Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/8U10Fn7SvjfnoeVxwqhHKVPdSsM.roa
File:                     8U10Fn7SvjfnoeVxwqhHKVPdSsM.roa (raw, json)
Hash identifier:          J6NJUsY36rexUNvxc+2c0MKFqK3ZUf+DhtypxlDsNtY=
Subject key identifier:   F1:4D:74:16:7E:D2:BE:37:E7:A1:E5:71:C2:A8:47:29:53:DD:4A:C3
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       0185728357121DCF4EE7558857DEF2E43DED
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/8U10Fn7SvjfnoeVxwqhHKVPdSsM.roa
Signing time:             Mon 02 Jan 2023 12:44:48 +0000
ROA not before:           Mon 02 Jan 2023 12:44:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62240
IP address blocks:        5.180.155.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 25 Apr 2023 18:34:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:83:57:12:1d:cf:4e:e7:55:88:57:de:f2:e4:3d:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: Jan  2 12:44:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f14d74167ed2be37e7a1e571c2a8472953dd4ac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:8f:ec:eb:2f:5c:d7:09:68:e2:c7:77:2d:de:
                    7b:49:8b:4d:37:fb:c4:a6:b7:98:88:99:98:10:26:
                    0b:84:02:f0:5d:d8:70:f2:31:9d:d9:83:64:a3:d4:
                    86:8a:5a:c0:6b:3b:0b:8c:fc:d3:f6:28:9a:af:ee:
                    85:24:48:d6:21:d9:29:74:3a:5b:5d:de:ad:34:6d:
                    fa:52:4e:f8:71:9b:14:da:5d:91:34:15:8b:5f:22:
                    9a:91:da:2b:c6:d8:02:b7:95:25:9a:27:68:00:5a:
                    81:11:59:58:d6:b9:df:38:ec:d5:b6:5a:22:49:92:
                    08:7a:c1:1f:c9:f6:f3:da:fc:c5:04:64:57:50:74:
                    c2:ad:3d:f3:d9:22:69:f7:d0:57:6b:fe:a9:09:2f:
                    67:18:65:66:41:e6:97:91:0a:24:62:fd:8c:28:33:
                    aa:29:29:fd:78:89:17:9b:6e:b1:95:b8:fd:9c:e4:
                    67:9a:6a:ad:64:b0:8d:13:81:3a:71:95:24:57:eb:
                    b3:f0:81:85:f0:cf:d6:98:94:56:f1:ae:da:55:1e:
                    b9:fa:9a:79:4c:bb:b3:47:13:c1:88:2c:fc:25:36:
                    6c:f6:b5:09:02:b2:a0:f7:d5:b3:a5:29:59:b3:bf:
                    21:cb:28:95:75:94:8a:08:09:ea:12:f2:eb:5c:35:
                    a7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:4D:74:16:7E:D2:BE:37:E7:A1:E5:71:C2:A8:47:29:53:DD:4A:C3
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/8U10Fn7SvjfnoeVxwqhHKVPdSsM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:ec:1d:f0:84:7b:28:85:37:4c:5e:a0:9e:ac:0a:0a:f9:70:
         a2:8d:01:e8:84:df:2d:d5:05:e6:ca:5d:60:14:da:0a:1e:ad:
         c9:80:64:58:0f:05:dc:bc:df:b0:22:df:ed:ba:59:93:47:5d:
         18:a3:5c:fb:16:7c:29:32:c9:c9:de:a0:1d:55:a0:9a:9c:b7:
         19:e9:fb:59:76:46:eb:4a:fe:23:48:a7:36:2a:73:52:b0:be:
         e8:87:7f:d4:f6:90:6b:80:fc:7f:7b:e6:8d:79:18:e4:2f:61:
         1b:25:50:48:4f:ca:35:78:74:b9:25:65:ea:72:b3:b8:fe:35:
         88:61:01:91:9c:48:5c:45:db:53:f4:b0:c2:04:82:f3:bc:ce:
         af:49:80:13:2a:58:2f:a4:dd:a6:2e:68:af:9c:a0:b6:6a:3c:
         87:92:0f:c2:94:0c:a5:73:d6:db:63:55:af:9c:5e:93:ba:88:
         6c:a8:48:a3:35:4a:71:5d:e4:df:ff:9c:48:47:b8:b9:58:30:
         c0:6e:fe:e6:c1:b6:07:40:f5:fe:7d:c4:76:86:8c:dd:6d:29:
         c2:79:5a:80:24:fd:9b:00:42:11:9e:21:81:c7:1b:a8:13:26:
         a5:e4:ac:00:1c:b4:37:7f:96:39:13:19:60:1b:83:cd:32:0d:
         b0:44:f1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:15 2024 by rpki-client on console-fra.rpki-client.org