Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/PsubHSoAUknuhWRua2uizXltT50.roa
File:                     PsubHSoAUknuhWRua2uizXltT50.roa (raw, json)
Hash identifier:          X5/KLJCCcN9KmdxzuwOfRrvFhtJDD8OS/maZRF7f9UA=
Subject key identifier:   3E:CB:9B:1D:2A:00:52:49:EE:85:64:6E:6B:6B:A2:CD:79:6D:4F:9D
Certificate issuer:       /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Certificate serial:       018B01062DD11948D3E7FA3EA4481CB0A93F
Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/PsubHSoAUknuhWRua2uizXltT50.roa
Signing time:             Thu 05 Oct 2023 18:07:43 +0000
ROA not before:           Thu 05 Oct 2023 18:07:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49223
IP address blocks:        185.145.233.0/24 maxlen: 24
                          193.228.127.0/24 maxlen: 24
                          5.44.250.0/24 maxlen: 24
                          212.6.63.0/24 maxlen: 24
                          194.126.176.0/24 maxlen: 24
                          195.234.29.0/24 maxlen: 24
                          45.15.42.0/24 maxlen: 24
                          193.56.147.0/24 maxlen: 24
                          194.56.149.0/24 maxlen: 24
                          178.23.191.0/24 maxlen: 24
                          185.252.209.0/24 maxlen: 24
                          185.249.54.0/24 maxlen: 24
                          193.163.6.0/24 maxlen: 24
                          185.197.151.0/24 maxlen: 24
                          195.69.149.0/24 maxlen: 24
                          185.99.23.0/24 maxlen: 24
                          91.224.141.0/24 maxlen: 24
                          109.205.59.0/24 maxlen: 24
                          185.218.186.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 07 Nov 2023 13:23:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:01:06:2d:d1:19:48:d3:e7:fa:3e:a4:48:1c:b0:a9:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
        Validity
            Not Before: Oct  5 18:07:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3ecb9b1d2a005249ee85646e6b6ba2cd796d4f9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8e:d9:3d:ef:ad:56:b0:51:8f:d8:b6:fb:6a:
                    3a:db:64:a7:b7:e3:fb:aa:4b:f8:dc:f8:b3:f8:9b:
                    c5:6b:d4:41:9b:15:97:1a:6a:ca:ae:ce:eb:02:4f:
                    3b:7b:42:b0:19:68:f5:f1:65:58:fc:e1:17:39:f5:
                    3a:8f:42:cf:09:c1:ea:33:ea:61:8d:10:45:64:3b:
                    d7:78:eb:4a:40:4b:52:59:19:da:b7:2f:b7:72:ec:
                    1d:40:f9:76:4b:98:da:47:12:51:73:66:dd:90:47:
                    39:02:24:54:7c:b3:54:5f:18:f6:b4:55:f7:4f:cd:
                    9d:dc:fe:ca:da:11:4c:c3:4c:0f:75:c6:f3:46:db:
                    c4:77:dc:72:f1:9e:36:bc:6e:9c:41:2c:02:b3:f9:
                    37:6e:09:5b:a3:53:76:9e:cc:3c:c5:f1:a3:d7:32:
                    73:88:c9:94:77:87:14:18:9f:f6:ce:59:fc:f6:54:
                    2c:8c:2a:42:96:bb:5e:7b:a5:f8:40:33:98:7f:42:
                    70:18:8b:cf:3d:2d:09:65:ad:ea:85:82:c7:1d:13:
                    13:c2:c5:7c:4f:ef:d4:8f:1a:b4:2c:98:2e:3a:e5:
                    2d:2a:63:9b:83:df:18:45:32:51:67:c5:25:d6:9d:
                    65:73:da:61:5c:c6:88:42:2f:51:b2:da:6a:17:47:
                    8a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:CB:9B:1D:2A:00:52:49:EE:85:64:6E:6B:6B:A2:CD:79:6D:4F:9D
            X509v3 Authority Key Identifier:
                keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/PsubHSoAUknuhWRua2uizXltT50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.44.250.0/24
                  45.15.42.0/24
                  91.224.141.0/24
                  109.205.59.0/24
                  178.23.191.0/24
                  185.99.23.0/24
                  185.145.233.0/24
                  185.197.151.0/24
                  185.218.186.0/24
                  185.249.54.0/24
                  185.252.209.0/24
                  193.56.147.0/24
                  193.163.6.0/24
                  193.228.127.0/24
                  194.56.149.0/24
                  194.126.176.0/24
                  195.69.149.0/24
                  195.234.29.0/24
                  212.6.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:77:c8:b5:d2:74:31:2c:5b:7d:0d:27:40:18:77:36:92:b8:
         f6:18:cc:e9:70:6b:4c:55:a8:32:a2:18:b3:7c:52:c9:11:33:
         5b:0b:21:ca:c6:52:49:38:e1:0e:de:e7:1f:e7:25:c1:b1:7f:
         69:03:fe:03:bd:e3:ad:b2:7b:19:25:9f:f7:8b:50:e0:78:46:
         95:79:87:01:ad:c0:3b:cb:38:15:42:d3:fb:81:b7:3f:2b:2e:
         91:21:2a:30:ab:cf:8e:85:69:16:0a:8c:2f:d7:e8:1e:d3:7f:
         4b:f7:5e:a1:6a:72:e9:34:76:19:59:44:7d:ca:39:95:48:2c:
         c6:8d:57:b6:7a:f1:fd:fb:f9:14:a9:00:c6:fc:14:ee:fc:9c:
         3a:60:46:60:35:85:6b:c1:99:4e:bb:96:5a:64:02:08:d4:f0:
         b5:a2:08:b9:aa:a9:05:e1:85:88:14:f8:a5:75:53:ba:fc:73:
         20:7e:da:9a:38:d4:e2:b6:96:71:e9:3f:f8:e0:cb:f8:e0:8b:
         be:b7:55:b2:eb:91:64:fc:e6:4e:ef:46:41:0c:22:dd:8e:d9:
         5d:61:78:90:2e:05:34:7a:3a:75:49:f2:30:1a:f6:31:ec:5c:
         80:9f:28:77:e8:3d:5c:47:6c:31:f2:c2:37:c6:4e:d8:e6:5e:
         c9:fb:ba:77
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:35 2024 by rpki-client on console-ams.rpki-client.org