Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/9jYoP3zMoLdHw_JZAcSME10-gXc.roa
File:                     9jYoP3zMoLdHw_JZAcSME10-gXc.roa (raw, json)
Hash identifier:          T3Epp0gNAiv9f4uEPBGuCd/ztWtizhrTTTjdQspNnX0=
Subject key identifier:   F6:36:28:3F:7C:CC:A0:B7:47:C3:F2:59:01:C4:8C:13:5D:3E:81:77
Certificate issuer:       /CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
Certificate serial:       01856F795F1CC3ACB58E517EB10A71A0B333
Authority key identifier: A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/9jYoP3zMoLdHw_JZAcSME10-gXc.roa
Signing time:             Sun 01 Jan 2023 22:35:03 +0000
ROA not before:           Sun 01 Jan 2023 22:35:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208507
IP address blocks:        178.218.240.0/23 maxlen: 23
                          178.218.240.0/24 maxlen: 24
                          178.218.242.0/24 maxlen: 24
                          178.218.242.0/23 maxlen: 23
                          178.218.243.0/24 maxlen: 24
                          178.218.241.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:79:5f:1c:c3:ac:b5:8e:51:7e:b1:0a:71:a0:b3:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a42000c4f4ec4a03cd4d3657e01b70034ec23b97
        Validity
            Not Before: Jan  1 22:35:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f636283f7ccca0b747c3f25901c48c135d3e8177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:eb:b9:cc:60:7d:92:c6:11:44:4c:32:ec:66:
                    a5:8e:cf:c6:cd:2a:53:52:86:aa:f3:2f:5d:a7:59:
                    15:94:ca:26:0e:a1:89:97:04:38:be:da:a8:c5:e7:
                    21:a5:2f:7d:14:12:bf:4d:07:57:d0:30:b7:e3:7f:
                    ea:9f:c8:c0:eb:54:36:be:96:5a:22:89:e4:d8:90:
                    06:9f:f7:85:25:81:49:86:fe:ea:66:dc:56:fa:6f:
                    04:47:b1:ba:46:60:3c:d5:c2:60:bd:30:4a:ef:25:
                    17:5f:26:81:66:d1:4b:16:5d:f2:6b:44:0b:0c:7f:
                    75:54:29:61:c2:77:7d:6c:05:ec:c5:df:0b:49:12:
                    23:31:d8:6a:72:90:b5:84:c1:9d:ef:84:b9:93:03:
                    fa:81:64:1b:a6:6b:39:e9:ae:f9:42:9c:a7:79:06:
                    2a:da:20:26:ee:e7:a7:c8:f1:de:f1:f3:c3:23:b0:
                    fd:94:b9:10:cc:b2:a9:9c:71:39:f8:5c:bb:66:be:
                    30:9f:08:65:01:29:ef:97:c8:94:5e:a0:65:d6:65:
                    eb:88:18:21:37:e2:01:f9:a3:6e:96:5b:ab:5d:2e:
                    27:b8:3d:2a:45:b7:8c:a6:0b:ad:47:c1:3a:bd:99:
                    14:39:83:9e:46:fe:f4:89:14:0a:58:bc:75:e1:24:
                    53:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:36:28:3F:7C:CC:A0:B7:47:C3:F2:59:01:C4:8C:13:5D:3E:81:77
            X509v3 Authority Key Identifier:
                keyid:A4:20:00:C4:F4:EC:4A:03:CD:4D:36:57:E0:1B:70:03:4E:C2:3B:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pCAAxPTsSgPNTTZX4BtwA07CO5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/9jYoP3zMoLdHw_JZAcSME10-gXc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/163d77-4fea-4131-becb-0f22d89689a0/1/pCAAxPTsSgPNTTZX4BtwA07CO5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.218.240.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:65:23:b9:5b:41:5a:c1:41:40:6c:d9:7f:b4:33:eb:4a:bb:
         07:46:fd:6e:4c:cc:71:b1:08:18:b8:63:1a:5a:91:43:85:5b:
         89:28:26:0d:6e:e5:92:3c:7e:f2:0d:fc:e2:38:5a:b5:02:38:
         8e:23:44:33:b6:65:02:0d:59:9b:82:e7:d6:7d:68:18:f8:9a:
         0e:09:b4:29:16:92:d3:f9:d9:91:6a:90:88:db:d6:ce:1a:a9:
         ca:ae:0e:31:b8:53:57:d2:3e:f9:bf:90:a5:ba:76:49:ba:6d:
         4c:85:48:bd:e6:c9:1d:7d:b8:fc:f4:10:a4:c2:da:9a:41:66:
         e9:fa:5f:ce:97:4f:19:34:cd:e5:94:23:68:ec:ae:a2:ed:6f:
         73:de:1c:4c:48:dd:8f:d9:5b:4b:cc:1a:1c:87:1a:da:52:96:
         47:28:91:5e:9a:b6:13:99:00:27:e2:63:ae:86:32:f6:cb:28:
         ac:55:74:18:40:07:c1:e6:d4:43:59:49:25:e2:c7:83:14:59:
         38:87:4a:ce:db:77:21:c6:cd:40:fc:cd:1f:cf:41:38:ae:15:
         46:24:a1:75:1b:22:24:52:7a:3c:7a:c3:54:84:f0:31:fd:bb:
         d2:53:e0:c5:36:4d:97:66:38:27:ab:d3:0d:c0:07:e1:8a:3a:
         06:fb:e0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:22 2024 by rpki-client on console-ams.rpki-client.org