Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/UyVrXeQ6305asRtrpsHZqq7pPjo.roa
File:                     UyVrXeQ6305asRtrpsHZqq7pPjo.roa (raw, json)
Hash identifier:          n1hogCzEu+OHzY52zGNQMeBBYpX5CLVcKPjrGfvMc04=
Subject key identifier:   53:25:6B:5D:E4:3A:DF:4E:5A:B1:1B:6B:A6:C1:D9:AA:AE:E9:3E:3A
Certificate issuer:       /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial:       0185711E6F71A69CA086ADB13130BF497199
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/UyVrXeQ6305asRtrpsHZqq7pPjo.roa
Signing time:             Mon 02 Jan 2023 06:14:58 +0000
ROA not before:           Mon 02 Jan 2023 06:14:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209956
IP address blocks:        45.13.119.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 08 Jun 2023 07:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:1e:6f:71:a6:9c:a0:86:ad:b1:31:30:bf:49:71:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05976801363d375786152e4d061e75c8beb35058
        Validity
            Not Before: Jan  2 06:14:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=53256b5de43adf4e5ab11b6ba6c1d9aaaee93e3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:62:2a:9c:65:98:f5:03:c7:25:d3:21:b0:e2:
                    a3:4c:64:80:3f:dc:c1:96:59:f2:96:d6:e0:17:07:
                    e8:29:44:58:3d:30:e4:3b:a7:3f:0e:ac:4d:a0:65:
                    c3:4e:ca:bb:29:62:eb:d5:a4:40:23:16:12:70:0f:
                    6e:4e:b9:49:30:5b:e9:47:f6:c9:26:d0:e9:25:19:
                    a4:9e:84:3b:a6:50:25:13:2b:44:2f:84:0c:86:bf:
                    e2:fb:2c:9a:03:36:78:11:60:a7:2c:9f:20:19:81:
                    00:89:23:c8:16:c5:0c:c3:95:36:b3:7c:f6:b0:80:
                    fd:34:c1:2a:e6:0b:f8:e8:80:f8:fe:f0:31:9e:67:
                    f4:8c:28:87:e9:cc:60:9e:57:53:aa:1d:00:cf:e6:
                    a4:15:66:c0:8d:61:7b:ba:77:c7:04:31:63:1f:1d:
                    2c:de:e8:b4:0a:86:3d:34:d3:f3:07:1c:21:a7:d5:
                    9d:e2:cb:05:84:28:ff:95:20:43:f3:f1:16:6e:9a:
                    5e:5f:03:3c:f2:15:2f:11:ac:63:7d:a5:58:ee:c3:
                    c6:81:91:3b:46:6b:92:52:6d:47:2e:b1:a7:50:46:
                    c8:05:c4:02:e4:77:a0:dc:fc:7c:4a:95:42:9b:56:
                    30:a8:12:71:3d:7d:e1:96:98:0d:6d:c2:6b:f1:8b:
                    47:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:25:6B:5D:E4:3A:DF:4E:5A:B1:1B:6B:A6:C1:D9:AA:AE:E9:3E:3A
            X509v3 Authority Key Identifier:
                keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/UyVrXeQ6305asRtrpsHZqq7pPjo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:bb:49:8d:3d:a8:bd:1f:02:8e:d3:70:f1:19:bc:fc:84:f2:
         73:fe:14:9b:24:bc:04:93:ba:31:eb:e7:99:ce:80:2f:6c:2a:
         cf:8e:0f:1f:1d:a5:86:92:f7:f1:46:57:9c:2f:e0:6d:df:56:
         f5:72:6f:ab:59:64:9a:f3:45:3c:90:86:c0:e2:85:7e:bc:66:
         a3:34:3f:27:f8:1a:3a:3e:9e:f3:33:8c:06:85:3d:78:78:bd:
         87:63:9a:fc:b9:84:ea:98:df:29:7b:00:d4:f7:a3:90:a5:26:
         7a:33:37:6f:8f:b1:cf:0d:a9:8a:38:b2:91:b7:c1:8b:01:31:
         f3:65:73:36:4e:83:b3:6a:c1:1a:dc:a8:38:25:b2:29:61:69:
         e9:4a:c1:e7:63:73:01:04:4f:2b:e3:69:32:ef:f4:85:ed:e1:
         ad:4c:0d:0d:de:8c:c4:60:6b:ae:d5:fe:23:79:27:97:0e:49:
         e7:43:01:70:72:4f:68:55:f0:49:e5:f7:be:51:b9:20:75:27:
         8d:e8:66:07:57:3d:0c:6b:da:78:3a:fd:a0:3f:42:94:e5:d2:
         9e:7e:4e:3c:d2:b5:6b:6b:0c:6b:ae:8a:7a:af:63:d6:1f:7b:
         40:49:e7:45:33:d4:a1:28:f9:b6:8f:a3:a6:76:db:44:cd:8a:
         ea:52:7e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:38 2024 by rpki-client on console-ams.rpki-client.org