Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Q1aqksdpOjPlLe3NFVgQk-fKtVk.roa
File:                     Q1aqksdpOjPlLe3NFVgQk-fKtVk.roa (raw, json)
Hash identifier:          AflwJmIYu2TOLnycD5ZmzAxnOj4DNxw0vb0ENGhJYdE=
Subject key identifier:   43:56:AA:92:C7:69:3A:33:E5:2D:ED:CD:15:58:10:93:E7:CA:B5:59
Certificate issuer:       /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial:       018630C7236ABF47F9E8DEB5AAD553DE5731
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Q1aqksdpOjPlLe3NFVgQk-fKtVk.roa
Signing time:             Wed 08 Feb 2023 11:26:42 +0000
ROA not before:           Wed 08 Feb 2023 11:26:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6830
IP address blocks:        88.216.22.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Fri 10 Feb 2023 06:34:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:30:c7:23:6a:bf:47:f9:e8:de:b5:aa:d5:53:de:57:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
        Validity
            Not Before: Feb  8 11:26:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4356aa92c7693a33e52dedcd15581093e7cab559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:54:61:08:53:3e:97:a3:7d:a4:a2:00:4a:07:
                    12:f3:07:e5:07:f9:10:3d:d6:f4:44:4a:5c:f9:0b:
                    b7:76:61:c5:98:6c:26:dd:68:4e:7e:31:bc:5d:5f:
                    83:ee:36:09:9f:12:ba:75:a2:cb:fc:15:32:92:40:
                    45:70:41:b2:21:82:51:b0:20:18:2d:7e:49:09:7c:
                    12:28:68:04:11:84:31:7f:f5:3a:47:13:f9:82:46:
                    45:b3:d8:ee:61:12:00:84:92:b4:ab:7c:f4:1c:8c:
                    8c:c1:31:c4:3e:c3:df:7c:9c:07:ae:6d:75:e9:36:
                    c5:1b:d2:ed:bf:18:3d:bc:87:a7:16:4e:95:fe:5b:
                    91:94:12:0c:0e:af:46:b2:0b:72:7e:4a:c6:8c:1a:
                    33:5e:23:0f:51:a1:86:d8:88:e6:32:30:a9:6b:bc:
                    2a:77:c8:b6:2c:aa:d0:28:e1:76:37:15:12:f0:10:
                    fe:38:8b:93:f3:a0:69:77:93:c3:c5:73:9e:07:14:
                    8c:1e:b1:fe:9d:c7:5f:7e:8f:c8:5b:7d:73:84:32:
                    0e:6e:ec:fc:76:01:81:42:ab:14:71:a4:d7:d1:65:
                    7d:76:41:e0:15:b6:c0:ee:d3:34:ee:3d:44:b7:85:
                    1b:da:a4:f3:1d:85:ef:11:09:c5:77:d2:fe:6c:03:
                    04:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:56:AA:92:C7:69:3A:33:E5:2D:ED:CD:15:58:10:93:E7:CA:B5:59
            X509v3 Authority Key Identifier:
                keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Q1aqksdpOjPlLe3NFVgQk-fKtVk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.216.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:6a:71:08:8e:4d:96:df:ec:5c:90:a9:32:de:c8:7c:8c:eb:
         d6:cf:d2:ed:f4:c6:a5:51:9f:a3:5d:50:69:8f:d5:b6:e6:0e:
         34:70:05:d1:ad:93:eb:90:85:42:82:6b:67:13:55:55:9e:af:
         98:db:24:36:04:7b:00:c8:f5:13:78:57:10:59:fc:d7:b7:02:
         26:2d:97:11:77:57:f8:94:13:a5:be:f5:d1:2b:35:c0:c8:89:
         92:c7:8a:ac:1a:13:66:d1:06:e3:61:1b:5d:97:9f:91:58:74:
         66:af:c1:0c:e8:89:19:57:f2:95:19:d5:76:db:07:e3:8f:de:
         49:fb:48:13:4c:87:f9:40:34:d3:39:b9:23:4a:f3:37:82:87:
         b2:12:41:93:e0:22:f1:02:79:af:5f:60:89:62:9c:11:37:86:
         33:b3:3e:75:1f:00:71:16:7e:99:dd:84:c2:25:dc:b0:0c:0e:
         b9:f6:6b:13:6f:1a:61:02:70:f0:38:b3:8d:3a:54:6f:1c:49:
         30:b2:66:91:35:61:21:0c:d4:1a:a2:75:65:24:52:f0:80:64:
         44:8d:1d:2e:76:e9:78:3d:eb:88:d2:f8:8e:a0:a7:7d:49:11:
         53:2a:cc:b3:aa:e3:ef:4c:8d:2c:5b:d9:29:f6:f3:9f:ce:97:
         ef:04:30:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:27 2024 by rpki-client on console-ams.rpki-client.org