Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/LWbq9hO-GhAwkC_ZYyoxnV945Pw.roa
File:                     LWbq9hO-GhAwkC_ZYyoxnV945Pw.roa (raw, json)
Hash identifier:          8q7f5Mz9r0Cqlf+n7ms2ikEOW9n9ZYusogLDsI/7Epw=
Subject key identifier:   2D:66:EA:F6:13:BE:1A:10:30:90:2F:D9:63:2A:31:9D:5F:78:E4:FC
Certificate issuer:       /CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
Certificate serial:       018678E8F0DD463D7AEF600C7FE87EEEF3ED
Authority key identifier: 82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/LWbq9hO-GhAwkC_ZYyoxnV945Pw.roa
Signing time:             Wed 22 Feb 2023 11:36:17 +0000
ROA not before:           Wed 22 Feb 2023 11:36:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50290
IP address blocks:        31.15.124.0/22 maxlen: 22
                          185.74.174.0/24 maxlen: 24
                          185.74.174.0/23 maxlen: 23
                          46.30.132.0/22 maxlen: 22
                          46.30.130.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 22 Feb 2023 11:37:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:78:e8:f0:dd:46:3d:7a:ef:60:0c:7f:e8:7e:ee:f3:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
        Validity
            Not Before: Feb 22 11:36:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2d66eaf613be1a1030902fd9632a319d5f78e4fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0d:bb:41:ce:70:c5:97:d2:a1:06:44:53:a1:
                    bc:38:d3:b6:88:ae:a2:f6:c8:eb:45:f3:8b:67:fb:
                    74:fd:4a:49:80:79:d4:e2:e7:57:ee:00:d6:71:7e:
                    1e:42:9d:e4:f8:8b:16:70:d4:1b:62:34:8c:20:67:
                    ea:0f:45:91:0c:4c:58:cb:a9:1f:20:bc:ac:e9:87:
                    bd:e1:29:fe:e7:61:71:9a:22:db:6d:2e:e6:61:7f:
                    f1:38:99:6a:77:b4:44:55:20:7e:47:a8:fc:88:75:
                    40:ea:84:88:db:34:27:aa:4e:92:f2:f4:c8:9f:41:
                    9c:77:11:55:67:56:72:49:c9:8d:d5:05:a9:0f:02:
                    f2:8f:20:05:5f:c5:1a:a2:d0:96:8e:00:b9:90:48:
                    84:eb:f9:8f:ca:22:4b:25:1a:39:c7:9c:60:44:13:
                    a8:fa:97:75:78:4f:3e:98:3e:74:dd:51:22:ef:66:
                    b4:03:31:5d:50:30:7f:7f:84:cf:ef:1c:27:2c:b0:
                    3a:5f:21:d4:35:fc:b1:f6:9f:b6:2a:2d:78:e3:1e:
                    3b:60:ce:cc:5b:c2:91:09:bb:eb:4f:86:a0:49:bc:
                    ad:39:ef:c4:d8:08:70:3a:54:c7:fa:60:92:bf:89:
                    75:ca:51:75:df:37:d6:4c:96:c3:e4:2b:3c:2f:b9:
                    a2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:66:EA:F6:13:BE:1A:10:30:90:2F:D9:63:2A:31:9D:5F:78:E4:FC
            X509v3 Authority Key Identifier:
                keyid:82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/LWbq9hO-GhAwkC_ZYyoxnV945Pw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.15.124.0/22
                  46.30.130.0-46.30.135.255
                  185.74.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:c3:e7:a6:1e:77:a3:79:77:8a:25:b5:73:ce:0c:92:b1:86:
         9f:ce:45:3c:25:ee:4d:35:2e:73:c7:41:26:13:dd:10:3a:13:
         bf:15:9e:32:37:a7:e2:35:52:a9:1c:2f:01:49:da:e4:62:33:
         05:c3:b7:b5:5b:0c:46:f8:a6:d7:6b:ae:ca:c4:04:8c:1d:ed:
         ba:10:8e:04:8c:8b:a8:c4:93:8d:8e:8b:e2:ea:b7:52:16:75:
         1a:37:1d:06:7e:f7:b0:eb:3f:08:d2:18:87:06:ab:00:c4:d3:
         71:4e:61:ae:a1:39:21:f1:e9:7d:91:0c:ce:90:f1:c2:4f:e0:
         ca:1e:81:65:3e:2e:e4:9f:36:78:ef:01:58:aa:67:89:0f:d5:
         91:c1:52:e9:2a:d2:d1:cc:18:f4:0a:81:a7:57:1c:98:62:44:
         37:8f:8c:e5:e1:9d:ba:be:97:e6:4c:a0:43:98:de:39:c3:83:
         88:f4:95:c0:fd:35:13:a8:03:c4:7a:5e:c6:70:fb:62:ce:f0:
         c4:ce:9f:4b:05:a1:e7:6d:6c:d4:93:34:12:43:71:2a:94:2f:
         08:28:a6:90:48:d7:3c:e1:ba:72:2a:72:79:09:88:81:df:b6:
         f6:91:ce:89:fc:5b:13:ec:96:e5:2c:63:60:6b:d4:24:81:fc:
         7a:02:77:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:28 2024 by rpki-client on console-fra.rpki-client.org