Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/FSE4noHxiX_iuGjsOxO3zdU3iNY.roa
File:                     FSE4noHxiX_iuGjsOxO3zdU3iNY.roa (raw, json)
Hash identifier:          acrC4lW+Cim/BZPcvNMfsAcsNywWX7FN7hkFsvesDZA=
Subject key identifier:   15:21:38:9E:81:F1:89:7F:E2:B8:68:EC:3B:13:B7:CD:D5:37:88:D6
Certificate issuer:       /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial:       018CC4936A4E5DEE599919EA7195EFD6B480
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/FSE4noHxiX_iuGjsOxO3zdU3iNY.roa
Signing time:             Mon 01 Jan 2024 10:30:44 +0000
ROA not before:           Mon 01 Jan 2024 10:30:44 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     3320
IP address blocks:        141.98.44.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 27 May 2024 07:15:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:93:6a:4e:5d:ee:59:99:19:ea:71:95:ef:d6:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
        Validity
            Not Before: Jan  1 10:30:44 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=1521389e81f1897fe2b868ec3b13b7cdd53788d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d0:4d:c4:19:d3:1d:17:6c:f5:3a:99:78:15:
                    a3:4a:c8:80:9e:a0:3f:cd:82:ac:e3:87:db:50:b5:
                    33:3f:68:75:7c:03:4d:5e:e7:64:c4:13:de:48:3f:
                    c2:75:6d:8a:48:30:00:78:60:0e:68:c6:56:53:80:
                    f9:7f:30:33:9d:87:d4:b0:bf:06:26:db:f6:62:07:
                    c8:2b:fd:35:f6:2d:47:a1:2f:cf:85:2c:6b:b0:aa:
                    e1:09:84:e9:21:87:6e:dc:c2:59:a3:7f:90:58:c9:
                    8c:dc:16:91:f6:0a:5d:32:5f:50:b2:c3:3a:ea:bc:
                    49:b2:48:88:00:38:70:b8:fd:49:fb:b1:30:94:92:
                    c1:bf:a0:74:8d:40:a2:7c:0f:e9:06:e5:a8:f9:b7:
                    d4:94:42:0e:72:30:c5:53:f0:bd:b5:f1:91:54:ef:
                    d7:c8:61:fe:d0:a6:c7:d6:7e:c6:25:97:42:48:2c:
                    2f:23:de:58:6f:2d:b6:7e:98:43:7c:35:c8:3d:00:
                    1a:9a:81:a3:9b:52:4e:0c:d8:da:9e:b0:5c:5e:de:
                    47:ee:d7:80:54:11:2a:d5:1b:e2:61:a5:0d:80:a4:
                    26:94:13:d2:08:0f:d8:56:1b:16:6c:a1:b3:c5:0b:
                    b7:7d:1d:35:5e:66:12:02:bd:38:3d:df:d9:17:71:
                    ed:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:21:38:9E:81:F1:89:7F:E2:B8:68:EC:3B:13:B7:CD:D5:37:88:D6
            X509v3 Authority Key Identifier:
                keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/FSE4noHxiX_iuGjsOxO3zdU3iNY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.98.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:7f:14:52:18:08:c4:99:8f:f5:12:ce:fc:0b:e2:17:42:cf:
         4a:e2:74:ab:a9:c4:a3:e7:a6:fb:42:ee:21:81:6c:a9:d6:66:
         ad:78:3e:ea:6f:6a:ac:21:0a:af:e1:c1:9a:fd:76:2d:1e:03:
         cb:51:e7:94:bd:33:4d:5a:7d:c4:e6:0d:3d:86:3b:56:a3:dc:
         90:ac:f2:ff:a8:cd:d0:68:2d:61:97:de:40:a0:c4:e5:ea:87:
         a1:39:0d:cd:de:fa:07:0f:da:84:83:fa:c4:d6:1d:00:96:82:
         a4:58:f8:ad:e3:27:64:86:e6:40:97:6c:5a:f6:64:47:c4:1a:
         d5:5e:9b:62:bc:85:b2:fb:07:93:d0:b2:a5:b7:5f:12:60:26:
         12:8c:ba:0a:3e:be:09:b7:7b:ca:e8:bd:dd:3b:78:55:09:b4:
         3e:d1:c8:3f:28:50:53:af:02:7f:76:99:47:ae:40:75:f3:b4:
         f1:46:b1:78:83:f8:10:1b:ef:62:5a:fe:05:27:ca:87:99:f7:
         d7:e6:30:83:ff:a4:ee:77:e0:c5:f1:1a:32:34:c3:20:45:00:
         37:88:15:86:97:f8:d1:6b:65:ce:ea:08:8d:45:9e:1c:23:65:
         fa:27:98:a1:47:bc:de:a9:89:3a:f7:6b:a1:65:5f:5a:a2:18:
         b2:57:a7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:39 2024 by rpki-client on console-ams.rpki-client.org