Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/FBAxMrujMtRiaraXhGGGvBHXvYw.roa
File:                     FBAxMrujMtRiaraXhGGGvBHXvYw.roa (raw, json)
Hash identifier:          LqbqrRnvk41Jt+eVKktePxxnjdAOIRbIRDti9I6QRhE=
Subject key identifier:   14:10:31:32:BB:A3:32:D4:62:6A:B6:97:84:61:86:BC:11:D7:BD:8C
Certificate issuer:       /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial:       01857054D028708F93B6F3A49131F02B85A8
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/FBAxMrujMtRiaraXhGGGvBHXvYw.roa
Signing time:             Mon 02 Jan 2023 02:34:44 +0000
ROA not before:           Mon 02 Jan 2023 02:34:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210512
IP address blocks:        45.143.166.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 12:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:54:d0:28:70:8f:93:b6:f3:a4:91:31:f0:2b:85:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
        Validity
            Not Before: Jan  2 02:34:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=14103132bba332d4626ab697846186bc11d7bd8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:52:bb:40:2e:e7:92:7e:2c:85:da:ae:c8:42:
                    a8:5b:41:f5:1c:e0:91:72:98:3c:08:f7:77:d4:f2:
                    33:31:19:20:a8:e5:0b:99:3a:86:32:9c:98:59:03:
                    85:b3:57:e9:86:53:7c:f5:f1:1d:fd:8b:a5:a9:52:
                    c1:13:41:b6:21:78:1b:d5:0c:37:a2:11:57:8d:39:
                    a7:1d:4c:45:35:ff:3e:40:ed:69:e1:27:87:40:3a:
                    9f:53:6b:77:07:8f:47:d3:6c:05:db:ab:1d:b0:07:
                    95:31:a8:9a:2d:75:10:e2:22:42:30:fe:4c:29:f1:
                    b4:5a:25:b4:22:a0:14:c8:21:f8:ed:1b:7b:7e:f2:
                    78:99:d5:26:6e:fe:b9:2f:61:b8:71:c5:f2:6f:0b:
                    08:ab:46:15:87:60:8a:c3:42:dd:82:53:08:c7:e6:
                    3a:16:f0:f7:2d:57:a3:e8:4b:19:7b:f1:cb:5d:b5:
                    6a:78:0f:f5:d6:74:4a:80:c9:ee:01:fb:d7:e7:64:
                    e0:b7:75:c4:c5:d3:79:02:ee:38:6e:50:91:ef:9e:
                    bf:0d:2e:33:66:fd:a4:cf:15:d2:17:7f:76:2d:1b:
                    51:e3:c2:ba:5a:33:14:78:51:80:50:8a:8b:fa:df:
                    10:32:af:5e:16:16:70:69:4c:d1:a8:73:89:4b:a7:
                    b5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:10:31:32:BB:A3:32:D4:62:6A:B6:97:84:61:86:BC:11:D7:BD:8C
            X509v3 Authority Key Identifier:
                keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/FBAxMrujMtRiaraXhGGGvBHXvYw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.143.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:10:4a:54:51:96:09:d2:3f:0b:5c:99:45:5a:56:18:45:73:
         b2:b3:26:60:fb:1e:5d:12:8b:da:ac:ee:f3:94:55:0e:e3:d8:
         f9:3a:3d:b7:b7:be:d6:f4:98:fc:f0:9c:12:4c:60:c2:98:3f:
         33:fe:e0:d7:ab:67:cd:50:0f:a2:0b:62:58:04:70:c7:1f:f1:
         92:05:f7:34:4a:eb:9d:48:c4:76:a7:4f:47:92:a4:92:ef:7b:
         a5:42:54:74:02:74:b4:37:ad:bd:d5:60:13:b7:8e:19:1d:03:
         42:6d:93:f1:84:23:7e:70:73:f4:4c:02:45:04:39:73:18:ea:
         90:cd:f7:68:a6:d9:3e:e8:90:04:45:10:27:66:35:50:e5:76:
         76:25:da:5f:6d:cc:cc:89:c9:67:7a:59:1e:4b:55:4c:ef:d8:
         26:68:f4:f9:33:f5:7a:3a:01:97:2e:0f:f0:da:9d:01:3c:f2:
         02:42:47:d1:ff:df:f0:d9:c0:b4:95:c9:90:4b:e2:20:73:6d:
         0a:5d:5c:e7:26:74:0d:10:79:b5:be:b9:b1:1e:39:f9:4e:c5:
         df:41:79:96:b5:9b:4e:dd:09:5a:23:0d:e7:f2:43:51:a0:cf:
         e1:b1:bf:e8:ba:8f:ad:a2:2e:19:ed:15:d8:63:e7:4b:66:14:
         99:9f:1d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:00 2024 by rpki-client on console-ams.rpki-client.org