Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0df1c2-9ad3-41ca-a12e-9f79143e9c60/1/5KGa7gzoDJ5owRIybtM28i-lyaE.roa
File:                     5KGa7gzoDJ5owRIybtM28i-lyaE.roa (raw, json)
Hash identifier:          yN5Sw7GUkUcUVMNh1xeJBs9nnKFdSHlQjkqTAX2c0IM=
Subject key identifier:   E4:A1:9A:EE:0C:E8:0C:9E:68:C1:12:32:6E:D3:36:F2:2F:A5:C9:A1
Certificate issuer:       /CN=26f55db66c509a9c0a6dfeb023770d5b2ac860b9
Certificate serial:       018A705159DE78A60AD8E57B005D24EC0275
Authority key identifier: 26:F5:5D:B6:6C:50:9A:9C:0A:6D:FE:B0:23:77:0D:5B:2A:C8:60:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JvVdtmxQmpwKbf6wI3cNWyrIYLk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/0df1c2-9ad3-41ca-a12e-9f79143e9c60/1/5KGa7gzoDJ5owRIybtM28i-lyaE.roa
Signing time:             Thu 07 Sep 2023 15:44:54 +0000
ROA not before:           Thu 07 Sep 2023 15:44:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207713
IP address blocks:        193.84.71.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 00:29:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:70:51:59:de:78:a6:0a:d8:e5:7b:00:5d:24:ec:02:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26f55db66c509a9c0a6dfeb023770d5b2ac860b9
        Validity
            Not Before: Sep  7 15:44:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e4a19aee0ce80c9e68c112326ed336f22fa5c9a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4b:4d:67:09:80:75:56:c3:fb:ef:a3:ac:9c:
                    ea:d8:c4:2c:19:d3:91:44:5c:09:9a:a2:2f:22:b5:
                    91:a3:60:d6:bc:a9:00:8b:c9:fd:bb:e5:c5:65:c8:
                    f4:84:62:71:0a:de:65:17:b4:11:10:0a:41:56:b6:
                    40:21:c1:0a:00:92:91:94:1a:87:9c:2c:15:04:9f:
                    11:b7:7f:05:7d:60:8e:34:a3:72:01:64:cb:d0:17:
                    56:69:5b:b0:6a:45:19:ff:4d:4b:fe:9b:e1:93:74:
                    49:f7:b2:8a:78:ac:8c:1a:06:7d:0d:59:df:02:49:
                    44:36:ca:da:10:21:b2:56:5e:75:34:b9:5d:ca:fc:
                    c0:ad:ae:0c:af:c1:7b:22:72:2b:e7:81:bb:2e:82:
                    e1:99:16:3d:7f:da:3a:a8:07:02:e1:2a:18:7e:a8:
                    71:ee:ca:a3:24:75:ba:e0:17:d6:6b:3b:9a:66:9f:
                    e2:6c:8c:93:d8:2c:26:e3:f5:a4:76:42:e0:fb:04:
                    50:0f:0f:c3:f9:74:7b:63:01:fb:84:29:af:3a:d9:
                    e1:2a:21:6f:dd:2c:9c:f7:f3:ea:1d:44:44:1a:cd:
                    e9:76:6a:63:79:0a:f7:8a:a8:b1:3e:2a:79:af:50:
                    81:3c:75:d2:d7:af:f8:4a:f3:da:39:76:e5:8b:19:
                    55:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A1:9A:EE:0C:E8:0C:9E:68:C1:12:32:6E:D3:36:F2:2F:A5:C9:A1
            X509v3 Authority Key Identifier:
                keyid:26:F5:5D:B6:6C:50:9A:9C:0A:6D:FE:B0:23:77:0D:5B:2A:C8:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JvVdtmxQmpwKbf6wI3cNWyrIYLk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0df1c2-9ad3-41ca-a12e-9f79143e9c60/1/5KGa7gzoDJ5owRIybtM28i-lyaE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0df1c2-9ad3-41ca-a12e-9f79143e9c60/1/JvVdtmxQmpwKbf6wI3cNWyrIYLk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.84.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:db:f7:5c:da:ff:56:c7:00:9f:3f:48:97:77:dd:c7:42:74:
         96:f9:0b:f5:ef:38:e8:f4:1a:19:26:cc:90:da:83:74:6d:74:
         a7:e4:a7:be:08:77:9e:6d:fb:6d:ef:23:01:59:7b:40:49:a6:
         4c:ec:a2:94:cf:fe:77:89:eb:b9:f2:f3:e3:6a:79:3b:33:bd:
         33:f2:b1:2b:aa:2a:1f:99:db:af:c1:31:f0:d2:c6:67:80:29:
         3e:ef:4a:f5:14:59:36:4e:99:cb:bf:84:58:32:a6:ff:50:dc:
         bf:29:54:a8:ca:14:cb:fc:42:49:35:20:56:b3:91:c9:e0:03:
         c2:a6:70:32:cc:da:ee:64:36:98:3c:c8:bb:97:ae:26:fc:2b:
         54:9f:74:a2:ed:43:bf:0d:5b:64:7b:66:9c:44:27:01:96:a9:
         0f:70:05:85:7b:85:1b:78:77:72:8c:97:55:96:b7:46:d1:c6:
         4b:01:89:76:2e:53:d7:b5:0f:6c:22:3d:9a:24:ef:b3:3a:7a:
         95:67:f1:5e:eb:de:d4:dd:d8:0c:ad:83:2a:d2:94:2f:eb:e5:
         8b:f1:51:07:39:8d:70:06:73:27:60:a9:46:7f:03:01:d5:52:
         fe:15:70:47:9f:38:2f:bb:3d:b1:75:7d:cc:e8:1e:77:b9:89:
         6d:36:4a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:04 2024 by rpki-client on console-fra.rpki-client.org