Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/UxTv_YanE4QZNljz9lgPTbAWUc8.roa
File:                     UxTv_YanE4QZNljz9lgPTbAWUc8.roa (raw, json)
Hash identifier:          Jk7RbtyjVn3ACxTLq3GxhfDvipcuMXM52CShdQlKSlQ=
Subject key identifier:   53:14:EF:FD:86:A7:13:84:19:36:58:F3:F6:58:0F:4D:B0:16:51:CF
Certificate issuer:       /CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
Certificate serial:       018A4BE0491CE98276F99EE933FA62F371F7
Authority key identifier: 4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/UxTv_YanE4QZNljz9lgPTbAWUc8.roa
Signing time:             Thu 31 Aug 2023 13:55:04 +0000
ROA not before:           Thu 31 Aug 2023 13:55:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57469
IP address blocks:        178.22.28.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 16:30:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:4b:e0:49:1c:e9:82:76:f9:9e:e9:33:fa:62:f3:71:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bd45e58206a1b9d59eddfa8f988b32717bf9c6b
        Validity
            Not Before: Aug 31 13:55:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5314effd86a71384193658f3f6580f4db01651cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:98:2c:d5:a2:4a:b9:a7:97:11:d3:73:da:ca:
                    b8:ec:c9:37:b8:bd:33:8d:91:43:6b:dc:fa:01:c3:
                    29:a0:c9:a5:ec:2e:d5:02:c8:ed:d5:4b:81:15:bb:
                    8d:26:56:5a:2b:16:d7:83:78:38:48:e5:1a:ae:0d:
                    3f:32:03:4b:c9:aa:01:cc:a9:d7:32:07:63:4c:39:
                    44:3b:c9:4e:29:f2:5b:f1:7b:57:d7:b3:e9:6d:91:
                    05:d3:3f:d9:c2:07:84:a9:0b:3e:c7:17:93:61:86:
                    1d:99:61:04:5f:f5:03:f3:b1:67:88:6a:9f:da:2e:
                    7d:2d:40:46:e8:b7:86:4e:0c:1d:fb:1b:bc:b7:e1:
                    8b:04:6a:3f:b2:74:91:dd:06:50:a6:7b:d8:1f:97:
                    af:20:b0:53:01:27:79:b6:d4:72:bc:f9:38:aa:ab:
                    e2:f0:46:b5:05:d8:84:03:df:11:00:6d:7b:07:51:
                    76:56:23:a9:85:d1:cb:f5:ad:a6:ee:c4:be:f9:8a:
                    5d:8d:20:c5:0f:ec:ea:08:0f:6d:2b:af:a2:c3:db:
                    cd:d5:2f:c1:ce:16:47:98:06:d3:36:5f:76:ba:9d:
                    af:53:b9:8c:f9:d8:96:8f:8a:3a:71:bf:dd:39:1f:
                    07:bf:3e:a9:61:43:ab:1c:45:25:54:15:99:5c:e0:
                    ba:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:14:EF:FD:86:A7:13:84:19:36:58:F3:F6:58:0F:4D:B0:16:51:CF
            X509v3 Authority Key Identifier:
                keyid:4B:D4:5E:58:20:6A:1B:9D:59:ED:DF:A8:F9:88:B3:27:17:BF:9C:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S9ReWCBqG51Z7d-o-YizJxe_nGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/UxTv_YanE4QZNljz9lgPTbAWUc8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2f48bd-a8e3-487b-a274-078510ceac0d/1/S9ReWCBqG51Z7d-o-YizJxe_nGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.22.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:0f:95:7c:42:22:9e:c9:68:7c:9e:93:d5:1e:96:02:fe:42:
         ad:06:c4:fb:07:e3:90:cf:f1:4d:d3:64:a6:1d:d0:29:ea:05:
         c5:8b:39:6b:a7:bc:1b:a3:02:73:44:4d:57:23:90:14:df:95:
         3d:32:2c:89:1a:56:da:a9:80:4b:b8:9d:19:8a:d2:ac:53:11:
         a9:50:a6:83:14:3b:92:d9:f5:10:af:72:19:3f:a8:1e:74:76:
         f7:f7:6d:1d:1e:8e:71:5f:fc:00:bf:60:20:2b:cd:25:70:ea:
         f8:b4:b5:15:b6:cf:0c:23:10:54:06:a3:c2:9c:84:6e:40:15:
         d2:11:d3:c3:21:cf:e4:0d:53:25:ed:01:76:25:83:46:b4:21:
         f3:23:87:91:a6:bf:99:e6:5a:da:52:c7:38:2e:ac:8e:aa:b3:
         c5:b2:f7:d7:4e:f3:d6:37:ba:c4:de:41:75:d3:11:74:67:af:
         d3:65:cc:88:13:b4:c8:d5:d5:f5:d0:02:ea:6c:24:f9:04:64:
         5a:d1:d7:bf:07:2c:fb:65:cf:59:34:3b:86:56:63:db:6f:63:
         77:12:88:96:9a:9e:7d:98:0b:14:5a:34:7d:79:63:87:a6:95:
         2e:18:89:8f:db:da:67:dd:79:09:2e:32:c9:76:be:ef:d3:fe:
         f2:b8:1c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:19 2024 by rpki-client on console-ams.rpki-client.org