Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/fMRK5NuaA_lf4-FQef2WkwPp_c4.roa
File:                     fMRK5NuaA_lf4-FQef2WkwPp_c4.roa (raw, json)
Hash identifier:          T+szoNwkUPf+rL214NzzaC1ffxRh+kit/qSdbSh5Hpk=
Subject key identifier:   7C:C4:4A:E4:DB:9A:03:F9:5F:E3:E1:50:79:FD:96:93:03:E9:FD:CE
Certificate issuer:       /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial:       0189966549EC100DE87000BE670D1B66EB5E
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/fMRK5NuaA_lf4-FQef2WkwPp_c4.roa
Signing time:             Thu 27 Jul 2023 08:09:27 +0000
ROA not before:           Thu 27 Jul 2023 08:09:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35913
IP address blocks:        45.131.228.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Wed 06 Sep 2023 07:51:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:96:65:49:ec:10:0d:e8:70:00:be:67:0d:1b:66:eb:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
        Validity
            Not Before: Jul 27 08:09:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7cc44ae4db9a03f95fe3e15079fd969303e9fdce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:6a:0e:70:81:5a:06:8d:e6:9f:86:33:d5:d0:
                    6c:31:8c:21:99:77:dd:8a:e1:c6:56:4d:a5:d4:d5:
                    3c:6c:5b:2f:f3:72:79:76:d3:7b:dd:2e:f1:c9:eb:
                    2f:55:36:31:70:44:16:22:98:ee:ec:ab:14:06:f9:
                    d6:40:c9:ea:c8:89:8e:c9:45:93:ef:c9:10:6c:d5:
                    bc:e7:7c:f5:4b:45:98:eb:77:16:87:b3:a0:11:ce:
                    58:c6:4d:99:f6:41:b1:62:21:8d:7f:b0:fb:00:dc:
                    36:f1:0a:13:f2:c3:7f:f0:a2:13:ea:77:af:27:0c:
                    0c:48:94:c6:6a:cb:89:49:e6:48:5d:db:78:16:95:
                    22:da:15:c6:51:e1:1e:ee:35:94:51:73:3e:99:a1:
                    3a:6e:58:96:ab:d4:9b:54:db:82:37:fa:39:d6:bb:
                    05:b2:42:54:be:04:e3:00:ae:7d:3e:d6:bb:28:2e:
                    c1:44:cb:90:44:89:e2:e9:02:af:8e:8a:dd:6f:91:
                    5f:d8:d8:f4:57:bb:70:1b:36:fa:3c:b0:2c:e6:40:
                    be:b3:98:39:b9:3a:3e:ee:79:d7:54:85:88:cc:83:
                    7f:82:68:fb:5a:54:5f:1b:b8:04:8a:07:3e:77:3b:
                    2f:ac:e3:54:92:79:0d:c2:8c:e2:98:d6:a0:3e:62:
                    81:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C4:4A:E4:DB:9A:03:F9:5F:E3:E1:50:79:FD:96:93:03:E9:FD:CE
            X509v3 Authority Key Identifier:
                keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/fMRK5NuaA_lf4-FQef2WkwPp_c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.131.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:62:45:40:4c:0c:58:60:ea:7b:8f:2a:1d:19:56:96:27:73:
         da:6a:fb:db:ff:ec:4e:62:e2:d7:1d:66:74:e1:4f:3a:a3:59:
         57:07:cc:a4:ce:a6:49:cf:08:41:23:a8:69:2c:ba:3d:1a:8f:
         2b:55:43:fe:7f:27:1e:85:f1:ec:54:9a:a3:a9:9a:b8:ed:7a:
         c7:82:8e:10:ac:9e:97:9c:62:9b:f9:80:2d:8f:98:6f:25:90:
         55:25:84:de:c5:5c:76:00:15:10:a8:2e:4d:4c:2a:50:79:46:
         08:6f:39:08:e8:3f:e7:2f:9c:e6:0b:17:46:5e:62:e5:7f:ad:
         5f:b9:13:d6:3f:66:24:af:b7:c5:bf:68:96:2e:b1:08:8f:e2:
         96:e9:49:5f:c0:44:84:6a:c7:bc:8d:ed:10:32:17:45:5e:97:
         5b:04:31:3e:22:f9:9a:ec:8e:25:49:5c:09:59:d2:a7:6e:36:
         0b:4d:0b:a0:cb:b8:77:52:be:3d:09:d8:8c:d0:76:81:69:0e:
         12:a3:91:2c:a9:26:8b:dd:4b:4d:0a:37:de:8e:e4:f1:6e:f5:
         ac:da:5a:98:55:6c:60:7c:8d:49:52:e0:b6:2f:15:6e:8f:3c:
         a4:9f:df:14:8c:53:a7:cf:e5:18:91:17:db:b2:03:89:80:3d:
         fc:34:b3:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:37 2024 by rpki-client on console-ams.rpki-client.org