27:82:1f:7f:34:8e:0c:19:e2:b8:cc:71:48:eb:75:
                    a2:2c:1b:38:bc:b5:07:57:b5:b7:04:4e:68:94:e8:
                    fc:94:25:39:7e:28:48:e5:6f:c9:23:9e:2a:ac:7f:
                    60:86:5a:ea:75:b4:57:ca:63:fa:f4:43:b8:11:14:
                    31:db:da:40:9d:42:15:d0:a6:08:1f:29:87:33:00:
                    1a:00:66:4c:bf:9a:45:3c:93:ca:bf:05:1f:bb:ca:
                    59:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:62:23:6C:1F:15:CF:39:48:9F:7A:6D:DE:87:23:8A:87:87:6E:07
            X509v3 Authority Key Identifier:
                keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/r2IjbB8VzzlIn3pt3ocjioeHbgc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.246.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:c9:bc:6e:c4:96:ab:dd:e0:9c:ad:6f:1b:69:f1:2e:81:40:
         b7:e0:f4:84:c3:d3:f9:cf:22:b4:57:b5:bf:3a:5a:fa:9e:6c:
         ce:98:df:a0:ca:ad:72:7c:20:5d:f0:aa:94:22:06:56:d2:73:
         db:60:b3:99:79:81:fd:bb:d6:27:c1:c0:e9:a1:c5:3d:b6:2e:
         48:21:58:fe:c1:52:ab:38:0a:d3:90:cc:23:1f:0b:4f:f8:1c:
         c7:8a:c1:e3:39:02:d4:75:a4:c5:0c:2b:39:c6:09:4e:52:1a:
         e0:a6:8c:dd:60:0b:20:c4:56:97:b5:a3:2a:42:f1:ee:a6:c6:
         a7:1f:58:5e:84:d8:c6:86:f9:18:96:1f:42:c9:02:0c:1e:ab:
         19:7d:80:8f:8b:3e:49:88:8a:ae:a5:75:bc:7e:17:d1:9d:69:
         44:0b:41:f5:25:a9:3a:08:81:4a:50:20:f4:25:1d:6f:82:a6:
         2f:9f:b5:c4:e8:91:bd:4e:bc:8f:e6:7b:f6:52:d9:fd:4c:2c:
         7a:9f:af:f1:64:86:15:a4:18:2e:51:9a:33:b8:01:f3:b3:33:
         a5:8a:bc:87:14:e0:99:6f:62:cd:9c:3a:05:4e:94:47:c6:92:
         79:11:aa:65:6e:80:42:7a:cc:2d:e6:33:15:d8:29:d0:52:c8:
         e5:00:0c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:29 2024 by rpki-client on console-fra.rpki-client.org