Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/QCXeienInRXkiU29TjLOr1LnK9s.roa
File:                     QCXeienInRXkiU29TjLOr1LnK9s.roa (raw, json)
Hash identifier:          C01gXoe9FSI9XcNO9M2sXS2aSrQ17PSEHcdyyMaOZdw=
Subject key identifier:   40:25:DE:89:E9:C8:9D:15:E4:89:4D:BD:4E:32:CE:AF:52:E7:2B:DB
Certificate issuer:       /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial:       018B4C74F8183A913E7C421BBE8DFF810FAF
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/QCXeienInRXkiU29TjLOr1LnK9s.roa
Signing time:             Fri 20 Oct 2023 09:40:15 +0000
ROA not before:           Fri 20 Oct 2023 09:40:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43260
IP address blocks:        213.21.237.0/24 maxlen: 24
                          213.21.236.0/24 maxlen: 24
                          213.21.245.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 10:30:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:4c:74:f8:18:3a:91:3e:7c:42:1b:be:8d:ff:81:0f:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
        Validity
            Not Before: Oct 20 09:40:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4025de89e9c89d15e4894dbd4e32ceaf52e72bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e6:98:23:32:3b:42:47:0d:10:6e:d9:99:f7:
                    a6:91:c4:72:78:03:d4:12:5c:8e:1d:b0:66:0f:cb:
                    2c:3c:2c:a8:81:50:97:40:60:a6:6c:0f:d3:e6:1e:
                    e5:05:95:2f:2b:c9:23:29:70:81:1e:24:10:be:b9:
                    1b:40:bc:aa:bd:0b:64:a1:56:1c:b6:49:b9:41:78:
                    bd:c9:ec:b5:f5:ea:71:61:68:bb:3d:4c:b1:0a:73:
                    c5:26:79:ba:e0:82:62:91:15:41:69:4d:de:9f:97:
                    3c:73:53:19:72:48:e4:7e:32:d5:75:08:1b:29:1f:
                    47:ec:24:b4:c7:a9:df:4a:b9:ff:9c:45:b5:21:ee:
                    9b:dd:c6:32:25:34:e4:69:69:a1:98:02:24:39:a3:
                    03:ec:53:04:05:d1:2d:c7:d5:d2:91:8c:cf:1a:05:
                    03:41:16:c5:bd:08:34:ba:bb:76:d0:02:b8:2a:98:
                    c0:db:d8:7c:3d:d5:a4:2d:dc:9a:07:fd:32:80:ca:
                    17:a4:b0:ff:78:c0:4d:ba:53:0e:b2:eb:f3:74:62:
                    67:a6:e8:db:93:bd:e5:08:e7:55:e7:76:43:94:e3:
                    4e:95:c8:65:d3:f1:a2:f0:e1:af:95:0b:65:8c:73:
                    a3:b8:ec:78:f2:37:76:be:00:66:cb:9a:de:d5:2e:
                    f3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:25:DE:89:E9:C8:9D:15:E4:89:4D:BD:4E:32:CE:AF:52:E7:2B:DB
            X509v3 Authority Key Identifier:
                keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/QCXeienInRXkiU29TjLOr1LnK9s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.21.236.0/23
                  213.21.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:0b:83:ec:e2:16:c5:37:78:91:55:96:e2:c5:6c:83:0e:a6:
         87:ab:9c:61:a0:58:51:78:55:a8:00:b9:c8:d5:61:46:91:fd:
         85:5d:5c:dc:11:d0:84:56:8b:ee:93:ea:4f:00:3c:e0:e7:42:
         f8:47:71:09:3b:c1:6f:79:f9:e5:15:e6:8a:d8:bb:75:e2:39:
         9c:35:11:9d:df:8d:9f:e2:1f:39:23:b5:d3:07:a1:15:1e:c3:
         77:41:39:88:3e:2f:fa:cf:2d:1b:50:5c:e0:29:5c:8d:f5:03:
         19:a5:d7:52:46:7d:ed:07:b2:98:17:fd:56:87:7c:a6:02:29:
         a8:ed:8e:2b:f2:7c:ea:21:9a:2b:ee:10:1e:5b:fd:cc:b2:f0:
         fc:a9:1c:9d:c0:4d:6b:35:4e:f4:8f:8d:2c:39:05:58:60:03:
         ac:c9:ef:de:9a:d2:93:50:c4:bd:5f:52:52:b7:ad:a6:cc:4f:
         38:df:66:37:40:f0:10:5e:73:72:63:4c:c3:13:55:26:e7:9b:
         f6:1f:0e:92:52:52:99:ed:4d:44:3a:95:60:19:ea:f7:89:d7:
         16:d4:72:79:5e:7b:c8:bc:35:cb:7f:60:58:6c:4b:67:f1:c9:
         a6:5b:74:9b:08:7f:64:c2:ed:85:b1:6e:29:c6:f3:9a:a1:09:
         d5:bd:b0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:49 2024 by rpki-client on console-fra.rpki-client.org