Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/wFJ03mgOds8mnzxcM3q7v2W1NO0.roa
File:                     wFJ03mgOds8mnzxcM3q7v2W1NO0.roa (raw, json)
Hash identifier:          MHa4+rmZfWvEZ9olvIN6EECuv8qNH95nfbCBknXiY+E=
Subject key identifier:   C0:52:74:DE:68:0E:76:CF:26:9F:3C:5C:33:7A:BB:BF:65:B5:34:ED
Certificate issuer:       /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial:       018AB77ED51879503469F223C0E327D8B3A8
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/wFJ03mgOds8mnzxcM3q7v2W1NO0.roa
Signing time:             Thu 21 Sep 2023 11:27:37 +0000
ROA not before:           Thu 21 Sep 2023 11:27:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     400536
IP address blocks:        45.143.6.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 23 Dec 2023 08:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:b7:7e:d5:18:79:50:34:69:f2:23:c0:e3:27:d8:b3:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
        Validity
            Not Before: Sep 21 11:27:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c05274de680e76cf269f3c5c337abbbf65b534ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6e:00:58:9e:a3:08:3a:96:3a:44:a3:50:54:
                    c1:b6:f5:68:70:60:d8:cd:ea:97:90:3e:c0:29:4c:
                    42:10:68:e4:ba:a4:63:89:0f:5b:e4:b6:f7:d3:f5:
                    df:7b:e6:e4:4e:74:4a:24:32:ed:b2:e7:b5:42:2d:
                    b2:27:2e:38:62:4f:c5:8e:93:aa:b2:39:73:2f:ef:
                    ee:2e:20:e3:a2:c5:42:9c:22:50:2e:b2:f6:ed:de:
                    42:e8:fd:76:02:ff:6c:48:e0:d7:a6:d6:70:98:a3:
                    ad:9b:2d:17:d2:7f:85:ca:bb:5f:1b:c6:58:fd:28:
                    d9:ec:d5:88:ff:cd:2a:7f:f3:53:79:74:2e:67:2a:
                    e2:81:44:ee:95:f2:02:f8:0d:1f:da:a1:30:19:e5:
                    72:65:1c:f0:b3:49:9f:fa:2c:d0:22:6c:d5:0e:c0:
                    e6:9a:b0:7b:06:3b:65:f1:6a:57:c5:65:5a:c3:31:
                    93:2a:f5:14:5d:bd:9e:93:86:bb:1b:51:c2:67:79:
                    5c:17:8b:91:5b:11:94:3b:b8:dd:3d:a7:0f:73:09:
                    eb:72:59:d4:e8:4e:58:f3:b5:34:e1:fc:87:35:8c:
                    df:93:9a:99:b7:65:44:01:cc:0e:5d:78:0c:da:b2:
                    16:c7:a7:c7:76:3a:c7:86:8a:9b:7b:26:f4:e1:a4:
                    cb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:52:74:DE:68:0E:76:CF:26:9F:3C:5C:33:7A:BB:BF:65:B5:34:ED
            X509v3 Authority Key Identifier:
                keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/wFJ03mgOds8mnzxcM3q7v2W1NO0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.143.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:00:9a:b3:0f:de:84:c3:8e:97:39:6a:a4:53:24:4c:ae:b1:
         16:4b:ec:e7:5a:a4:47:61:14:be:20:d0:d6:57:6b:05:05:b9:
         78:f2:e9:27:03:6f:db:c0:90:eb:e6:3d:8f:65:19:41:20:ee:
         da:ee:ca:a9:4c:9d:2c:99:09:eb:07:92:1b:63:c2:c3:19:a2:
         14:61:1c:20:67:74:58:7c:88:8f:52:9b:09:56:b3:40:d2:78:
         2e:d8:dc:9e:47:94:02:35:f6:48:bc:6f:a9:eb:c7:f0:67:29:
         ab:d5:0c:04:1a:5a:65:c9:c3:77:56:7e:9e:49:3a:3f:0f:a3:
         3f:f6:48:fa:d8:59:07:11:82:1d:f3:5c:3a:a6:49:d8:75:9e:
         ac:bd:8c:e8:91:4d:5e:1d:ad:3b:e8:9b:53:c1:07:1d:9c:35:
         f7:f2:6d:57:48:eb:ec:11:ba:a4:b1:0c:4d:57:c8:35:11:95:
         ae:7b:d7:bb:42:52:c6:5b:13:5a:dc:eb:6d:87:5f:e3:3a:43:
         2a:4e:55:ad:f5:3f:e1:81:b0:b4:0e:ed:77:11:6a:95:1a:18:
         4a:2f:2c:5a:88:03:e7:73:52:66:e3:d9:3c:d7:3d:51:9f:d0:
         a6:74:b2:21:bb:0b:b4:15:f3:e2:b9:20:49:01:f8:52:8d:dd:
         fe:f9:3c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:55 2024 by rpki-client on console-fra.rpki-client.org