Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/x1353C_WOUFN6hZLbKBsM-O9Mq0.roa
File:                     x1353C_WOUFN6hZLbKBsM-O9Mq0.roa (raw, json)
Hash identifier:          0B+NdAsh+SZCDt5XGhV5WAnk5niqYMCY+4BMgdDdJWw=
Subject key identifier:   C7:5D:F9:DC:2F:D6:39:41:4D:EA:16:4B:6C:A0:6C:33:E3:BD:32:AD
Certificate issuer:       /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial:       018D156C953BDA1102CC10A75D93C7C6EA5B
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/x1353C_WOUFN6hZLbKBsM-O9Mq0.roa
Signing time:             Wed 17 Jan 2024 03:17:34 +0000
ROA not before:           Wed 17 Jan 2024 03:17:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     48503
IP address blocks:        217.76.70.0/24 maxlen: 24
                          2a03:32c0::/48 maxlen: 48
                          2a03:32c0:1::/48 maxlen: 48
                          2a03:32c0:2::/48 maxlen: 48
                          2a03:32c0:3::/48 maxlen: 48
                          2a03:32c0:4::/48 maxlen: 48
                          2a03:32c0:5::/48 maxlen: 48
                          2a03:32c0:6::/48 maxlen: 48
                          2a03:32c0:7::/48 maxlen: 48
                          2a03:32c0:3000::/48 maxlen: 48
                          2a03:32c0:3001::/48 maxlen: 48
                          2a03:32c0:3002::/48 maxlen: 48
                          2a03:32c0:3003::/48 maxlen: 48
                          2a03:32c0:3004::/48 maxlen: 48
                          2a03:32c0:3005::/48 maxlen: 48
                          2a03:32c0:5000::/48 maxlen: 48
                          2a03:32c0:5001::/48 maxlen: 48
                          2a03:32c0:5002::/48 maxlen: 48
                          2a03:32c0:6000::/48 maxlen: 48
                          2a03:32c0:6001::/48 maxlen: 48
                          2a03:32c0:7001::/48 maxlen: 48

Validation:               Failed, certificate revoked on Wed 17 Jan 2024 10:53:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:15:6c:95:3b:da:11:02:cc:10:a7:5d:93:c7:c6:ea:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
        Validity
            Not Before: Jan 17 03:17:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c75df9dc2fd639414dea164b6ca06c33e3bd32ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e3:9e:7f:45:20:b4:f1:6b:83:4c:ff:7d:0a:
                    2e:49:f7:35:c9:fb:88:bf:f3:a2:ce:8f:a3:66:75:
                    b4:7c:26:84:f4:19:de:f5:c4:73:52:17:17:c2:5e:
                    a6:5d:7e:93:c4:c4:3b:a9:30:b4:3a:04:9f:f6:a2:
                    aa:da:b4:76:2b:7f:e5:e5:74:24:a9:55:d4:49:56:
                    60:23:0a:c3:57:28:9f:e0:e4:96:32:14:57:39:60:
                    c6:4e:a6:ac:04:b9:20:c3:21:05:c5:b6:7a:b8:fa:
                    c2:e8:1b:38:fd:91:d4:8d:23:84:0e:27:97:f7:77:
                    b5:0d:38:eb:e8:30:ca:be:df:28:4e:26:f4:42:02:
                    bf:84:2f:2d:e5:0c:d8:f7:5f:39:a1:48:6b:e9:b1:
                    e0:60:f5:45:14:92:ec:ee:b1:6a:92:a9:03:d9:04:
                    8d:15:04:d6:42:f3:a8:74:0f:22:45:3a:81:cd:84:
                    c2:61:31:e0:bc:96:c2:18:72:4e:52:2d:2a:12:bb:
                    89:b7:c9:31:94:b9:92:ff:f1:f3:d5:7f:b1:a7:96:
                    2f:36:42:c5:ee:16:f6:6e:f7:7d:57:4a:20:5d:1f:
                    05:c0:98:1f:41:a0:4f:2f:2c:b1:70:93:a1:7e:c5:
                    54:eb:ff:71:76:22:3c:4d:7e:ab:b6:88:8d:a9:15:
                    19:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:5D:F9:DC:2F:D6:39:41:4D:EA:16:4B:6C:A0:6C:33:E3:BD:32:AD
            X509v3 Authority Key Identifier:
                keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/x1353C_WOUFN6hZLbKBsM-O9Mq0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.76.70.0/24
                IPv6:
                  2a03:32c0::/45
                  2a03:32c0:3000::-2a03:32c0:3005:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:5000::-2a03:32c0:5002:ffff:ffff:ffff:ffff:ffff
                  2a03:32c0:6000::/47
                  2a03:32c0:7001::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:03:bb:fc:70:42:7a:fe:1f:ca:9c:d0:57:d9:5e:be:0a:05:
         1e:eb:78:b6:ca:79:6c:4b:90:46:92:ac:52:63:6d:cf:d3:33:
         c4:8a:4f:12:ba:7b:29:a0:5f:29:04:27:eb:80:bf:7a:58:fb:
         fe:8d:a8:44:47:5a:84:d0:03:ce:04:ef:94:ab:f4:72:1f:81:
         42:8a:2c:a5:2d:a5:ee:44:70:c9:26:a1:68:9a:8e:09:76:81:
         c5:5b:21:af:7c:90:6a:4e:22:94:4c:bd:6f:ac:bb:17:d0:e4:
         c6:5f:33:cf:45:aa:c8:54:20:da:36:06:82:b6:3d:2e:15:29:
         c9:4a:15:23:9e:35:72:ea:38:f9:36:3c:6b:63:77:a2:00:b7:
         1d:6f:a2:8b:af:21:5d:84:03:28:12:92:45:64:6a:86:35:1e:
         85:2c:4b:c7:d7:3a:ab:91:b1:85:30:97:c4:5f:b1:74:ca:df:
         80:19:6d:78:22:b5:f6:f9:14:32:45:2e:64:83:eb:2a:c7:bd:
         4f:b1:b5:69:74:24:74:34:b6:fc:a8:56:ac:5d:c9:58:e2:ff:
         11:e0:4b:7b:6b:0d:fc:65:c1:77:b4:83:92:fc:1b:fc:b2:18:
         d5:24:93:0e:e1:35:a8:56:cc:65:02:e4:99:12:c3:34:20:8b:
         c6:d2:04:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:55 2024 by rpki-client on console-ams.rpki-client.org