Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/Gb9CrTzeFrgUYH5NTUBCuTlxLao.roa
File:                     Gb9CrTzeFrgUYH5NTUBCuTlxLao.roa (raw, json)
Hash identifier:          OLQi5h4w4U4LAH2OvVybCICm85eldsqpo+pOGryY+Kc=
Subject key identifier:   19:BF:42:AD:3C:DE:16:B8:14:60:7E:4D:4D:40:42:B9:39:71:2D:AA
Certificate issuer:       /CN=ede5ed457f74382a8ed0b7af686e1adb29352250
Certificate serial:       0185723A463717A309C35DC78824FE1F92D1
Authority key identifier: ED:E5:ED:45:7F:74:38:2A:8E:D0:B7:AF:68:6E:1A:DB:29:35:22:50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/Gb9CrTzeFrgUYH5NTUBCuTlxLao.roa
Signing time:             Mon 02 Jan 2023 11:24:59 +0000
ROA not before:           Mon 02 Jan 2023 11:24:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202441
IP address blocks:        194.15.224.0/22 maxlen: 22
                          178.223.224.0/19 maxlen: 19
                          2a0c:b240::/32 maxlen: 32

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 10:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:3a:46:37:17:a3:09:c3:5d:c7:88:24:fe:1f:92:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede5ed457f74382a8ed0b7af686e1adb29352250
        Validity
            Not Before: Jan  2 11:24:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=19bf42ad3cde16b814607e4d4d4042b939712daa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8a:57:78:7f:01:01:ce:02:a2:63:d6:3a:3b:
                    75:6d:6d:e8:87:0b:bb:ce:1b:f2:e6:19:87:9b:18:
                    07:cb:e8:68:66:31:7a:2e:d6:0c:24:20:9c:9f:8e:
                    c7:6e:b0:74:48:65:94:62:29:aa:76:33:79:d7:63:
                    19:61:c0:4c:78:9b:02:8a:9a:53:b9:29:2f:ed:a4:
                    22:c2:14:a5:92:33:df:f7:a3:24:60:58:b1:68:6f:
                    16:59:a5:f2:61:71:1a:be:53:b6:4f:2e:23:0d:e4:
                    e1:e9:09:23:d5:77:ac:5c:fd:c8:48:29:81:7c:65:
                    7b:83:0b:29:3b:f4:93:28:a8:90:68:08:c8:12:ab:
                    f0:4e:de:51:6d:68:d2:33:7b:f8:fe:0d:33:bb:08:
                    93:db:34:73:13:98:17:11:31:2c:df:8f:4c:ab:6e:
                    1a:9e:d9:3d:e4:93:04:9a:bc:66:a4:78:27:fb:fd:
                    00:79:47:7d:46:e2:68:e2:af:ed:6b:8b:90:32:8d:
                    3a:41:2e:5e:52:49:45:1c:17:e1:49:80:f7:c6:56:
                    35:cf:ce:16:3a:ef:29:9e:78:29:02:00:9d:13:c7:
                    76:7c:48:e9:cc:b8:42:03:e3:86:82:42:5c:58:f9:
                    5f:73:07:c6:55:a8:9e:df:10:f0:ef:6b:21:60:b7:
                    51:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:BF:42:AD:3C:DE:16:B8:14:60:7E:4D:4D:40:42:B9:39:71:2D:AA
            X509v3 Authority Key Identifier:
                keyid:ED:E5:ED:45:7F:74:38:2A:8E:D0:B7:AF:68:6E:1A:DB:29:35:22:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7eXtRX90OCqO0LevaG4a2yk1IlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/Gb9CrTzeFrgUYH5NTUBCuTlxLao.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4dc39-7d9b-4b5b-8593-5a583880028a/1/7eXtRX90OCqO0LevaG4a2yk1IlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.223.224.0/19
                  194.15.224.0/22
                IPv6:
                  2a0c:b240::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:b3:98:1c:56:60:34:80:cd:82:35:fa:e5:80:20:b0:8f:b3:
         d5:0a:aa:f4:eb:93:aa:19:c1:cd:79:a3:10:22:55:87:08:3f:
         9f:b7:37:66:65:2f:fc:4d:ca:9a:0c:41:c9:99:7e:a1:64:1a:
         7a:18:d5:23:9b:bd:7b:a3:87:17:3f:58:56:0d:aa:88:e5:14:
         50:11:c7:f6:30:8c:37:ce:2c:b7:66:b1:20:62:ac:05:dd:89:
         0a:80:52:36:7e:a0:e1:e0:f6:6b:04:17:98:72:28:5d:2a:b0:
         64:d8:ca:d2:28:f0:c1:84:48:7b:ab:c8:16:e3:9a:b3:9d:ba:
         f0:c9:d8:f7:3e:2d:2d:ce:65:d7:34:c0:45:f1:91:9a:a7:13:
         63:fb:b5:70:fd:d3:93:25:f3:6f:4e:81:ac:51:97:ef:e1:6f:
         b9:46:9b:d2:05:0a:21:ad:c6:74:4a:0b:df:fa:92:b5:38:97:
         b5:a5:c0:50:8f:ff:f9:d5:25:90:3d:14:92:db:ce:63:44:a5:
         4a:1c:43:cf:d4:50:97:92:a6:61:4a:43:66:bf:61:bf:2c:d8:
         2f:b7:63:8a:7b:c7:de:17:3d:83:07:a5:6f:99:74:71:fe:42:
         19:ae:7f:69:c4:47:12:e3:18:8f:5d:7d:c5:ba:a6:b8:27:b3:
         87:33:df:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:40 2024 by rpki-client on console-ams.rpki-client.org