Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/IDYhbMIPAfdoEjR7kfhTbCnb8Mg.roa
File:                     IDYhbMIPAfdoEjR7kfhTbCnb8Mg.roa (raw, json)
Hash identifier:          Ah6EJw4jocpSlX81C8VRygtjPj5uu4J6q/Y//gNI1bQ=
Subject key identifier:   20:36:21:6C:C2:0F:01:F7:68:12:34:7B:91:F8:53:6C:29:DB:F0:C8
Certificate issuer:       /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial:       01877097C8BFDAC82A1146FE932761CF53BC
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/IDYhbMIPAfdoEjR7kfhTbCnb8Mg.roa
Signing time:             Tue 11 Apr 2023 13:53:28 +0000
ROA not before:           Tue 11 Apr 2023 13:53:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        193.228.168.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 05 May 2023 03:48:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:70:97:c8:bf:da:c8:2a:11:46:fe:93:27:61:cf:53:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
        Validity
            Not Before: Apr 11 13:53:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2036216cc20f01f76812347b91f8536c29dbf0c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:50:5e:bf:9f:ed:39:4d:77:1e:cf:61:c6:62:
                    33:e5:7d:5f:60:3e:61:58:2f:1c:f1:ba:52:35:b9:
                    b1:af:5b:14:80:a7:93:cc:8a:1a:81:f1:ec:a0:93:
                    ec:aa:86:cf:48:30:58:be:98:06:22:02:6f:70:66:
                    8c:40:47:97:a2:0b:40:93:a3:02:bd:54:af:32:7b:
                    4b:4d:72:62:cd:55:9d:cf:b7:85:2e:f3:5e:92:d4:
                    0d:32:88:7e:f6:78:ce:e9:a1:e2:1c:70:6c:c8:22:
                    4b:82:20:b5:38:b8:0f:07:ef:f9:ba:58:84:e3:47:
                    0f:fc:5f:27:13:f1:aa:2b:84:7c:2a:e8:b0:c6:a4:
                    11:c8:60:5b:59:bb:ce:ad:f0:66:e1:0c:90:9e:dd:
                    be:93:74:d2:d0:42:03:49:31:e8:cb:b6:d0:34:5b:
                    07:40:ab:ae:f1:e2:f7:22:e0:e8:2f:14:3a:f7:25:
                    f2:35:f5:d6:54:9d:ca:3f:0e:92:c5:5b:72:7a:6a:
                    fe:6e:f0:3e:16:42:8f:85:e6:1e:ae:41:54:56:c0:
                    3a:79:1e:99:b0:84:07:2d:3e:0c:ba:3c:29:f3:4a:
                    72:29:bc:60:2a:e0:2f:1d:05:c7:07:34:ed:0e:c8:
                    3a:b9:0b:39:48:23:60:56:51:55:f8:3f:9e:e4:b7:
                    f5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:36:21:6C:C2:0F:01:F7:68:12:34:7B:91:F8:53:6C:29:DB:F0:C8
            X509v3 Authority Key Identifier:
                keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/IDYhbMIPAfdoEjR7kfhTbCnb8Mg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.228.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:1d:4f:3f:e9:56:ca:00:d2:0c:78:af:77:c2:ed:ff:12:a8:
         f5:f1:f2:fe:de:cd:78:34:83:51:5a:68:67:62:92:2b:85:d0:
         27:81:b3:f6:f3:ce:c9:b4:76:1b:b7:08:0a:61:a7:b0:aa:1a:
         6f:47:0d:b1:7b:05:6d:23:e6:4e:97:7c:9b:08:77:5f:27:81:
         c3:02:2c:b9:8c:e2:f8:1c:7a:6d:40:40:4f:47:e8:45:87:55:
         0e:1e:1f:4a:e6:15:d1:c5:f8:e4:cf:65:22:b5:a0:bc:e2:1f:
         6b:1f:b3:c3:06:8b:9c:54:08:a7:03:25:af:25:f1:af:63:8e:
         3c:9a:c4:34:53:cc:ce:d4:35:16:3b:20:7a:2e:44:e8:91:57:
         72:24:db:4f:d5:d3:1b:d3:48:56:bf:d9:77:d7:6d:f8:0a:8f:
         37:17:0d:24:a3:5c:b4:3f:c4:8f:a6:0e:ea:91:dd:f4:29:9b:
         c5:73:4b:e7:ce:bc:be:f2:42:86:9d:07:8d:bc:97:4f:fb:1d:
         1d:74:22:37:25:0d:c7:07:d5:07:09:f5:d2:99:d5:ce:76:15:
         01:a3:c6:26:07:c4:b5:c8:d8:6e:5d:48:2b:56:ed:ec:85:4e:
         de:5b:95:48:00:d9:a4:16:a0:d2:c8:23:21:aa:9a:47:97:df:
         79:6b:c5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:02 2024 by rpki-client on console-ams.rpki-client.org