Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/E8du7mkzvczLiYkUgUIZZh1bBuE.roa
File:                     E8du7mkzvczLiYkUgUIZZh1bBuE.roa (raw, json)
Hash identifier:          y0eoslbI0vigI3qKKMmI3PK4OiG1fQWjjUOsp/ECwlg=
Subject key identifier:   13:C7:6E:EE:69:33:BD:CC:CB:89:89:14:81:42:19:66:1D:5B:06:E1
Certificate issuer:       /CN=49378660f5f01923946c35d94be5ccd7d2b71051
Certificate serial:       018B137877BBB3D3B57CC6840F01DAC96B40
Authority key identifier: 49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/E8du7mkzvczLiYkUgUIZZh1bBuE.roa
Signing time:             Mon 09 Oct 2023 08:05:43 +0000
ROA not before:           Mon 09 Oct 2023 08:05:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62336
IP address blocks:        213.244.48.0/20 maxlen: 20

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 22:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:13:78:77:bb:b3:d3:b5:7c:c6:84:0f:01:da:c9:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49378660f5f01923946c35d94be5ccd7d2b71051
        Validity
            Not Before: Oct  9 08:05:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=13c76eee6933bdcccb898914814219661d5b06e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e2:ca:9e:be:01:c5:98:7a:2f:52:f1:4e:1a:
                    1c:4c:f6:71:00:02:68:0a:09:c8:9c:7b:1b:c4:76:
                    1b:ae:e7:1b:a2:31:cf:6a:14:58:8d:d9:b2:ea:02:
                    be:12:6a:0f:26:36:13:2c:df:aa:01:8d:00:55:45:
                    4b:e8:60:aa:6b:97:30:9b:99:ae:07:84:11:29:55:
                    b3:c0:a1:b9:d5:84:50:8b:a3:6d:f6:99:66:de:11:
                    95:35:74:75:cf:f3:cc:98:21:6c:9c:e1:eb:d9:99:
                    18:5d:b6:6f:24:e7:db:4e:49:0c:92:17:52:ca:e6:
                    f9:c7:48:8d:a2:20:60:e3:3f:9d:a5:b9:7a:78:c0:
                    65:67:d4:1a:14:75:36:d0:a5:a3:37:2a:00:fc:9e:
                    0f:b2:12:e8:c9:b5:3e:39:2e:cc:38:be:15:d3:ae:
                    0e:70:77:4a:9b:74:15:e4:d3:6e:63:5b:db:24:8d:
                    6c:7a:6f:dc:a5:18:4b:f4:82:ab:96:c5:13:4e:e9:
                    62:9a:d7:15:14:4f:5b:17:22:7b:0b:3b:f0:3a:b0:
                    aa:42:2f:41:b8:f7:b1:5a:b8:15:73:a6:90:db:e3:
                    a0:81:17:dd:f8:11:6f:cc:68:a6:f6:5e:76:ee:a9:
                    e8:d6:06:58:d5:cd:01:ab:64:09:b6:15:85:4f:42:
                    11:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C7:6E:EE:69:33:BD:CC:CB:89:89:14:81:42:19:66:1D:5B:06:E1
            X509v3 Authority Key Identifier:
                keyid:49:37:86:60:F5:F0:19:23:94:6C:35:D9:4B:E5:CC:D7:D2:B7:10:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/STeGYPXwGSOUbDXZS-XM19K3EFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/E8du7mkzvczLiYkUgUIZZh1bBuE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/07cdcf-8875-4770-8c75-41b745bf53db/1/STeGYPXwGSOUbDXZS-XM19K3EFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.244.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5e:95:8b:62:d9:66:45:46:bf:5e:f7:b4:33:6d:a8:07:15:4a:
         99:29:6a:29:c8:ce:43:1f:13:6f:46:18:54:aa:ee:17:03:b9:
         8c:d0:51:25:f5:a7:b7:f0:7f:d8:19:5c:f3:86:50:07:87:9f:
         0d:df:98:74:e3:7a:18:d9:0a:f5:ca:2f:66:d7:db:53:0f:a1:
         3d:d1:94:45:d9:7a:2a:f2:05:d1:41:12:3d:02:b9:cc:53:f9:
         5e:13:c0:ec:eb:62:2c:a7:57:fa:f5:52:b6:9a:e0:07:07:0c:
         00:f2:97:4e:dd:c6:87:94:7e:2b:21:36:4d:b3:91:0d:4e:04:
         8d:c1:e2:8a:bb:42:f3:a7:2c:ec:c9:c3:c6:b7:2a:20:30:f7:
         bb:50:02:4c:df:16:54:29:cd:78:b5:eb:7b:e7:7d:24:6e:f9:
         10:b1:76:c2:8c:34:9e:d0:35:13:08:16:bf:05:44:d5:26:a9:
         86:bb:3b:2b:1c:e2:68:51:07:84:8d:e3:9a:f5:c0:c3:c6:bb:
         a5:9c:37:1f:1a:a9:b5:01:a2:66:6d:55:83:9e:fe:88:43:e3:
         6c:20:0a:64:74:fc:d4:f5:c3:29:25:c9:1c:61:ce:04:fa:5a:
         41:3c:05:41:5d:46:46:61:7f:24:6a:08:1b:84:10:64:a0:ad:
         d1:66:43:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:19 2024 by rpki-client on console-ams.rpki-client.org