Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/OQtpXhnLqgQ8ASmowBxrgEmR3nY.roa
File:                     OQtpXhnLqgQ8ASmowBxrgEmR3nY.roa (raw, json)
Hash identifier:          DrpnoXeSf7NckOQnccfK5FAWyKmtTDYIERsNf3j6W9U=
Subject key identifier:   39:0B:69:5E:19:CB:AA:04:3C:01:29:A8:C0:1C:6B:80:49:91:DE:76
Certificate issuer:       /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Certificate serial:       018CC8DCF7F9FDA03D707149D78745A7D6F4
Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/OQtpXhnLqgQ8ASmowBxrgEmR3nY.roa
Signing time:             Tue 02 Jan 2024 06:29:33 +0000
ROA not before:           Tue 02 Jan 2024 06:29:33 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     210162
IP address blocks:        45.143.31.0/24 maxlen: 24
                          45.143.28.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 22 Feb 2024 18:51:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:dc:f7:f9:fd:a0:3d:70:71:49:d7:87:45:a7:d6:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
        Validity
            Not Before: Jan  2 06:29:33 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=390b695e19cbaa043c0129a8c01c6b804991de76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8e:7b:7f:4b:7f:31:31:d9:3e:77:31:d6:0d:
                    4c:a0:e3:a6:40:6f:b1:fb:cf:45:d1:c8:e6:4d:3d:
                    5a:40:88:99:c5:e6:e7:dd:4d:2a:b0:02:97:13:46:
                    14:e3:96:d0:88:09:b7:4d:fc:1e:1e:2b:cd:aa:a0:
                    b2:a4:ea:7d:21:59:91:78:e1:62:2e:58:74:bc:80:
                    1c:1e:b3:40:ec:6c:d7:6c:4b:3c:78:b8:c5:c5:dc:
                    c9:3f:17:d4:7a:37:76:d4:9a:fe:95:70:44:9b:9c:
                    51:67:61:ac:b1:11:cf:d2:e5:ae:05:c2:db:28:f6:
                    88:c7:a7:e5:b6:e4:5e:59:76:e6:a6:9f:6d:4d:f0:
                    0c:41:46:c9:61:5b:ce:94:17:1b:a3:e5:99:31:aa:
                    77:9f:4a:27:f1:d0:35:77:c2:71:3b:49:63:18:6f:
                    bd:cd:b6:99:cc:41:52:b4:cc:52:54:2d:fc:93:93:
                    5c:93:99:60:f7:4f:29:38:24:5e:82:e7:b0:9d:fc:
                    67:77:da:1d:13:c3:d7:c8:10:09:47:68:ac:49:81:
                    6e:28:eb:7d:af:dc:67:6a:cd:8b:73:3d:84:1c:de:
                    3b:06:81:af:f6:72:71:e4:7f:61:97:ab:e8:84:91:
                    db:50:4f:fb:a5:31:2a:45:a0:79:15:c6:a1:06:84:
                    7a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0B:69:5E:19:CB:AA:04:3C:01:29:A8:C0:1C:6B:80:49:91:DE:76
            X509v3 Authority Key Identifier:
                keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/OQtpXhnLqgQ8ASmowBxrgEmR3nY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.143.28.0/24
                  45.143.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:5a:de:55:5c:f7:46:08:00:49:26:ed:35:c0:87:a7:79:c0:
         7e:a6:13:d6:f6:9b:e0:16:d5:5d:ef:a9:5d:63:bb:3e:c1:68:
         84:38:51:8f:85:60:fe:62:1f:64:97:94:9b:f0:52:66:1d:a5:
         78:fd:55:ca:fb:17:f7:93:bf:78:32:f7:26:5b:3e:d2:18:5e:
         52:b9:43:60:1b:4f:3b:af:57:57:9e:01:d0:55:65:a4:07:58:
         76:3f:b7:1a:bd:25:00:2e:46:a4:b4:b8:22:89:39:e6:26:9b:
         4a:6f:e0:53:d5:96:67:64:f4:36:c1:79:c4:a9:af:53:c0:b6:
         0e:be:e4:d6:c4:f2:70:b4:73:83:3f:44:a4:18:e4:44:31:52:
         96:5d:00:67:29:6b:03:a6:56:09:a7:a3:2c:13:5a:88:40:46:
         63:c0:6d:26:03:f9:d4:59:57:1c:5c:33:41:4d:81:e7:88:ce:
         c1:f6:45:c8:5b:fa:d1:c7:92:3c:fa:cb:f0:47:71:10:40:8f:
         be:c4:b5:ae:b4:0c:57:93:49:92:54:55:fc:1d:ee:1b:ff:6e:
         c6:5d:52:46:ca:23:f1:bf:83:fd:bd:db:3e:38:77:fb:9e:4e:
         8d:5a:a7:4c:1e:6e:a6:0b:6f:d2:c0:d1:f0:5d:bb:67:bb:f1:
         72:0c:f6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:55 2024 by rpki-client on console-ams.rpki-client.org