Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Zt5ohH06rByyeU33L9t7ijM8lsU.roa
File:                     Zt5ohH06rByyeU33L9t7ijM8lsU.roa (raw, json)
Hash identifier:          yCFvPFxJJEGsqSGL5+Gwv72d6wrdeGUSmt2RIqwVsDQ=
Subject key identifier:   66:DE:68:84:7D:3A:AC:1C:B2:79:4D:F7:2F:DB:7B:8A:33:3C:96:C5
Certificate issuer:       /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial:       018E470F8D6EAAFD6B9363010FB8BDF31A68
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Zt5ohH06rByyeU33L9t7ijM8lsU.roa
Signing time:             Sat 16 Mar 2024 11:39:45 +0000
ROA not before:           Sat 16 Mar 2024 11:39:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     200623
IP address blocks:        5.182.112.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 16 Mar 2024 17:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:47:0f:8d:6e:aa:fd:6b:93:63:01:0f:b8:bd:f3:1a:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
        Validity
            Not Before: Mar 16 11:39:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=66de68847d3aac1cb2794df72fdb7b8a333c96c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3d:8a:54:50:e9:82:19:f8:73:84:52:71:eb:
                    68:a2:89:ad:19:3f:73:1f:53:a1:44:d5:d7:aa:9a:
                    67:32:b7:6d:25:c5:7b:e7:95:54:d1:e6:63:ed:b1:
                    0b:41:17:8f:e7:5f:28:3b:bb:84:b4:ff:51:b8:70:
                    3e:a9:d3:c0:c2:a0:1a:43:c2:2c:9e:be:c5:c9:7e:
                    78:53:ac:92:ce:61:78:e5:73:4a:bc:a5:13:10:b5:
                    fe:cb:3e:fe:72:a4:0a:e8:09:d3:20:4d:22:b4:ef:
                    47:d8:3c:d9:52:9e:40:dd:77:cf:54:01:57:72:5b:
                    7a:01:6e:d0:4d:83:84:61:fa:78:55:1e:03:2d:dd:
                    2c:27:df:77:05:17:bd:9a:34:a5:a4:03:f2:bf:5e:
                    e1:83:0c:f0:4b:28:70:ed:70:38:20:71:0b:91:a4:
                    3c:89:50:6d:df:2e:2e:dd:b3:d1:cf:90:02:47:4a:
                    d4:63:aa:00:bd:69:1b:ae:54:a6:ff:31:e3:90:e7:
                    ab:57:23:f8:d2:eb:d8:51:60:a9:f1:71:ef:ef:5d:
                    93:08:95:4c:29:49:1e:73:eb:04:98:16:03:31:09:
                    d1:fc:f5:2a:79:87:ff:86:b3:2f:4c:4b:b3:18:8f:
                    06:5e:c1:2f:98:b3:71:d4:31:d4:85:e5:09:d7:46:
                    46:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:DE:68:84:7D:3A:AC:1C:B2:79:4D:F7:2F:DB:7B:8A:33:3C:96:C5
            X509v3 Authority Key Identifier:
                keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Zt5ohH06rByyeU33L9t7ijM8lsU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.182.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:3a:79:e0:3a:55:13:79:a5:55:28:25:70:63:ba:c7:a9:1d:
         41:27:89:db:dd:6c:a6:59:a9:66:3b:64:f3:0c:23:1b:83:3a:
         1f:88:0d:98:f4:0b:41:10:c7:71:c0:82:6c:a9:46:25:32:3b:
         75:e0:55:73:dd:4a:2f:32:29:0a:2e:c6:13:d7:dc:3c:6a:93:
         93:35:f1:ff:7a:7e:47:cf:7a:8e:b7:ed:20:32:71:a8:a1:0d:
         bd:c5:17:fd:d3:ff:b2:b9:dc:a4:88:23:9b:dd:f5:3e:b8:1b:
         59:37:80:9b:55:46:be:87:1e:76:8d:77:2b:b6:98:fd:cc:23:
         c6:f6:ad:8c:fb:4c:2a:9b:93:b3:ce:05:38:2c:57:05:cd:c7:
         88:10:b0:31:75:fe:76:0f:1a:56:2a:eb:01:31:1b:17:7d:28:
         c9:3f:31:78:9c:5a:04:5a:71:8d:b7:aa:47:47:f8:cb:40:e1:
         31:85:4d:e0:b4:a5:f3:ca:4b:38:40:cd:b8:b5:29:c7:96:ff:
         0c:38:3b:a5:a2:1f:26:c5:1e:6a:c2:33:1b:cf:67:1d:3f:c7:
         74:6f:1e:be:5e:f1:5b:10:4c:90:13:cc:1b:a5:a8:cf:18:96:
         5f:fb:cf:dd:3b:8a:f4:d1:8e:93:b1:2a:98:dd:69:b7:52:c0:
         af:6a:a1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:28 2024 by rpki-client on console-fra.rpki-client.org