Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/C-E09UziJ5rj0MsnzgpfpHr-B_g.roa
File:                     C-E09UziJ5rj0MsnzgpfpHr-B_g.roa (raw, json)
Hash identifier:          OCRj4NOPBcmUXFEPSH/O3lTejIWAe+eBf6OB2A9NLEE=
Subject key identifier:   0B:E1:34:F5:4C:E2:27:9A:E3:D0:CB:27:CE:0A:5F:A4:7A:FE:07:F8
Certificate issuer:       /CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
Certificate serial:       019010A17283553836D040EEB589B7181380
Authority key identifier: 04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/C-E09UziJ5rj0MsnzgpfpHr-B_g.roa
Signing time:             Thu 13 Jun 2024 08:05:34 +0000
ROA not before:           Thu 13 Jun 2024 08:05:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     19905
IP address blocks:        82.178.33.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 03 Aug 2024 20:33:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:10:a1:72:83:55:38:36:d0:40:ee:b5:89:b7:18:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
        Validity
            Not Before: Jun 13 08:05:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=0be134f54ce2279ae3d0cb27ce0a5fa47afe07f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ea:25:2f:79:de:bb:44:a6:5f:16:0d:4a:0e:
                    8e:76:43:3a:3d:69:e7:42:07:40:f5:33:a7:ef:0c:
                    b3:65:3c:8b:7c:38:59:5c:cf:b6:65:69:85:71:9b:
                    d9:e0:86:5a:1b:5b:1e:51:c5:a0:94:5e:be:74:2b:
                    32:93:61:86:d6:37:39:35:b0:22:f6:1b:db:cc:d9:
                    86:f2:ed:db:4e:77:a2:5e:b5:6f:7a:71:13:1c:82:
                    27:5c:17:75:5a:6f:96:87:32:4f:15:e3:f7:78:c0:
                    38:73:54:5a:ea:e1:16:60:8a:62:6a:da:7c:3e:dd:
                    16:b6:3b:f8:5d:2b:ae:a3:7b:c5:69:55:54:3c:f5:
                    34:22:f2:e4:1d:1e:61:ac:f8:6a:42:4a:56:53:b1:
                    6c:b6:8e:c0:fc:b9:5d:f2:23:93:47:e7:a5:e2:32:
                    7d:f3:b8:7d:5b:11:e1:24:fd:51:77:8f:06:d7:9a:
                    8f:1c:e4:2e:ca:b9:22:ea:31:49:86:25:3e:74:0d:
                    a6:a6:ed:21:fc:ff:be:fd:21:ca:c6:3f:87:e0:5c:
                    82:63:58:96:30:39:13:0c:52:75:a4:8b:67:c7:fa:
                    fb:2e:96:9b:85:b2:28:18:5f:65:0d:17:ac:4b:fc:
                    66:8c:64:36:77:23:42:c4:b2:de:77:6b:84:e6:5b:
                    a4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E1:34:F5:4C:E2:27:9A:E3:D0:CB:27:CE:0A:5F:A4:7A:FE:07:F8
            X509v3 Authority Key Identifier:
                keyid:04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/C-E09UziJ5rj0MsnzgpfpHr-B_g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.178.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:e7:41:c3:37:44:0b:9a:54:ed:15:cb:47:33:58:c2:2a:38:
         00:30:5c:32:90:97:aa:8e:51:3b:f3:a1:84:d8:94:56:80:5c:
         55:74:95:84:77:25:5a:97:78:b3:c6:30:d9:a0:9e:64:ba:ab:
         ec:a9:04:02:cd:37:40:bf:ee:6a:3b:2b:8c:3e:ca:b3:8e:7b:
         a9:36:d3:51:db:b5:d8:47:cb:5a:d3:bc:f4:a7:17:9d:8f:cc:
         22:b0:60:3d:04:35:07:8b:eb:37:14:2f:c3:c1:24:f9:18:7f:
         45:4d:d1:d1:13:c6:26:a1:30:7c:ca:cd:27:55:ff:cd:0f:2a:
         93:57:e6:84:8b:ca:a7:50:4a:ec:bd:a9:3b:b3:03:74:23:61:
         ff:69:fc:af:cc:bb:e8:a4:06:f6:a1:2a:be:9f:a2:bc:b4:9c:
         3f:6c:2c:c2:51:1d:5c:46:33:3b:8a:0d:4b:92:1f:61:af:0b:
         d9:b1:7b:c7:e3:49:90:e3:29:f9:5d:7b:53:ad:b2:80:62:ab:
         12:6e:f2:6f:ec:2d:8b:df:b6:f9:a6:c0:81:ee:6b:2b:4a:0e:
         e2:cb:84:6e:99:33:17:23:ca:64:1c:13:84:90:87:1f:dc:01:
         92:7b:80:08:02:b4:1c:0e:04:d4:a6:ef:5e:91:af:3b:c1:2d:
         59:ca:30:39
-----BEGIN CERTIFICATE-----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Generated at Sat Aug 3 21:41:53 2024 by rpki-client on console-ams.rpki-client.org