Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/sgPSDHso7LhMeJPOHjSsnJoisN8.roa
File:                     sgPSDHso7LhMeJPOHjSsnJoisN8.roa (raw, json)
Hash identifier:          UGpNO+vL6AiYY66Hi9fQ8Px8UrKDsXpgRS0sPvACAo4=
Subject key identifier:   B2:03:D2:0C:7B:28:EC:B8:4C:78:93:CE:1E:34:AC:9C:9A:22:B0:DF
Certificate issuer:       /CN=b62fccda29be666deef8ec62d6bc1e6cd067c35f
Certificate serial:       01856F797207FA7540E6041E843C71062CFA
Authority key identifier: B6:2F:CC:DA:29:BE:66:6D:EE:F8:EC:62:D6:BC:1E:6C:D0:67:C3:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ti_M2im-Zm3u-Oxi1rwebNBnw18.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/sgPSDHso7LhMeJPOHjSsnJoisN8.roa
Signing time:             Sun 01 Jan 2023 22:35:08 +0000
ROA not before:           Sun 01 Jan 2023 22:35:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208343
IP address blocks:        45.144.32.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 04:30:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:79:72:07:fa:75:40:e6:04:1e:84:3c:71:06:2c:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b62fccda29be666deef8ec62d6bc1e6cd067c35f
        Validity
            Not Before: Jan  1 22:35:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b203d20c7b28ecb84c7893ce1e34ac9c9a22b0df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:17:60:48:85:13:c3:8d:fb:48:f6:0b:be:58:
                    a6:de:66:cf:65:85:58:91:d0:af:2f:9d:3a:03:d5:
                    de:c8:f8:7a:b5:3e:9f:b1:90:13:80:c0:e5:4f:97:
                    bd:05:f8:9b:5e:26:b3:2d:82:c4:9a:0f:35:90:16:
                    27:3e:8c:e9:01:c7:bc:ea:4f:f4:08:42:85:72:d8:
                    54:07:86:ad:6b:e9:3c:e7:5a:18:80:e8:09:5c:88:
                    42:4b:f2:48:7f:85:0a:e1:77:4a:1b:41:7d:10:83:
                    b0:9c:6d:e5:f8:f6:c1:b3:dd:04:72:06:a4:2c:0f:
                    27:09:cb:f2:a4:a7:a4:8f:cd:cf:27:65:e8:66:b1:
                    00:5a:bd:7c:53:9b:39:73:17:4b:e2:c4:a5:9d:ea:
                    bd:12:ce:9b:46:b1:61:f1:66:a3:99:f8:7c:60:3b:
                    56:bf:e7:17:bb:0a:f4:f4:5c:53:64:ce:ef:64:69:
                    47:70:d2:32:be:54:0f:31:3c:99:38:07:c5:33:c0:
                    4c:cd:f2:42:e2:61:ed:75:6a:8d:34:d1:14:37:70:
                    fd:d7:06:d2:97:e2:01:79:46:a9:10:ce:00:15:6f:
                    1e:f5:5b:64:eb:3b:0c:73:77:d4:af:7f:30:1b:2f:
                    ab:d1:e1:a1:b1:0b:37:d4:b9:26:01:2f:10:ad:f5:
                    55:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:03:D2:0C:7B:28:EC:B8:4C:78:93:CE:1E:34:AC:9C:9A:22:B0:DF
            X509v3 Authority Key Identifier:
                keyid:B6:2F:CC:DA:29:BE:66:6D:EE:F8:EC:62:D6:BC:1E:6C:D0:67:C3:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti_M2im-Zm3u-Oxi1rwebNBnw18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/sgPSDHso7LhMeJPOHjSsnJoisN8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9ff645-e0f1-4b18-980f-eda59bc9ca2c/1/ti_M2im-Zm3u-Oxi1rwebNBnw18.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.144.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:6f:a5:aa:91:40:ee:cd:df:08:6c:17:00:d2:ae:57:7d:91:
         8e:db:d4:53:a4:6c:fe:bf:72:7a:c7:0d:87:79:5b:2f:cd:01:
         a5:2a:0a:4d:b7:96:70:30:25:3c:4a:1c:32:4d:6a:eb:95:60:
         f0:97:72:9d:2d:1f:be:34:00:53:ce:b9:86:3d:85:6e:1d:39:
         59:27:df:66:8c:21:35:50:f9:2c:b8:6e:49:c1:80:a6:bb:c6:
         f3:73:c4:87:72:a8:75:ba:01:08:ca:a7:8e:20:d6:3d:71:7c:
         38:8c:0e:54:75:c7:b1:92:b2:e0:f0:0c:4f:dd:f2:0a:81:33:
         f6:04:50:9d:53:30:5a:7d:a3:df:7c:1c:6d:1e:a8:b3:ab:0d:
         14:13:53:8b:19:99:ba:1f:25:5b:54:1d:e8:11:ae:0e:d5:8b:
         f8:b8:52:e7:3a:17:c1:18:2d:cb:73:a4:64:17:33:1b:dd:a2:
         d8:2d:b8:4a:8d:b3:5a:77:cf:49:86:91:ed:bb:13:dc:47:e2:
         e2:00:25:aa:29:1e:55:40:75:3b:ef:86:84:44:b0:bf:9d:54:
         85:de:6c:ae:c2:f5:0b:32:1b:f3:ba:eb:0f:9f:87:3e:7a:63:
         0f:2c:2a:82:1c:2c:16:cf:46:8a:6e:0f:ba:2b:fb:88:6a:f3:
         cb:b3:e7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:23 2024 by rpki-client on console-fra.rpki-client.org