Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/B1qfMqAdJEtZGr0GR1cZL0rO_M8.roa
File:                     B1qfMqAdJEtZGr0GR1cZL0rO_M8.roa (raw, json)
Hash identifier:          v6KkBpxNS4OoNtpzzsZOVQDPtRGy1cLKkHtcy/qGpPw=
Subject key identifier:   07:5A:9F:32:A0:1D:24:4B:59:1A:BD:06:47:57:19:2F:4A:CE:FC:CF
Certificate issuer:       /CN=aebf394e2f1b251c88d988a87161084580786ef5
Certificate serial:       018571F9FE48D0E6C47E5978E0DB5C29EAEE
Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/B1qfMqAdJEtZGr0GR1cZL0rO_M8.roa
Signing time:             Mon 02 Jan 2023 10:14:46 +0000
ROA not before:           Mon 02 Jan 2023 10:14:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     31132
IP address blocks:        178.249.164.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 16:30:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:f9:fe:48:d0:e6:c4:7e:59:78:e0:db:5c:29:ea:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5
        Validity
            Not Before: Jan  2 10:14:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=075a9f32a01d244b591abd064757192f4acefccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7d:b1:c3:3e:b1:8e:72:a4:2c:ba:07:2b:17:
                    2a:4f:9d:1d:6c:6e:e4:ca:11:cd:f2:28:d4:e5:f0:
                    a0:0f:e6:35:00:91:18:e2:a7:fc:9e:3f:08:89:f4:
                    72:06:3c:c9:59:be:b0:3f:e3:fd:cc:f8:a9:8c:82:
                    85:bd:22:f4:ec:d9:07:50:83:2e:3b:a2:b0:ad:6d:
                    48:53:7c:34:dd:43:40:a0:d7:17:ff:bd:f9:bb:bc:
                    73:a5:a3:dd:01:fc:63:e3:ba:01:68:b9:33:5c:a2:
                    08:1c:63:db:f4:55:34:be:f9:38:4a:f0:96:21:6d:
                    47:2a:28:bb:c1:4e:b9:01:e2:60:a1:79:9f:5c:31:
                    07:70:c7:dc:96:7d:cc:c4:3d:89:bd:57:bd:0d:db:
                    40:37:e8:ac:14:b1:5f:0d:43:45:f8:1f:d4:17:75:
                    7b:8c:8c:29:7a:5b:ad:b2:26:95:14:8b:d5:54:f6:
                    bc:6d:4f:02:da:67:ad:c2:3f:83:91:7e:9a:60:2e:
                    c5:4f:16:f9:3b:f6:43:95:03:ae:44:7a:97:71:c2:
                    27:2f:ab:a4:5c:3e:17:9b:e1:38:91:de:48:e6:cc:
                    cd:eb:2d:96:be:b7:12:82:a5:db:bf:87:7e:07:e7:
                    6f:af:9d:88:7a:23:a0:a6:8d:af:3a:53:a3:7f:35:
                    29:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:5A:9F:32:A0:1D:24:4B:59:1A:BD:06:47:57:19:2F:4A:CE:FC:CF
            X509v3 Authority Key Identifier:
                keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/B1qfMqAdJEtZGr0GR1cZL0rO_M8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.249.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:a1:c7:79:f4:4a:2d:e9:a2:90:08:d6:e6:47:29:d0:3f:e4:
         ea:6e:0e:a1:78:4a:d3:97:4f:a4:54:6f:aa:2a:a4:52:f9:bd:
         30:66:ab:eb:76:9d:4b:00:92:fa:c9:a0:a4:02:e3:64:47:a4:
         0a:3c:c5:c9:dc:b5:90:2f:d9:cd:5a:09:7d:77:34:ab:d4:87:
         5a:06:13:e5:d6:e0:aa:fa:d5:6a:19:29:65:0a:9c:b9:b3:10:
         b5:f8:2b:72:06:bc:87:a4:16:7e:88:f6:43:12:fc:6d:2f:2a:
         69:48:88:7e:b9:72:c3:b3:55:e1:4a:1b:3c:3f:a1:ec:0a:f6:
         18:c8:f2:b1:00:44:42:59:aa:7a:5e:90:45:b3:2d:98:08:54:
         26:a3:81:f8:62:9a:a7:21:79:b5:3f:a1:9f:fe:4b:b0:9b:ab:
         fa:a3:98:d1:28:57:80:e5:a3:8b:bd:ea:cb:7b:57:5c:f6:16:
         9f:ea:b8:73:55:6a:4d:3b:96:8e:91:c0:77:7f:85:64:b2:44:
         f8:5d:05:85:42:ed:ef:6f:2e:39:3b:62:b6:a8:f4:56:89:70:
         68:50:8f:66:c9:4e:ad:b7:ea:1f:42:0c:13:ce:be:d8:ed:18:
         11:67:81:b1:e2:37:fb:74:4a:63:ad:46:2f:a0:38:c4:ba:e8:
         e5:c0:c9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:04 2024 by rpki-client on console-ams.rpki-client.org