Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/_x8ifi2n5zZeKBwUKEJDgfiyv7A.roa
File:                     _x8ifi2n5zZeKBwUKEJDgfiyv7A.roa (raw, json)
Hash identifier:          LZojqD8pTQjJc9oEOfw8tMPuFP4Zg6cJQ9gMi4vIo1o=
Subject key identifier:   FF:1F:22:7E:2D:A7:E7:36:5E:28:1C:14:28:42:43:81:F8:B2:BF:B0
Certificate issuer:       /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial:       01856C2ECD83957C3589C089836503ADAEB3
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/_x8ifi2n5zZeKBwUKEJDgfiyv7A.roa
Signing time:             Sun 01 Jan 2023 07:14:44 +0000
ROA not before:           Sun 01 Jan 2023 07:14:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44599
IP address blocks:        5.252.232.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 10:30:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:2e:cd:83:95:7c:35:89:c0:89:83:65:03:ad:ae:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
        Validity
            Not Before: Jan  1 07:14:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ff1f227e2da7e7365e281c1428424381f8b2bfb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d2:04:6e:dc:63:97:06:83:da:71:54:9d:c6:
                    23:d0:ce:bc:77:73:f3:40:f1:d5:f4:f6:21:3c:de:
                    d4:2c:f8:bd:1b:16:4a:89:da:00:5c:f5:10:5f:8b:
                    cf:09:31:5b:6f:26:6a:04:86:3a:2c:9d:f7:18:99:
                    4d:bf:42:c8:d6:c1:04:82:e3:ac:1a:fc:2d:32:c7:
                    3c:aa:19:2a:6b:3d:cf:2e:0b:45:1e:cd:5b:d7:3e:
                    f3:1d:42:87:8a:c1:2a:ad:78:ac:44:aa:5e:1e:70:
                    fd:c3:c4:ac:ee:f7:ed:46:b7:72:91:09:a8:3d:94:
                    10:f3:fb:dd:fa:f8:d8:6d:d4:77:ce:48:8b:1b:6b:
                    3d:bb:00:49:50:54:8f:87:14:d6:4f:80:94:93:16:
                    5b:1b:5c:62:b2:a9:e8:2c:69:72:e8:c6:e8:ef:1c:
                    22:e3:41:3d:aa:5c:df:72:07:dc:83:7a:fd:41:e5:
                    6a:e7:6b:5e:75:c0:fa:3c:5c:f6:df:84:b2:72:49:
                    02:e5:43:8a:0c:d8:d3:bb:94:1f:9b:06:1b:bf:a0:
                    a3:cb:55:6c:94:86:e5:1a:65:71:f6:8e:73:00:e9:
                    04:7e:22:f7:ff:ed:c6:48:23:7b:c1:f8:0c:f8:c1:
                    43:ff:16:a3:2a:88:81:ae:1d:55:9f:af:1a:52:e1:
                    5d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:1F:22:7E:2D:A7:E7:36:5E:28:1C:14:28:42:43:81:F8:B2:BF:B0
            X509v3 Authority Key Identifier:
                keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/_x8ifi2n5zZeKBwUKEJDgfiyv7A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.252.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:d6:db:65:22:70:40:06:7f:34:ed:7c:42:7d:60:a1:67:73:
         b4:80:66:8b:15:57:41:cf:61:08:1d:03:cc:c6:2c:af:84:b5:
         15:24:08:c0:41:be:8b:cd:d9:22:5a:b9:09:10:01:50:c8:fa:
         32:64:28:8e:20:8d:54:6c:b5:37:b7:37:4b:49:44:36:c6:c9:
         f5:7e:9f:fc:6d:e2:99:83:3c:76:da:79:ec:1b:3f:be:3e:93:
         b5:b1:17:57:3d:1c:ad:c9:90:35:b6:cc:5b:36:1e:d2:03:09:
         ad:ba:5a:73:4b:57:b0:5a:dc:b3:61:15:d9:e7:ff:09:b4:e7:
         2b:31:d7:f9:f0:fb:77:4a:11:65:0d:df:e7:21:7a:fa:36:82:
         78:be:00:fa:a1:64:6b:0d:39:eb:19:44:a2:4d:03:69:df:d3:
         36:45:74:a2:34:98:1e:7f:7c:15:5b:12:f4:65:ec:db:e4:d4:
         6a:70:a8:62:93:46:44:3b:b1:b9:d3:5a:f6:4c:34:50:b8:2f:
         fd:9a:60:d2:43:5e:76:28:55:fd:45:71:5d:f7:0f:8f:e9:4d:
         4e:c1:6e:66:19:bf:f8:4c:1b:a4:0d:01:a9:43:2c:01:87:1b:
         e8:7c:dd:12:f1:65:fa:99:4d:f9:18:91:6a:50:59:43:b0:ce:
         99:8b:b6:bf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsLs2DlXw1icCJg2UDra6zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNGFjNjExNjE0ZGQxNjVkOTQ1NTcyOTZlZDdlZDQ2Yzhm
YzAyNWYwHhcNMjMwMTAxMDcxNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjFmMjI3ZTJkYTdlNzM2NWUyODFjMTQyODQyNDM4MWY4YjJiZmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNIEbtxjlwaD2nFUncYj0M68d3Pz
QPHV9PYhPN7ULPi9GxZKidoAXPUQX4vPCTFbbyZqBIY6LJ33GJlNv0LI1sEEguOs
GvwtMsc8qhkqaz3PLgtFHs1b1z7zHUKHisEqrXisRKpeHnD9w8Ss7vftRrdykQmo
PZQQ8/vd+vjYbdR3zkiLG2s9uwBJUFSPhxTWT4CUkxZbG1xisqnoLGly6Mbo7xwi
40E9qlzfcgfcg3r9QeVq52tedcD6PFz234SyckkC5UOKDNjTu5QfmwYbv6Cjy1Vs
lIblGmVx9o5zAOkEfiL3/+3GSCN7wfgM+MFD/xajKoiBrh1Vn68aUuFd/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP8fIn4tp+c2XigcFChCQ4H4sr+wMB8GA1UdIwQY
MBaAFOFKxhFhTdFl2UVXKW7X7UbI/AJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUt
NzBlODk4YmIzOGRkLzEvX3g4aWZpMm41elplS0J3VUtFSkRnZml5djdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82ZTc5YjgtMmI4Zi00ZWNjLTlhNmUtNzBlODk4YmIzOGRk
LzEvNFVyR0VXRk4wV1haUlZjcGJ0ZnRSc2o4QWw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBfzoMA0G
CSqGSIb3DQEBCwUAA4IBAQAe1ttlInBABn807XxCfWChZ3O0gGaLFVdBz2EIHQPM
xiyvhLUVJAjAQb6LzdkiWrkJEAFQyPoyZCiOII1UbLU3tzdLSUQ2xsn1fp/8beKZ
gzx22nnsGz++PpO1sRdXPRytyZA1tsxbNh7SAwmtulpzS1ewWtyzYRXZ5/8JtOcr
Mdf58Pt3ShFlDd/nIXr6NoJ4vgD6oWRrDTnrGUSiTQNp39M2RXSiNJgef3wVWxL0
Zezb5NRqcKhik0ZEO7G501r2TDRQuC/9mmDSQ152KFX9RXFd9w+P6U1OwW5mGb/4
TBukDQGpQywBhxvofN0S8WX6mU35GJFqUFlDsM6Zi7a/
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:39 2024 by rpki-client on console-ams.rpki-client.org