Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/ChbZjHlIjAyy6AgvXvixWSO9bhA.roa
File:                     ChbZjHlIjAyy6AgvXvixWSO9bhA.roa (raw, json)
Hash identifier:          FObpaTHMxUYIs0xoD8Dr9Zz0PDi3uF/uBWXpFFJmhwk=
Subject key identifier:   0A:16:D9:8C:79:48:8C:0C:B2:E8:08:2F:5E:F8:B1:59:23:BD:6E:10
Certificate issuer:       /CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Certificate serial:       01856D789C3704DADAD69BDA8E78BCAAE019
Authority key identifier: E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/ChbZjHlIjAyy6AgvXvixWSO9bhA.roa
Signing time:             Sun 01 Jan 2023 13:14:58 +0000
ROA not before:           Sun 01 Jan 2023 13:14:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206943
IP address blocks:        185.102.48.0/22 maxlen: 23
                          185.206.58.0/23 maxlen: 23
                          185.206.56.0/23 maxlen: 23
                          31.42.128.0/20 maxlen: 20
                          178.218.128.0/21 maxlen: 21
                          178.218.136.0/21 maxlen: 21
                          31.42.144.0/20 maxlen: 20
                          178.159.64.0/20 maxlen: 20
                          185.171.30.0/23 maxlen: 23
                          185.171.28.0/23 maxlen: 23
                          185.183.90.0/23 maxlen: 23
                          185.183.88.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 15 Feb 2023 18:35:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:78:9c:37:04:da:da:d6:9b:da:8e:78:bc:aa:e0:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
        Validity
            Not Before: Jan  1 13:14:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0a16d98c79488c0cb2e8082f5ef8b15923bd6e10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:16:ab:46:da:39:e1:1e:c4:12:1e:b1:e7:00:
                    fd:88:16:55:b9:0b:7d:58:57:77:57:54:be:a5:83:
                    b6:f0:ff:87:e9:a1:91:a4:cb:f2:61:a0:75:a4:e8:
                    27:9e:25:d7:d9:ac:6e:31:b0:0f:20:c3:2b:7e:f8:
                    1b:fc:a5:f0:d9:de:c1:37:eb:8e:83:f7:32:b7:d0:
                    65:3e:e6:67:d8:af:6c:f6:67:74:a0:6e:2e:ee:a6:
                    73:71:79:40:af:cc:b5:d5:d4:1d:c2:01:16:10:43:
                    db:03:c4:a7:72:fc:55:4a:eb:e6:f6:a5:f8:d7:3c:
                    07:da:9a:c0:e1:1f:29:68:01:ac:6f:a1:9d:f5:8f:
                    c7:05:67:1c:05:1c:3f:e8:06:60:61:cb:79:36:b4:
                    82:23:65:0c:98:c3:80:4d:4e:2e:e5:40:e8:b3:26:
                    49:da:78:c5:6e:cc:b6:41:a4:fe:2a:1a:3a:3c:4a:
                    d4:c6:1a:46:54:c8:66:56:f8:7c:29:8d:8e:ff:36:
                    61:43:ff:f8:74:f3:3c:f2:7e:d9:08:85:4a:0a:95:
                    bb:26:0a:b7:b2:1e:f4:7a:c4:63:f1:57:05:92:72:
                    e0:9e:35:b6:da:13:7e:b3:c7:1d:c0:c0:9b:2b:b4:
                    ce:a3:92:cc:f8:e5:6d:21:e4:7c:6e:39:e4:a7:2d:
                    db:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:16:D9:8C:79:48:8C:0C:B2:E8:08:2F:5E:F8:B1:59:23:BD:6E:10
            X509v3 Authority Key Identifier:
                keyid:E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/ChbZjHlIjAyy6AgvXvixWSO9bhA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.42.128.0/19
                  178.159.64.0/20
                  178.218.128.0/20
                  185.102.48.0/22
                  185.171.28.0/22
                  185.183.88.0/22
                  185.206.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:3d:be:c1:9f:ec:7e:30:82:34:69:d0:e2:52:68:ff:22:96:
         96:8e:16:42:73:7e:bf:ae:c5:8a:4d:23:ca:36:5f:fb:c7:19:
         2b:d0:7f:7e:7e:70:6c:99:0c:5b:0c:b1:1b:0f:93:b3:be:07:
         ad:a4:0e:30:ae:ab:10:b5:5b:a1:01:14:57:b5:1b:31:41:f6:
         45:39:91:6f:da:af:4b:1c:b8:11:b2:7d:36:15:a2:61:d8:e3:
         8e:b8:e1:a1:a3:92:9e:90:c4:4a:54:87:13:e8:f7:5f:d4:6d:
         98:a6:bb:81:5e:6b:99:fc:6d:12:b8:29:a2:4f:ec:1d:44:d2:
         5b:e8:f0:d8:2d:45:81:9b:99:58:c1:1c:0f:27:6f:b2:2b:23:
         4d:29:e8:fa:65:1f:a0:65:93:e6:7e:73:f8:6e:8e:cf:81:54:
         6d:93:d3:b0:9a:68:72:d8:5e:c0:05:bc:e8:2a:07:a0:6d:17:
         c3:6e:7e:02:45:5a:2b:73:4b:cf:38:64:f5:33:0d:a0:89:75:
         58:9c:6e:e6:51:2c:a2:45:df:bf:49:1a:80:d7:55:71:ca:52:
         48:6d:6e:b2:02:dd:28:4d:43:80:57:c3:5c:b4:a8:d6:e6:86:
         59:d3:27:1c:e2:aa:1f:8a:aa:c3:77:4e:3a:b3:bb:e1:36:12:
         da:94:86:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:53 2024 by rpki-client on console-fra.rpki-client.org