Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/t7PhgOPozEahy8elAioH6eUkymc.roa
File:                     t7PhgOPozEahy8elAioH6eUkymc.roa (raw, json)
Hash identifier:          l+UnDsXUUumgRgm6FXqoetkezS2JhfkUZKf0ajSDXlg=
Subject key identifier:   B7:B3:E1:80:E3:E8:CC:46:A1:CB:C7:A5:02:2A:07:E9:E5:24:CA:67
Certificate issuer:       /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial:       018A3604D056CB95AFA16E129BEF13E219A7
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/t7PhgOPozEahy8elAioH6eUkymc.roa
Signing time:             Sun 27 Aug 2023 08:03:19 +0000
ROA not before:           Sun 27 Aug 2023 08:03:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209464
IP address blocks:        212.138.180.0/24 maxlen: 25

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 06:29:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:36:04:d0:56:cb:95:af:a1:6e:12:9b:ef:13:e2:19:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
        Validity
            Not Before: Aug 27 08:03:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b7b3e180e3e8cc46a1cbc7a5022a07e9e524ca67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7a:89:92:ad:fa:06:59:6c:d8:0d:40:91:0f:
                    0f:37:ae:af:70:7f:d6:eb:1f:d9:1c:02:50:de:90:
                    2e:d1:97:16:a4:ed:0e:62:9a:a4:55:b9:ab:04:b3:
                    10:41:4d:88:61:03:07:d0:84:f3:9c:62:b6:75:e6:
                    43:1c:d0:94:b6:8e:39:47:17:5a:26:a5:8c:a6:cc:
                    a9:77:ed:a2:c1:7c:e1:b1:58:c3:e0:98:a2:56:06:
                    4c:f8:70:b6:f5:71:d3:25:d8:3d:66:b9:41:bd:fd:
                    9e:ac:da:1c:4a:e7:4d:0f:75:eb:2e:bb:e3:c5:05:
                    7c:d1:e1:60:7c:72:f0:77:2b:16:2d:ba:07:7b:7a:
                    6d:a5:28:0f:63:6c:a8:91:96:58:aa:1b:7b:f1:ff:
                    e4:1c:c2:bb:98:24:2c:8e:c1:74:66:f1:65:2e:76:
                    2a:48:16:c0:7e:20:14:74:01:f2:b9:78:f6:72:25:
                    d4:26:36:43:ee:32:09:60:d0:af:db:44:30:c5:6b:
                    6d:42:4e:88:97:76:39:f9:3f:bf:74:e1:37:f3:7e:
                    5f:ea:f5:4e:81:18:bc:0b:a1:72:e6:10:c9:93:1c:
                    ad:57:f5:5b:ba:d9:be:f4:6f:66:90:13:fc:de:fa:
                    95:1d:75:dc:6b:8d:30:b5:22:67:a6:c5:15:18:49:
                    1e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B3:E1:80:E3:E8:CC:46:A1:CB:C7:A5:02:2A:07:E9:E5:24:CA:67
            X509v3 Authority Key Identifier:
                keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/t7PhgOPozEahy8elAioH6eUkymc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.138.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:97:c5:1a:2c:03:74:51:4e:cd:c2:56:c1:43:8d:22:1d:fa:
         0f:86:e1:43:82:4c:34:9f:dd:ec:35:df:17:5a:9f:19:6f:28:
         30:38:3d:12:aa:fb:ef:40:3a:78:ae:0e:aa:a5:7a:0f:08:c0:
         99:0c:a1:7b:3e:37:64:d5:a0:d4:84:72:13:ae:df:64:23:8f:
         b2:89:91:44:49:a6:dd:a8:f3:bd:e4:28:1b:57:cc:ef:42:c5:
         71:bf:fa:81:0c:5e:37:95:1f:cc:b1:8d:0c:74:97:16:d3:58:
         da:35:f5:d2:dc:a9:e6:70:7f:ff:26:f9:6a:d5:7d:34:f1:d2:
         19:cc:f4:e8:0e:a3:13:c1:42:2e:d8:fc:c9:21:e1:d6:35:04:
         a7:88:42:87:26:7b:af:14:19:83:65:3c:df:17:eb:98:d9:c5:
         6e:a4:8d:c0:61:04:32:2e:9c:ab:90:1c:90:95:2d:78:c9:96:
         49:d7:f9:af:11:c7:cd:9c:5a:19:15:71:d6:f0:68:47:a2:c4:
         15:ef:53:26:92:3a:67:37:dc:c8:14:72:7a:0e:63:28:c2:01:
         0a:b3:40:1d:80:01:52:5e:6c:8e:10:4b:ac:79:a9:a7:70:db:
         14:16:22:42:5e:40:d2:3f:a1:35:52:e1:85:47:a1:dd:cd:72:
         ab:52:20:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:00 2024 by rpki-client on console-fra.rpki-client.org