Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/5DoHpDT_jULR1Ud3Ao9x8fy9Xt8.roa
File:                     5DoHpDT_jULR1Ud3Ao9x8fy9Xt8.roa (raw, json)
Hash identifier:          FMkM7gH8SqhaTX7U0rRUoZ25HHlWfobZWAf4LBpgwZw=
Subject key identifier:   E4:3A:07:A4:34:FF:8D:42:D1:D5:47:77:02:8F:71:F1:FC:BD:5E:DF
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018EB42F2C6331C681291D7A62B629DE9005
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/5DoHpDT_jULR1Ud3Ao9x8fy9Xt8.roa
Signing time:             Sat 06 Apr 2024 16:12:54 +0000
ROA not before:           Sat 06 Apr 2024 16:12:54 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sat 06 Apr 2024 17:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:b4:2f:2c:63:31:c6:81:29:1d:7a:62:b6:29:de:90:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Apr  6 16:12:54 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e43a07a434ff8d42d1d54777028f71f1fcbd5edf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:95:5c:24:ce:7a:e2:63:c1:91:61:8a:94:6a:
                    b6:7c:fa:3e:8a:a6:ba:b9:ed:78:f4:d6:00:a3:43:
                    49:ab:10:04:12:09:99:c5:31:31:71:36:ee:ad:48:
                    e0:c4:87:d7:a2:62:e4:2a:17:5f:67:90:f7:5d:d8:
                    43:66:4e:a3:87:24:ad:44:50:cb:bc:3f:db:4c:fe:
                    b1:ea:f5:5a:34:87:a9:66:df:68:04:ce:82:f5:d3:
                    07:7a:f6:9e:60:e9:06:e4:33:56:92:74:d4:e3:79:
                    46:82:a2:92:1a:81:ed:19:17:7e:79:dd:39:bf:0f:
                    7f:d3:48:84:b7:6b:87:5a:3a:1f:ba:3c:a7:09:a3:
                    6c:c4:89:e4:d2:5b:c6:26:59:0c:3b:a6:cc:c3:a9:
                    ed:67:2a:af:a7:7a:bf:95:0b:49:af:81:fa:59:60:
                    d2:f0:36:80:99:28:1b:a6:ba:fc:9f:49:c5:09:f6:
                    e6:9a:28:78:9b:03:b0:bf:dd:fc:26:de:10:53:de:
                    ab:43:14:65:87:8c:29:35:eb:e9:0d:8e:ac:6a:f8:
                    8e:7a:23:9e:d9:0a:ff:2d:c9:64:17:dc:45:f4:3c:
                    8e:01:f9:e1:1e:70:1c:83:24:13:6f:44:56:ea:fa:
                    ad:12:44:0e:06:a8:ae:1a:62:9d:52:6e:4b:76:f1:
                    73:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3A:07:A4:34:FF:8D:42:D1:D5:47:77:02:8F:71:F1:FC:BD:5E:DF
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/5DoHpDT_jULR1Ud3Ao9x8fy9Xt8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:39:d8:cf:32:87:91:fd:6d:7b:21:12:4f:01:50:98:19:fd:
         3a:d9:12:c5:e6:ac:86:b4:be:34:6d:bd:eb:54:ef:81:57:57:
         dc:5b:4b:97:a2:1f:67:c3:fa:9d:d8:9a:3f:79:05:5e:03:c9:
         df:b1:26:27:53:5d:2d:86:fc:04:2a:da:0b:14:f6:43:8c:1b:
         1a:61:61:04:9a:41:48:15:3e:71:3b:98:7d:3e:b5:ee:1f:c6:
         93:85:9f:5a:36:5a:da:22:ba:0c:25:74:e8:d1:81:72:d2:34:
         84:65:a0:ac:0c:0a:61:7e:2c:f0:ef:a6:4a:42:87:9b:4a:21:
         0d:86:8d:db:2e:10:58:60:27:43:e7:6e:aa:6f:cd:e1:70:23:
         4d:ef:a2:33:f1:29:8f:ad:68:99:54:5b:5f:db:09:b1:91:f7:
         6a:f2:88:87:d4:ad:45:6d:8c:59:08:88:7a:fd:f4:33:31:fd:
         00:1b:5f:a9:fe:7b:ae:08:6d:05:71:03:03:f6:48:bc:12:82:
         d9:fa:9a:3d:ab:5c:21:e3:58:1b:a9:14:31:e3:35:14:24:46:
         08:28:67:c9:2f:f8:fa:ff:e0:2d:36:63:26:b2:de:10:19:a5:
         15:58:64:b0:85:a3:75:4a:1f:e3:90:20:97:48:32:0f:3a:8d:
         d8:37:f8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 6 23:53:12 2024 by rpki-client on console.sobornost.net