Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/H3mamyaFzO6BgYZTW3PyGZwG6Pw.roa
File:                     H3mamyaFzO6BgYZTW3PyGZwG6Pw.roa (raw, json)
Hash identifier:          r0h8s6TquBBjHgzEDQt4liEhPww/GhguxKgPV2FiXmc=
Subject key identifier:   1F:79:9A:9B:26:85:CC:EE:81:81:86:53:5B:73:F2:19:9C:06:E8:FC
Certificate issuer:       /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial:       018CC8DF2562C94A27B79F02FAD2D4F54C3E
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/H3mamyaFzO6BgYZTW3PyGZwG6Pw.roa
Signing time:             Tue 02 Jan 2024 06:31:56 +0000
ROA not before:           Tue 02 Jan 2024 06:31:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     62337
IP address blocks:        178.175.164.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Sat 02 Mar 2024 08:39:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:df:25:62:c9:4a:27:b7:9f:02:fa:d2:d4:f5:4c:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
        Validity
            Not Before: Jan  2 06:31:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1f799a9b2685ccee818186535b73f2199c06e8fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:69:34:cc:7e:16:a9:17:63:9c:b0:5b:ff:78:
                    60:2f:db:a8:d9:44:c5:5e:d4:be:9f:3a:12:21:bd:
                    01:e0:45:61:0d:26:78:f8:50:7d:19:83:5c:ac:b9:
                    b5:9f:4a:ff:6d:a9:54:bf:24:77:ee:b4:47:c2:83:
                    a0:9e:ea:e0:b4:94:bf:59:42:02:32:93:6f:20:5d:
                    e0:80:ca:01:3b:94:82:75:3c:0d:6f:00:ed:7d:8e:
                    eb:d7:41:25:4c:79:e1:75:fa:08:53:a7:d3:f3:e3:
                    d8:eb:32:4d:16:f1:de:89:4b:eb:0b:6f:f2:8d:6a:
                    06:d3:9f:4d:30:e9:6c:6e:13:90:1b:d7:2d:56:0f:
                    cf:3f:b9:13:ab:57:8d:dc:7b:2c:e6:42:d7:e2:ca:
                    ba:cb:48:c7:0f:d6:ad:6f:d8:a9:d2:5b:fe:a6:34:
                    f0:c1:27:26:74:5f:c0:e0:68:b3:cf:f3:17:fe:21:
                    f8:91:99:93:e6:3f:a8:c9:7c:6e:80:3b:11:31:30:
                    64:eb:14:15:31:37:b0:b2:0c:ce:e0:4d:1e:e8:21:
                    8d:7b:4c:b2:d6:c3:e2:d4:01:e8:f3:52:30:c4:39:
                    49:e9:2e:e8:1d:da:a3:56:c9:f2:5a:16:70:e3:f7:
                    d0:36:06:12:41:c8:1e:a8:3f:85:d3:41:d1:98:6b:
                    91:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:79:9A:9B:26:85:CC:EE:81:81:86:53:5B:73:F2:19:9C:06:E8:FC
            X509v3 Authority Key Identifier:
                keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/H3mamyaFzO6BgYZTW3PyGZwG6Pw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.175.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c6:aa:c2:28:64:f2:53:c7:45:8e:ab:8a:ed:09:71:5c:16:27:
         89:1e:1e:54:16:04:0a:09:70:f0:3b:ea:ce:9f:7a:1c:32:36:
         9b:e8:02:9b:81:7a:91:cb:60:6a:fc:23:b4:ef:33:6b:98:f7:
         29:c6:27:48:d8:c6:a9:88:58:ae:c2:38:8b:fc:89:af:18:4d:
         0f:2e:77:36:b0:6a:6e:e2:57:6d:ad:fb:e2:35:f4:36:ff:12:
         40:b1:ca:cd:27:12:b2:bf:bb:0e:36:e7:28:92:cb:52:d5:02:
         eb:c5:a6:6d:6c:e3:a4:a6:c8:b1:dd:f6:a4:20:1c:19:59:85:
         ac:4e:fa:4d:a7:9d:42:c1:fb:be:b4:84:e3:bd:a8:62:94:d4:
         60:1e:ec:dd:22:24:c2:32:1c:92:14:52:99:1e:dc:20:d9:09:
         19:04:aa:0e:14:8c:bf:29:89:55:81:ae:82:01:ae:bb:01:b8:
         cc:41:75:5a:58:3b:90:e6:68:48:10:61:41:2e:74:4e:65:4e:
         09:aa:12:7a:4c:69:09:8b:55:37:db:4e:1c:00:0b:ef:aa:d2:
         42:a6:7e:d8:d6:f8:37:d2:32:28:3f:8f:5c:7a:36:46:51:45:
         4f:fd:69:cb:08:dc:73:3e:74:12:75:11:99:c4:41:cd:69:37:
         00:2f:83:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 2 12:40:06 2024 by rpki-client on console.sobornost.net