Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/UaeBmDOuih_AYwd0v2BXEcIG2TM.roa
File:                     UaeBmDOuih_AYwd0v2BXEcIG2TM.roa (raw, json)
Hash identifier:          OeiL6+7U5K79WDi6DKQbwRSw2ltkSrh8H3M4WSFyv14=
Subject key identifier:   51:A7:81:98:33:AE:8A:1F:C0:63:07:74:BF:60:57:11:C2:06:D9:33
Certificate issuer:       /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial:       018B9069D322812A4C0FC8A938E3B765A101
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/UaeBmDOuih_AYwd0v2BXEcIG2TM.roa
Signing time:             Thu 02 Nov 2023 14:22:16 +0000
ROA not before:           Thu 02 Nov 2023 14:22:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60117
IP address blocks:        46.175.130.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 03 Dec 2023 08:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:90:69:d3:22:81:2a:4c:0f:c8:a9:38:e3:b7:65:a1:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
        Validity
            Not Before: Nov  2 14:22:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=51a7819833ae8a1fc0630774bf605711c206d933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:71:31:39:b5:07:1b:bc:0c:c5:4d:cd:5f:04:
                    03:2b:c2:4f:bd:7f:6f:87:59:78:96:f7:29:c8:61:
                    3b:2d:92:65:b4:e0:99:d3:96:94:d1:79:8f:b5:b9:
                    47:bf:68:f7:c3:2e:13:23:dd:c6:a5:0c:a1:c7:e8:
                    af:d2:94:58:be:19:5b:6d:fc:63:ca:c2:34:bb:56:
                    99:ef:40:b0:da:89:f1:03:cf:4b:cb:2a:0a:0f:ee:
                    fa:06:36:04:bd:bb:bc:0c:0a:fd:c9:2c:4d:72:16:
                    6f:eb:f2:62:28:6a:e5:d0:bc:59:a1:f0:d8:fe:bd:
                    40:f7:58:58:28:b8:5d:fb:0d:09:da:a9:44:38:ce:
                    06:6c:c5:c4:ba:09:3e:a3:b7:18:c1:77:67:c1:be:
                    d6:a0:c6:3a:ca:c4:ef:eb:13:10:20:8f:af:a8:49:
                    09:0b:58:90:a2:86:ff:93:55:59:c8:ca:7d:d1:74:
                    a7:e3:0c:60:c3:42:ca:91:0f:0b:cd:29:82:da:a3:
                    81:d5:99:01:f3:53:a4:77:ad:61:60:21:d7:7a:cf:
                    e4:2f:29:de:54:8b:d5:18:b9:c8:29:45:20:65:e9:
                    aa:46:6d:a4:26:db:0e:0e:51:89:9c:9b:db:e7:f3:
                    5d:59:cb:81:b2:1a:15:28:74:d1:fc:f8:1c:f8:79:
                    39:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A7:81:98:33:AE:8A:1F:C0:63:07:74:BF:60:57:11:C2:06:D9:33
            X509v3 Authority Key Identifier:
                keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/UaeBmDOuih_AYwd0v2BXEcIG2TM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.175.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:e5:64:15:72:71:bf:01:5f:68:0e:6e:a2:a1:2e:ae:fd:98:
         e1:33:3f:90:cf:e0:0e:c1:b2:1a:aa:b9:4e:06:d1:ca:c5:8e:
         d4:ce:8e:8d:4c:60:40:20:b7:24:9c:86:7a:da:2b:32:cc:9a:
         75:4f:2e:63:44:b8:72:d9:dd:e6:6a:41:3f:21:ae:6b:63:b7:
         7f:e4:b3:19:93:f4:d4:9d:08:00:9e:bc:13:f8:a3:56:56:c5:
         28:1c:07:a2:57:d4:34:75:ee:10:0e:38:c6:e4:75:aa:88:68:
         22:a1:de:1e:c7:19:68:ba:79:1f:a5:43:e8:c1:5d:52:47:24:
         d4:16:71:a9:ee:3b:e2:e4:53:3d:c6:d1:85:61:2c:90:a0:4c:
         e3:c1:a4:d3:22:1b:17:6b:06:33:3e:7f:fe:f4:c9:68:16:b4:
         dc:2d:a1:42:a5:6c:60:75:bf:5b:25:c4:49:33:0c:71:bf:87:
         0b:9b:a9:50:4a:b1:d3:73:ee:c0:7b:28:8a:88:9d:54:c0:6d:
         18:44:8f:1c:9d:5e:6c:4d:ff:bd:d6:5c:1e:32:a2:47:43:c1:
         19:1b:e2:3a:ce:21:8f:d9:2f:3c:d2:ed:4a:b8:82:9c:6c:98:
         98:d4:46:77:b4:73:7d:3e:f3:0a:3d:e4:5c:00:90:bf:34:ba:
         e2:fe:6b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:09 2024 by rpki-client on console-fra.rpki-client.org