Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/XuSKx25eNIojggeqB6hjx6WQ2Kk.roa
File:                     XuSKx25eNIojggeqB6hjx6WQ2Kk.roa (raw, json)
Hash identifier:          kpqzziPlSGhXCb5djGFjKnXvQxiU2C7+e7lQw/tIg4o=
Subject key identifier:   5E:E4:8A:C7:6E:5E:34:8A:23:82:07:AA:07:A8:63:C7:A5:90:D8:A9
Certificate issuer:       /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial:       0185729ECB881682DAB8BE798BBEBA221197
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/XuSKx25eNIojggeqB6hjx6WQ2Kk.roa
Signing time:             Mon 02 Jan 2023 13:14:47 +0000
ROA not before:           Mon 02 Jan 2023 13:14:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211804
IP address blocks:        45.143.97.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 31 May 2023 21:06:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:9e:cb:88:16:82:da:b8:be:79:8b:be:ba:22:11:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
        Validity
            Not Before: Jan  2 13:14:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5ee48ac76e5e348a238207aa07a863c7a590d8a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6f:a1:ab:55:90:84:73:0c:18:e7:c9:87:c2:
                    03:3d:69:bc:6b:a1:4f:67:5d:1d:dd:20:2b:79:22:
                    9b:22:7f:a2:47:d7:5c:62:f7:35:dd:69:7a:3f:b1:
                    93:da:c6:e9:f4:59:2c:0f:08:60:f1:5c:76:13:56:
                    5f:a9:bc:7c:25:12:f2:38:c9:48:db:c7:38:36:96:
                    59:90:62:18:6d:66:c2:6d:06:f2:54:64:d7:fe:57:
                    fa:1c:af:57:b5:92:73:30:3c:17:69:7a:0f:8d:9f:
                    f3:df:37:76:ac:f7:79:de:93:77:8f:7c:08:85:6f:
                    75:55:8e:dc:32:0c:2c:e6:37:08:55:2a:1b:08:03:
                    57:67:e9:24:52:fd:19:e0:0a:62:4f:15:e8:fc:5e:
                    a2:f2:3a:39:f5:4f:c8:f5:0e:7c:c4:a7:7f:a0:7e:
                    bb:76:65:ab:99:14:01:55:55:9f:75:cd:62:8d:fe:
                    ba:4c:e5:e4:63:0e:e6:ac:3c:d7:05:d4:df:0e:50:
                    9e:0d:9f:43:b9:26:5d:98:82:2b:db:ec:3d:f3:8e:
                    77:ce:0f:c4:00:8f:48:7a:57:ef:3f:d9:39:50:e3:
                    c9:01:13:38:b4:30:22:0c:b7:5c:4c:71:58:20:b6:
                    99:9f:ee:d8:e4:ec:af:4c:eb:91:fa:03:9d:5b:ed:
                    17:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E4:8A:C7:6E:5E:34:8A:23:82:07:AA:07:A8:63:C7:A5:90:D8:A9
            X509v3 Authority Key Identifier:
                keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/XuSKx25eNIojggeqB6hjx6WQ2Kk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.143.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:d0:cc:b8:eb:e7:65:a7:f5:1e:e4:76:51:9b:a9:c4:da:73:
         a3:28:6c:83:3d:df:04:0d:36:61:32:b8:62:d8:5e:86:86:fe:
         a4:bf:a5:f4:c5:96:82:4e:33:e0:5d:fc:1b:f8:f8:10:f1:55:
         f6:34:31:0a:ce:0a:83:e3:02:67:53:98:e8:99:72:1a:f3:6e:
         ea:f1:06:69:cb:06:78:10:60:9c:e5:58:71:38:44:aa:1d:a7:
         de:86:03:83:f7:3e:8a:19:f8:fd:30:4d:e2:e9:43:7f:0c:36:
         76:ad:d9:c3:31:12:bc:42:f4:99:1e:32:ab:5e:e1:3a:2d:10:
         e1:87:d5:83:37:5b:b7:3e:70:8c:42:b2:3f:22:32:c6:50:23:
         f7:9f:c9:30:3c:6b:d9:4a:c9:46:84:e4:09:06:2f:cf:2a:66:
         a3:71:ce:f0:dd:19:fc:c5:0c:a6:0f:4c:59:9f:51:63:e1:7d:
         78:76:27:e3:22:07:fc:d3:59:30:8b:be:57:2c:bb:15:b7:00:
         59:dc:f3:a3:07:9f:6f:5b:dd:76:8f:0c:db:29:85:5d:13:8e:
         7f:f6:8e:04:91:26:bc:d2:95:9a:60:b7:6d:cf:d3:69:c8:71:
         9c:ed:81:cd:10:9d:51:de:dd:bb:68:83:da:b1:a9:a6:d7:ee:
         8c:9f:c3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:45 2024 by rpki-client on console-ams.rpki-client.org