Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/hLwnS7nodGCGV-Y3vcnmUV7felU.roa
File:                     hLwnS7nodGCGV-Y3vcnmUV7felU.roa (raw, json)
Hash identifier:          M/wDHMrzx2meisGZbAF3H29sFux9a3Y93r5V/Ex7nbM=
Subject key identifier:   84:BC:27:4B:B9:E8:74:60:86:57:E6:37:BD:C9:E6:51:5E:DF:7A:55
Certificate issuer:       /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial:       018F616E1B9B3E0F3855D768E9057FA3D8D8
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/hLwnS7nodGCGV-Y3vcnmUV7felU.roa
Signing time:             Fri 10 May 2024 07:35:56 +0000
ROA not before:           Fri 10 May 2024 07:35:56 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     55933
IP address blocks:        43.225.88.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Fri 07 Jun 2024 11:28:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:61:6e:1b:9b:3e:0f:38:55:d7:68:e9:05:7f:a3:d8:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
        Validity
            Not Before: May 10 07:35:56 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=84bc274bb9e874608657e637bdc9e6515edf7a55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:59:ad:be:a4:c3:fc:d9:5d:7b:61:27:13:03:
                    61:64:5d:79:d0:86:3e:dd:aa:8e:1d:14:38:e0:f5:
                    cf:cd:c2:1c:40:1b:4e:69:42:7f:1f:45:c6:78:8c:
                    a4:00:f8:10:4d:5d:37:0b:04:36:ac:ed:5c:b9:68:
                    c4:9e:98:6e:88:20:e0:a0:a8:a3:44:56:95:db:9a:
                    c1:80:29:1e:d1:ea:84:65:eb:e4:02:99:e8:25:63:
                    60:ed:eb:ec:74:14:aa:5d:72:b9:eb:67:bd:2f:9a:
                    f1:e5:a2:46:64:60:76:0c:27:6d:78:8a:81:10:d7:
                    63:2d:f1:75:7c:37:a2:d2:58:e6:c8:7a:ec:32:ba:
                    b6:11:0a:27:23:33:1c:58:d0:aa:df:79:cc:ac:6c:
                    af:ff:25:bd:86:50:63:56:90:40:0e:be:48:02:6f:
                    74:09:73:4c:78:cc:27:1e:7e:39:ad:9f:b8:35:a9:
                    44:36:25:5d:dd:d1:73:42:a6:d9:32:b4:52:9a:a4:
                    b8:b8:a8:ed:1a:be:bd:c5:89:52:a6:2a:e4:62:a9:
                    58:51:2b:45:f8:ef:09:c0:3f:8c:e2:35:db:c6:08:
                    ae:64:21:45:c3:48:fe:42:6c:a5:f3:66:b2:7f:b2:
                    12:56:54:33:92:ec:81:c4:dd:97:59:9f:73:bf:12:
                    57:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:BC:27:4B:B9:E8:74:60:86:57:E6:37:BD:C9:E6:51:5E:DF:7A:55
            X509v3 Authority Key Identifier:
                keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/hLwnS7nodGCGV-Y3vcnmUV7felU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.225.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:72:da:eb:61:13:41:1b:79:e8:ef:17:3b:85:ff:f9:54:a5:
         79:45:dc:66:54:0b:ee:70:66:1e:27:b5:ed:ec:43:f7:0f:12:
         c4:c9:67:69:76:1e:ab:e6:3e:c3:26:cb:8a:2e:57:79:2c:60:
         ed:04:e6:e1:13:8d:8a:9d:9c:5b:d6:fc:07:98:6c:b7:a8:f5:
         d0:b3:82:b2:51:40:48:79:80:be:21:4f:45:39:68:cd:ed:75:
         33:53:45:c4:73:09:a0:2a:93:20:76:e9:8d:1d:df:e0:27:87:
         84:13:75:ce:25:f2:e8:ea:3a:80:f3:49:27:83:bb:0c:5d:d1:
         fb:db:06:40:4d:c8:4a:17:bc:60:29:b7:38:32:24:f6:bd:5d:
         87:b3:30:68:90:4d:7b:32:80:e9:e3:26:67:78:68:ea:e8:0a:
         10:bc:5a:ab:61:a8:41:7d:c0:4c:32:32:a6:a1:ff:3e:8c:3b:
         0d:ab:3d:f6:95:9a:bc:24:f4:c7:1c:22:79:3e:c5:73:67:88:
         09:cf:41:e2:be:1b:31:f3:a5:56:ee:86:cf:d9:eb:cc:7f:f8:
         ba:19:95:f6:02:0e:df:ed:06:f4:90:ce:fb:0d:36:93:24:fa:
         c6:9c:a3:49:4c:06:e5:50:9e:5f:a7:3c:85:1e:e7:96:5c:17:
         7a:79:68:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:45:30 2024 by rpki-client on console-fra.rpki-client.org