Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/5SNjbAEjDojbga6JDG02XcMP5Zk.roa
File:                     5SNjbAEjDojbga6JDG02XcMP5Zk.roa (raw, json)
Hash identifier:          2ukOZ1cuuVd9nzxEcBSi/Wah5xB5csPHmTnC5f/DPrw=
Subject key identifier:   E5:23:63:6C:01:23:0E:88:DB:81:AE:89:0C:6D:36:5D:C3:0F:E5:99
Certificate issuer:       /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial:       0185715E575E6593E25EAC67C5274F0EFCD9
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/5SNjbAEjDojbga6JDG02XcMP5Zk.roa
Signing time:             Mon 02 Jan 2023 07:24:46 +0000
ROA not before:           Mon 02 Jan 2023 07:24:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     142430
IP address blocks:        45.140.246.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 19 Jan 2023 16:17:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:5e:57:5e:65:93:e2:5e:ac:67:c5:27:4f:0e:fc:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
        Validity
            Not Before: Jan  2 07:24:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e523636c01230e88db81ae890c6d365dc30fe599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:93:9c:e5:6f:5d:b9:18:a1:74:d1:d6:e7:fc:
                    c2:29:4c:4f:83:d9:41:03:5a:fd:49:0f:2a:e2:b6:
                    9e:85:05:cc:26:e2:8b:be:5b:16:4d:63:a5:2c:c6:
                    ea:6c:90:67:56:ee:f6:80:24:c4:fe:eb:79:b9:6a:
                    fd:1f:ce:f5:b7:fe:2a:8e:6d:18:05:bb:6d:95:13:
                    9a:d5:07:5a:5b:42:c2:38:7d:63:f3:49:03:e0:39:
                    01:9b:ec:61:c5:79:dc:0e:36:09:78:08:94:83:61:
                    a8:ee:4c:04:89:ca:fc:b8:e9:3c:7d:04:56:5c:2b:
                    e2:2a:40:7a:3b:0a:8f:8f:de:6e:7e:22:d8:f0:12:
                    31:53:02:a5:f4:eb:68:1b:e1:ee:a0:6a:09:ba:98:
                    cd:52:ea:4c:1a:7c:0d:e1:b8:4b:92:16:31:3c:38:
                    43:84:59:2a:71:c3:2f:4b:0b:3c:65:6a:97:13:74:
                    9b:b8:4a:bc:bb:44:28:20:a3:0e:df:3d:45:87:ff:
                    7b:78:85:21:f0:38:ac:c7:2f:79:6f:85:48:d8:e2:
                    7e:54:e0:62:bf:a4:12:59:08:04:6e:3c:33:97:f6:
                    e2:20:ad:ba:cc:40:a3:5b:80:d2:bb:fd:11:eb:c2:
                    7b:f5:14:04:be:0c:ff:4c:11:63:f7:cb:87:36:26:
                    58:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:23:63:6C:01:23:0E:88:DB:81:AE:89:0C:6D:36:5D:C3:0F:E5:99
            X509v3 Authority Key Identifier:
                keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/5SNjbAEjDojbga6JDG02XcMP5Zk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.140.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:da:5c:c8:38:75:63:09:a7:5d:ba:be:f5:5e:22:f6:94:2a:
         0f:ad:5c:cd:d5:74:40:98:e5:e3:e4:e4:57:79:ae:13:67:d3:
         0c:5c:fa:3f:a5:8b:1e:dc:55:bd:98:d6:40:51:bd:04:fb:c3:
         46:3d:8c:74:1c:20:05:54:d4:62:63:58:a8:e6:8e:23:87:bc:
         3d:70:66:88:f0:25:fd:39:9a:dd:42:8e:68:ef:14:37:fd:c1:
         e6:a1:02:11:1d:72:c0:b8:16:bc:85:91:30:8a:c4:15:dc:cd:
         a6:d6:8d:6b:c9:f6:dc:71:96:7f:0f:eb:bc:53:91:ae:fb:99:
         34:1a:61:98:c6:3b:38:e4:52:d2:c4:c2:5c:10:e8:98:1b:ea:
         80:fc:89:10:a5:f9:ed:e9:6e:32:d5:16:4d:ec:25:64:27:ed:
         eb:2e:93:73:0e:02:f2:8d:83:f3:91:d2:2e:f3:cc:b2:4c:94:
         35:29:f9:e8:00:74:81:7e:b0:13:30:56:43:fc:f8:26:b0:05:
         e2:4f:c1:d1:f9:d1:8c:00:6d:2b:42:42:19:e2:cb:3d:8b:3b:
         46:39:1c:2a:01:20:9c:aa:87:b8:4c:e2:1f:21:61:f3:6c:cf:
         4b:a5:5a:5f:d7:e5:df:87:cc:ae:d6:c2:e1:86:6c:89:70:b4:
         43:23:15:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:57 2024 by rpki-client on console-ams.rpki-client.org