Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/05373da7-488d-4f72-bdea-e35c5d9faf3e.roa
File:                     05373da7-488d-4f72-bdea-e35c5d9faf3e.roa (raw, json)
Hash identifier:          PsWHd4GY3qrEZw3EqGWpXez0MhBzYTHTh0D6h1EZSXc=
Subject key identifier:   9D:A3:6C:C8:B4:86:2B:07:60:D8:40:5A:8E:28:FB:94:D5:25:D3:4B
Certificate issuer:       /CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
Certificate serial:       09816D6F6513554F2795D7C3E2FFCD12397E2952
Authority key identifier: 45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/05373da7-488d-4f72-bdea-e35c5d9faf3e.roa
Signing time:             Fri 27 Sep 2024 00:00:00 +0000
ROA not before:           Fri 27 Sep 2024 00:00:00 +0000
ROA not after:            Fri 01 Nov 2024 23:59:59 +0000
asID:                     16509
IP address blocks:        51.0.128.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Thu 10 Oct 2024 14:31:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:81:6d:6f:65:13:55:4f:27:95:d7:c3:e2:ff:cd:12:39:7e:29:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=453f4746354e2ad15ce7ebd8dc21f96c0e5c87cf
        Validity
            Not Before: Sep 27 00:00:00 2024 GMT
            Not After : Nov  1 23:59:59 2024 GMT
        Subject: serialNumber=fee14e63c02b21581b3a57d4d492e9a303a76d29f59a1585bbe438b6f26ab748, CN=c336411a-6651-4f13-8ef9-de681c7c9444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:de:1f:64:4d:cc:9e:7e:4e:e7:fd:53:4a:78:
                    39:03:8c:24:34:a5:c3:ea:aa:33:7f:bf:27:d9:66:
                    d4:76:6a:ae:7c:23:76:8b:74:bc:f8:ee:2a:c3:a5:
                    e1:c5:dd:07:9f:54:d5:24:df:f6:2c:d3:c0:be:ee:
                    e0:a8:1d:5a:b2:c0:6f:91:87:d6:85:2f:78:47:1b:
                    8d:c6:80:da:a9:54:dc:9e:5d:37:da:32:4f:68:58:
                    d2:79:a9:7a:9c:e2:ab:3b:4e:43:21:41:7b:22:f3:
                    e2:15:3a:a7:e9:34:b6:7b:a1:1d:09:85:65:79:eb:
                    f6:b2:3b:b8:92:1e:c6:86:42:fe:5b:93:bb:13:7d:
                    3e:e0:e6:00:2b:ef:f1:b0:6b:c5:26:20:3c:e8:99:
                    45:42:c6:d7:44:ec:b9:aa:e1:23:57:c4:87:67:9b:
                    1c:a7:bb:32:ec:45:74:4c:c7:d0:1e:9a:cf:36:df:
                    54:bc:84:0a:0d:bb:a6:3d:d8:30:d7:58:0e:d5:aa:
                    c1:b8:95:7d:19:92:28:f0:0f:5a:2b:90:70:23:1a:
                    d5:47:73:0c:e8:9a:c2:ca:23:a9:cf:83:68:c3:79:
                    7b:82:f5:d5:75:77:6e:73:95:b3:7a:b3:b1:36:81:
                    87:83:1d:42:b5:f4:6b:c8:1d:c3:8f:9b:f1:19:7f:
                    30:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A3:6C:C8:B4:86:2B:07:60:D8:40:5A:8E:28:FB:94:D5:25:D3:4B
            X509v3 Authority Key Identifier:
                keyid:45:3F:47:46:35:4E:2A:D1:5C:E7:EB:D8:DC:21:F9:6C:0E:5C:87:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RT9HRjVOKtFc5-vY3CH5bA5ch88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/05373da7-488d-4f72-bdea-e35c5d9faf3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/967a255c-d680-42d3-9ec3-ecb3f9da088c/_lAi5THDsQdPYA9nmET6olHuVc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  51.0.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:a7:69:13:ef:1a:54:31:0c:aa:94:ab:6c:61:c1:98:4e:6a:
         a4:24:bc:d4:93:74:b0:0a:ba:95:20:b3:3d:f8:64:37:95:f5:
         d8:0f:19:bf:2d:ee:a2:8c:1d:09:75:49:f3:09:dc:90:48:17:
         00:a6:cb:41:97:1d:87:bd:0e:98:71:27:cf:58:39:4c:11:ff:
         93:ff:4f:35:d3:29:ed:19:e6:67:9d:93:d8:2a:79:48:40:93:
         a4:d1:d8:44:cc:d0:8d:97:f2:f3:6f:a7:58:17:ba:a7:18:8b:
         40:75:d8:42:4c:62:e9:8f:bb:8b:91:30:29:02:2d:bb:db:67:
         09:17:91:4a:47:1e:95:5a:91:3d:b6:13:08:15:78:d2:b5:07:
         ea:4c:89:8f:a2:7f:fc:d9:a0:8e:58:4f:3e:54:96:44:36:11:
         0f:a6:12:11:f7:be:fd:b8:68:6c:9d:64:4a:ff:d1:4b:5e:75:
         04:04:5c:8c:cf:de:e4:6a:5c:12:2e:6a:c9:77:92:fa:12:f8:
         2b:33:33:a0:78:cc:ed:20:e0:2d:42:a6:fb:05:96:b8:85:44:
         58:ef:e9:c7:3c:1a:10:26:56:3e:8c:e3:62:7d:0f:e6:15:c5:
         02:25:73:30:1b:8c:ef:63:e7:53:88:b1:ec:cd:93:f5:41:d0:
         e6:d0:1b:08
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgIUCYFtb2UTVU8nldfD4v/NEjl+KVIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDUzZjQ3NDYzNTRlMmFkMTVjZTdlYmQ4ZGMyMWY5NmMw
ZTVjODdjZjAeFw0yNDA5MjcwMDAwMDBaFw0yNDExMDEyMzU5NTlaMHoxSTBHBgNV
BAUTQGZlZTE0ZTYzYzAyYjIxNTgxYjNhNTdkNGQ0OTJlOWEzMDNhNzZkMjlmNTlh
MTU4NWJiZTQzOGI2ZjI2YWI3NDgxLTArBgNVBAMTJGMzMzY0MTFhLTY2NTEtNGYx
My04ZWY5LWRlNjgxYzdjOTQ0NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANzeH2RNzJ5+Tuf9U0p4OQOMJDSlw+qqM3+/J9lm1HZqrnwjdot0vPjuKsOl
4cXdB59U1STf9izTwL7u4KgdWrLAb5GH1oUveEcbjcaA2qlU3J5dN9oyT2hY0nmp
epziqztOQyFBeyLz4hU6p+k0tnuhHQmFZXnr9rI7uJIexoZC/luTuxN9PuDmACvv
8bBrxSYgPOiZRULG10TsuarhI1fEh2ebHKe7MuxFdEzH0B6azzbfVLyECg27pj3Y
MNdYDtWqwbiVfRmSKPAPWiuQcCMa1UdzDOiawsojqc+DaMN5e4L11XV3bnOVs3qz
sTaBh4MdQrX0a8gdw4+b8Rl/MC0CAwEAAaOCAiEwggIdMB0GA1UdDgQWBBSdo2zI
tIYrB2DYQFqOKPuU1SXTSzAfBgNVHSMEGDAWgBRFP0dGNU4q0Vzn69jcIflsDlyH
zzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JUOUhSalZP
S3RGYzUtdlkzQ0g1YkE1Y2g4OC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggr
BgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5hbWF6b25hd3Mu
Y29tL3ZvbHVtZS85NjdhMjU1Yy1kNjgwLTQyZDMtOWVjMy1lY2IzZjlkYTA4OGMv
MDUzNzNkYTctNDg4ZC00ZjcyLWJkZWEtZTM1YzVkOWZhZjNlLnJvYTCBiAYDVR0f
BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u
YXdzLmNvbS92b2x1bWUvOTY3YTI1NWMtZDY4MC00MmQzLTllYzMtZWNiM2Y5ZGEw
ODhjL19sQWk1VEhEc1FkUFlBOW5tRVQ2b2xIdVZjOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEATMAgDAN
BgkqhkiG9w0BAQsFAAOCAQEAKadpE+8aVDEMqpSrbGHBmE5qpCS81JN0sAq6lSCz
PfhkN5X12A8Zvy3uoowdCXVJ8wnckEgXAKbLQZcdh70OmHEnz1g5TBH/k/9PNdMp
7RnmZ52T2Cp5SECTpNHYRMzQjZfy82+nWBe6pxiLQHXYQkxi6Y+7i5EwKQItu9tn
CReRSkcelVqRPbYTCBV40rUH6kyJj6J//NmgjlhPPlSWRDYRD6YSEfe+/bhobJ1k
Sv/RS151BARcjM/e5GpcEi5qyXeS+hL4KzMzoHjM7SDgLUKm+wWWuIVEWO/pxzwa
ECZWPozjYn0P5hXFAiVzMBuM72PnU4ix7M2T9UHQ5tAbCA==
-----END CERTIFICATE-----
Generated at Thu Oct 10 19:31:42 2024 by rpki-client on console-fra.rpki-client.org