Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS10753.roa
File:                     AS10753.roa (raw, json)
Hash identifier:          XsBgfdQh76zyYn2p79yMZHound2pv+1MAF914rj7mMs=
Subject key identifier:   32:01:57:6D:5A:06:9B:23:FA:99:DD:72:30:C2:7D:1D:EE:35:92:B8
Certificate issuer:       /CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
Certificate serial:       47DA16EDADB0ABC5FFB04C79D0DBF9041D8F946D
Authority key identifier: 9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS10753.roa
Signing time:             Fri 16 May 2025 09:39:45 +0000
ROA not before:           Fri 16 May 2025 09:34:45 +0000
ROA not after:            Fri 15 May 2026 09:39:45 +0000
asID:                     10753
IP address blocks:        92.113.60.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Wed 28 May 2025 00:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:da:16:ed:ad:b0:ab:c5:ff:b0:4c:79:d0:db:f9:04:1d:8f:94:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd813391e4af2ae3103c1891b2272d4d5c13b5f
        Validity
            Not Before: May 16 09:34:45 2025 GMT
            Not After : May 15 09:39:45 2026 GMT
        Subject: CN=3201576D5A069B23FA99DD7230C27D1DEE3592B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:46:eb:22:43:4a:90:74:79:b1:4d:84:1a:f1:
                    88:0a:71:44:94:60:b9:5d:69:6e:d6:19:bd:13:70:
                    1c:4a:a4:bb:dd:fe:62:2c:5c:ee:db:d8:7b:8a:40:
                    5f:c4:91:70:c7:42:82:82:60:93:76:e2:0c:a5:d5:
                    05:2f:b0:a6:f2:7f:37:52:d1:5c:bc:de:7f:9d:73:
                    7b:68:bb:e0:76:a1:6f:51:60:db:c9:20:4c:d7:69:
                    ca:b1:d1:8a:4f:24:fb:00:a5:18:76:01:50:16:f4:
                    84:85:b0:43:61:64:44:9a:34:aa:05:c5:fe:2c:be:
                    0c:4d:fc:c3:16:6b:4c:fb:be:e1:7a:7b:7d:2c:16:
                    e0:e5:12:93:6c:b3:8c:a4:ff:02:e7:f1:9c:fc:2b:
                    44:bb:1d:72:39:fc:de:96:02:e9:7f:70:e8:21:27:
                    3e:e3:34:fb:26:e2:45:f3:de:1d:13:6d:ea:49:4a:
                    8e:5a:1b:29:23:4b:e8:a6:4f:e4:9e:6b:73:55:da:
                    10:73:92:1d:87:bc:06:41:61:9a:8f:0e:f8:c1:c7:
                    11:e6:89:4d:c3:62:e1:15:cf:60:18:49:fb:0f:dc:
                    76:9a:af:b5:45:6b:53:ee:76:0a:e1:f5:32:d1:92:
                    b5:78:41:e4:0f:38:74:82:4c:57:b9:e7:8b:66:56:
                    d4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:01:57:6D:5A:06:9B:23:FA:99:DD:72:30:C2:7D:1D:EE:35:92:B8
            X509v3 Authority Key Identifier:
                keyid:9B:D8:13:39:1E:4A:F2:AE:31:03:C1:89:1B:22:72:D4:D5:C1:3B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/9BD813391E4AF2AE3103C1891B2272D4D5C13B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9gTOR5K8q4xA8GJGyJy1NXBO18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c478f6f5-449a-4827-99d5-bf6b93a8f6b4/0/AS10753.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.113.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:a0:51:30:94:8d:3d:6c:3a:45:f6:a9:09:6a:c6:95:45:c7:
         89:f6:96:f2:63:4a:4b:b9:bd:86:a7:6c:5f:d7:4c:ea:d3:57:
         11:c3:46:70:ae:8b:71:94:5e:c1:3f:86:e4:90:17:aa:c4:32:
         1a:8c:a2:c2:45:65:0d:31:3f:78:fd:5d:9b:99:5d:6a:b5:58:
         de:4d:02:98:da:ea:2a:c7:7c:2e:66:81:4d:7e:de:ee:5c:84:
         9c:51:1a:9d:53:d7:e9:5b:ea:c6:b9:28:7e:59:c1:2e:4a:01:
         55:9f:aa:8b:b0:7d:a3:af:48:0d:a0:73:cb:0d:a5:c9:f9:5a:
         c5:93:ce:42:44:3c:ff:77:72:62:f9:1d:d0:36:b4:ea:a6:30:
         4b:e7:96:6c:bc:57:b8:4f:7d:69:90:ba:24:a6:9f:1a:86:32:
         20:a8:58:f8:97:04:00:42:ab:73:70:eb:60:dd:fb:f6:80:61:
         61:d9:42:03:38:34:c2:6e:cd:8c:c0:a9:42:87:d3:03:59:4b:
         c9:a2:d8:bb:d9:6c:a3:ee:33:d9:5c:ab:ad:d3:4c:8b:fe:0d:
         79:29:eb:b3:a5:d5:e5:45:7a:6a:b5:01:89:14:76:59:b1:07:
         8b:3a:1a:5b:61:73:c1:a1:90:b3:f7:97:35:e3:bb:22:3f:c6:
         bc:3d:8e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 22:10:16 2025 by rpki-client