Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/FPDRVdoSOHzt3_1MYp2Up_Ejons.roa
File:                     FPDRVdoSOHzt3_1MYp2Up_Ejons.roa (raw, json)
Hash identifier:          T9IW87ZfVh0i8mVrJktWTCbT/HTsuqmKOTJTiEINnJk=
Subject key identifier:   14:F0:D1:55:DA:12:38:7C:ED:DF:FD:4C:62:9D:94:A7:F1:23:A2:7B
Certificate issuer:       /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial:       01857054CFCDE14DC4603D3258A614BD1C63
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/FPDRVdoSOHzt3_1MYp2Up_Ejons.roa
Signing time:             Mon 02 Jan 2023 02:34:44 +0000
ROA not before:           Mon 02 Jan 2023 02:34:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209759
IP address blocks:        5.181.0.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 12:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:54:cf:cd:e1:4d:c4:60:3d:32:58:a6:14:bd:1c:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
        Validity
            Not Before: Jan  2 02:34:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=14f0d155da12387ceddffd4c629d94a7f123a27b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:00:fc:8a:04:e8:47:82:63:41:b7:68:64:aa:
                    b2:0e:2b:dc:96:a2:f2:83:53:d9:13:27:54:50:cf:
                    0f:50:70:ce:80:a3:a0:a2:fe:ec:8e:53:24:4c:40:
                    28:e2:cf:07:87:f2:92:56:59:11:47:2c:37:1f:fd:
                    a0:f0:fa:37:37:d0:69:a3:9e:a0:5f:c3:b6:ab:6b:
                    17:e7:10:8d:2f:80:f3:66:bb:87:30:28:59:05:5a:
                    2d:0b:9f:69:91:60:9c:6e:c5:d2:ee:a1:0b:a6:6c:
                    27:11:aa:d9:0a:61:80:12:69:5e:17:f1:c2:97:eb:
                    9a:e4:3a:73:6f:b4:9f:96:bc:c0:dd:8e:01:ef:9c:
                    fb:c8:bb:6e:20:99:a2:b1:5d:3f:ca:33:a9:81:03:
                    1d:aa:a4:19:3c:1f:4c:0a:8d:e0:80:ca:d2:a7:2b:
                    14:90:cc:d9:85:d2:c7:53:30:eb:c7:9f:72:45:73:
                    30:84:39:5c:74:04:e2:cc:07:e5:83:d7:51:95:e3:
                    a5:b5:97:22:8f:8e:19:7a:72:0f:d7:aa:7e:13:1d:
                    17:74:9b:60:dd:51:0a:63:a5:dd:e0:05:ea:71:b4:
                    14:63:9c:c3:52:7f:8d:15:07:95:26:f4:78:d6:9a:
                    c3:df:f1:11:b7:23:1f:c8:37:3f:62:6b:ed:8e:19:
                    1b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F0:D1:55:DA:12:38:7C:ED:DF:FD:4C:62:9D:94:A7:F1:23:A2:7B
            X509v3 Authority Key Identifier:
                keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/FPDRVdoSOHzt3_1MYp2Up_Ejons.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:ee:ae:e6:ae:97:ce:58:93:01:21:eb:3f:e1:92:4e:5c:9d:
         d1:ad:4c:1c:18:e5:2b:0c:26:41:d0:8c:89:dd:46:e6:44:f8:
         d7:ec:29:59:e7:88:86:4f:f1:e9:a7:f5:f1:26:72:86:d1:71:
         29:2c:8e:ad:ec:45:5b:25:2c:1a:e7:a4:bd:ac:48:e5:02:5d:
         87:b8:64:39:32:65:95:14:15:8b:3b:2b:66:4e:60:33:9c:86:
         f7:ce:d0:4f:ef:9a:bf:07:fe:dc:7a:b3:5f:87:03:9a:47:05:
         bd:66:ac:e8:ab:ea:77:bc:21:3c:09:49:52:97:a3:aa:4c:a6:
         97:43:1a:3e:83:f1:9c:35:07:3d:63:36:0c:a7:da:39:41:53:
         13:3d:cf:7d:e3:01:aa:4b:e9:40:70:32:3c:81:2c:ae:cc:e5:
         e1:4d:07:06:a3:a6:ae:ff:47:ec:45:fe:8d:5d:30:86:b2:ec:
         99:f4:4c:44:1e:97:ff:99:bf:65:50:0e:04:5f:ae:3b:fb:05:
         06:bd:38:dc:4e:a7:d2:da:77:33:51:8e:fa:1f:63:42:cb:c6:
         8d:70:76:d1:a7:c3:c6:6c:8c:a5:a9:27:7f:c8:f6:e6:41:cb:
         f3:6f:a9:ae:f8:75:b7:ae:71:c7:6a:43:ca:de:1b:32:78:3e:
         40:f9:b0:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwVM/N4U3EYD0yWKYUvRxjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3
MjRmNzUwHhcNMjMwMTAyMDIzNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGYwZDE1NWRhMTIzODdjZWRkZmZkNGM2MjlkOTRhN2YxMjNhMjdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQD8igToR4JjQbdoZKqyDivclqLy
g1PZEydUUM8PUHDOgKOgov7sjlMkTEAo4s8Hh/KSVlkRRyw3H/2g8Po3N9Bpo56g
X8O2q2sX5xCNL4DzZruHMChZBVotC59pkWCcbsXS7qELpmwnEarZCmGAEmleF/HC
l+ua5Dpzb7SflrzA3Y4B75z7yLtuIJmisV0/yjOpgQMdqqQZPB9MCo3ggMrSpysU
kMzZhdLHUzDrx59yRXMwhDlcdATizAflg9dRleOltZcij44ZenIP16p+Ex0XdJtg
3VEKY6Xd4AXqcbQUY5zDUn+NFQeVJvR41prD3/ERtyMfyDc/YmvtjhkbGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBTw0VXaEjh87d/9TGKdlKfxI6J7MB8GA1UdIwQY
MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt
MzZkZTY1NzIzMmJlLzEvRlBEUlZkb1NPSHp0M18xTVlwMlVwX0Vqb25zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl
LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBbUAMA0G
CSqGSIb3DQEBCwUAA4IBAQBF7q7mrpfOWJMBIes/4ZJOXJ3RrUwcGOUrDCZB0IyJ
3UbmRPjX7ClZ54iGT/Hpp/XxJnKG0XEpLI6t7EVbJSwa56S9rEjlAl2HuGQ5MmWV
FBWLOytmTmAznIb3ztBP75q/B/7cerNfhwOaRwW9Zqzoq+p3vCE8CUlSl6OqTKaX
Qxo+g/GcNQc9YzYMp9o5QVMTPc994wGqS+lAcDI8gSyuzOXhTQcGo6au/0fsRf6N
XTCGsuyZ9ExEHpf/mb9lUA4EX647+wUGvTjcTqfS2nczUY76H2NCy8aNcHbRp8PG
bIylqSd/yPbmQcvzb6mu+HW3rnHHakPK3hsyeD5A+bD/
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:00 2024 by rpki-client on console-ams.rpki-client.org