Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/TpeO-CjPb5sVo2YNm3UIm7q9sEU.roa
File:                     TpeO-CjPb5sVo2YNm3UIm7q9sEU.roa (raw, json)
Hash identifier:          xg6pLTW+q5kJfu84rzjraJ8hI+ST7kPlknKqahSrnpY=
Subject key identifier:   4E:97:8E:F8:28:CF:6F:9B:15:A3:66:0D:9B:75:08:9B:BA:BD:B0:45
Certificate issuer:       /CN=20feef391f16300157bb78b2eaea06d61c20c945
Certificate serial:       018EA077080F6900C1B5F9F9C4BE03224D2A
Authority key identifier: 20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/TpeO-CjPb5sVo2YNm3UIm7q9sEU.roa
Signing time:             Tue 02 Apr 2024 20:18:59 +0000
ROA not before:           Tue 02 Apr 2024 20:18:59 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     199760
IP address blocks:        193.25.167.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 05 May 2024 08:05:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:a0:77:08:0f:69:00:c1:b5:f9:f9:c4:be:03:22:4d:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20feef391f16300157bb78b2eaea06d61c20c945
        Validity
            Not Before: Apr  2 20:18:59 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4e978ef828cf6f9b15a3660d9b75089bbabdb045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:18:80:ad:bd:5c:b2:6a:33:03:85:fb:f5:a7:
                    67:02:fb:13:ba:68:26:b3:87:a3:0f:ad:83:b1:21:
                    bc:c0:ea:2e:58:f6:b9:7e:92:d4:a6:a2:bd:f3:01:
                    c6:91:8b:37:23:4f:a0:8c:80:4c:38:8a:e7:99:f5:
                    3c:20:17:1e:67:9f:4e:32:11:84:e1:5e:8e:2d:7a:
                    5c:0e:c7:49:87:7d:3f:01:14:d4:66:78:de:93:b8:
                    cf:40:2f:ce:10:a2:d6:20:10:ad:5d:e1:c1:02:a2:
                    6c:91:bf:62:19:eb:ce:3c:02:8f:b1:30:a1:da:8b:
                    73:da:8b:5e:23:12:e2:3c:a6:b5:6d:1c:ce:35:95:
                    13:2b:d6:04:f7:20:08:7d:63:54:69:d4:fd:c9:aa:
                    65:78:d1:4e:44:2d:69:c5:78:a5:bc:80:49:4a:7e:
                    84:ee:b4:65:24:2e:6b:4a:8a:20:77:04:26:ef:3e:
                    87:78:ca:a9:5a:26:86:97:45:20:35:ca:db:9d:e6:
                    14:e3:af:de:27:33:ab:c3:87:09:45:37:49:3e:da:
                    77:7e:8c:c5:83:57:66:80:db:ba:26:45:51:a5:16:
                    3d:6d:07:a8:3c:77:d2:87:20:d1:5e:bc:33:90:9e:
                    2c:d4:fe:22:69:42:1c:3b:30:e5:c4:b1:ab:5a:8c:
                    d5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:97:8E:F8:28:CF:6F:9B:15:A3:66:0D:9B:75:08:9B:BA:BD:B0:45
            X509v3 Authority Key Identifier:
                keyid:20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/TpeO-CjPb5sVo2YNm3UIm7q9sEU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.25.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:87:51:10:8f:d8:7b:51:43:05:76:16:72:a6:e5:8c:7c:56:
         9c:40:bc:02:3b:f1:57:20:fb:da:9e:df:f2:af:57:f2:05:5e:
         4d:04:13:d9:d4:25:bb:73:69:0b:75:ba:0d:48:23:0e:55:87:
         54:85:0d:05:d6:f4:07:af:d4:91:54:91:90:b1:17:1d:aa:a6:
         bd:ae:a0:79:20:1a:67:2e:e2:f1:94:87:53:e4:3a:7a:22:5b:
         3c:9c:82:80:a8:ef:ba:2d:8c:70:c2:c0:4f:0b:0d:48:f3:d3:
         57:31:bb:a1:1d:21:54:b8:af:1a:b7:6c:12:21:c5:30:f6:40:
         19:1d:a0:55:52:3a:7f:0e:23:fe:bd:71:eb:e0:c2:b9:98:fb:
         d5:87:a7:6c:cf:85:69:ca:29:79:96:08:b1:b4:4a:b8:13:72:
         5d:7d:ad:ea:0a:5c:77:35:cd:96:c0:8e:42:83:78:f0:b0:c6:
         d0:a8:ec:f3:ac:3f:eb:a8:16:91:2f:ea:12:7c:61:3a:1c:cf:
         a3:5c:91:35:69:2e:fa:28:76:ef:2e:12:23:ac:5d:bb:93:bf:
         ed:e5:ea:c7:0e:8e:52:50:64:f0:47:08:b8:e6:f3:39:59:82:
         4a:f5:fa:f3:80:6f:a3:e4:cc:91:7b:09:0e:fd:7b:7c:ec:6d:
         9a:b9:0e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:59 2024 by rpki-client on console-ams.rpki-client.org