Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/yipn8VQiUKjvjVfF24gr2a073gA.roa
File:                     yipn8VQiUKjvjVfF24gr2a073gA.roa (raw, json)
Hash identifier:          B99fM2P0HQowGBiu6igQ4icXDRb4+010cfPjv/wxzus=
Subject key identifier:   CA:2A:67:F1:54:22:50:A8:EF:8D:57:C5:DB:88:2B:D9:AD:3B:DE:00
Certificate issuer:       /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial:       018AF525D54317D9DE48595BBF943CE224AD
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/yipn8VQiUKjvjVfF24gr2a073gA.roa
Signing time:             Tue 03 Oct 2023 10:46:51 +0000
ROA not before:           Tue 03 Oct 2023 10:46:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201364
IP address blocks:        87.251.6.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:f5:25:d5:43:17:d9:de:48:59:5b:bf:94:3c:e2:24:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
        Validity
            Not Before: Oct  3 10:46:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ca2a67f1542250a8ef8d57c5db882bd9ad3bde00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8e:3e:ad:17:e7:e9:91:37:cf:3d:50:3f:76:
                    47:ec:cd:2d:ca:8a:84:da:82:28:ae:ab:1e:92:46:
                    63:4b:37:03:3b:69:06:45:72:c8:ae:d7:e2:a9:ac:
                    38:5d:06:5e:be:16:20:7e:52:6f:48:e9:5e:e9:90:
                    49:78:13:a9:b0:4b:b9:4f:d7:a1:6b:4e:9b:72:d9:
                    5a:32:47:c5:73:e4:a0:d3:42:4f:c2:24:75:ae:5b:
                    8a:e7:75:fe:63:44:65:cb:60:59:a2:1c:00:d1:c2:
                    14:e7:d4:e5:da:6d:b4:54:12:6e:c2:4f:b6:57:c6:
                    25:3a:17:44:32:4e:34:24:40:7c:f4:4f:f2:cd:70:
                    d6:9a:2f:eb:1f:cf:4d:70:e4:f0:64:f7:a6:f5:02:
                    dc:9c:19:50:b7:69:5a:61:8d:1f:5a:4c:b1:4f:e7:
                    29:76:a7:29:ed:87:88:e5:98:da:0e:6f:cd:76:fa:
                    fb:a4:b7:48:a5:d9:2d:c1:c6:6f:9b:e7:d0:50:dc:
                    1f:11:02:09:6a:ea:32:f7:b2:2b:db:95:3a:3b:ba:
                    c1:c5:3c:2b:81:8f:2a:07:a4:22:4e:2f:ed:29:eb:
                    03:bb:b8:eb:92:91:77:b1:49:fa:d7:73:3d:62:e3:
                    a9:cf:07:ce:40:bd:c2:64:14:90:3e:92:12:e9:39:
                    98:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:2A:67:F1:54:22:50:A8:EF:8D:57:C5:DB:88:2B:D9:AD:3B:DE:00
            X509v3 Authority Key Identifier:
                keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/yipn8VQiUKjvjVfF24gr2a073gA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.251.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:c9:f1:a6:a6:8d:03:87:6e:8c:e7:ce:d0:83:2b:46:ff:e5:
         df:be:82:98:d8:43:44:5f:9b:d4:1d:ee:6c:08:03:1b:5a:ba:
         c4:10:f3:f3:ec:ec:db:47:a4:f7:08:60:b5:9a:5e:b8:eb:93:
         16:d2:c5:11:24:09:9c:ae:0f:18:1e:c1:a4:36:dd:1d:33:c3:
         20:65:47:34:9c:c2:36:ea:0a:b0:4b:8d:47:e9:aa:4d:e7:e6:
         54:8c:23:a0:50:d0:67:c6:d2:b7:a9:7e:70:5b:57:48:a4:ae:
         62:f1:0a:56:99:98:3d:26:4b:d6:be:a5:74:73:d3:1b:3c:7a:
         bf:b2:48:de:40:bd:27:a9:7a:d2:21:a5:98:6e:f2:ae:45:c9:
         b4:d0:ad:9b:b0:9c:f8:11:f6:f5:12:c8:48:0f:8d:18:b2:c1:
         32:b0:76:5c:31:e0:19:72:cb:a8:8d:e8:b3:57:81:b2:ca:8a:
         fe:98:79:91:62:3c:ec:80:54:eb:08:75:23:ff:f5:2b:a9:ac:
         cd:fc:c3:6c:bf:96:f2:26:87:81:e3:45:20:80:76:9d:2b:91:
         1a:84:fb:53:e2:73:95:15:ef:18:cd:20:6d:58:69:ff:dd:4c:
         18:48:bb:59:06:bf:16:d4:5d:67:77:22:18:4e:1b:c0:af:37:
         ae:ba:b0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:44 2023 by rpki-client on console.sobornost.net