Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/uSLlNXJiutrfGwZCzpQrziEqhBw.roa
File:                     uSLlNXJiutrfGwZCzpQrziEqhBw.roa (raw, json)
Hash identifier:          dMkJaQJs222wU59Dhx/820smcuNiB19ydup9z8vJ5Q0=
Subject key identifier:   B9:22:E5:35:72:62:BA:DA:DF:1B:06:42:CE:94:2B:CE:21:2A:84:1C
Certificate issuer:       /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial:       01856F4B833DA5C66E256F9A4BE36223BCE1
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/uSLlNXJiutrfGwZCzpQrziEqhBw.roa
Signing time:             Sun 01 Jan 2023 21:44:57 +0000
ROA not before:           Sun 01 Jan 2023 21:44:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200019
IP address blocks:        176.57.48.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:29:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:4b:83:3d:a5:c6:6e:25:6f:9a:4b:e3:62:23:bc:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
        Validity
            Not Before: Jan  1 21:44:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b922e5357262badadf1b0642ce942bce212a841c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:fe:1f:8b:44:f0:f5:35:e7:8e:f7:a7:54:3a:
                    f2:e9:8f:43:4c:c8:f6:0e:34:8d:96:b6:b1:d8:9b:
                    50:79:57:5f:a0:24:6e:87:87:c3:81:f1:49:22:b0:
                    a4:4b:02:65:ad:ff:00:11:07:66:ae:7b:71:45:e9:
                    10:43:89:6f:82:66:d8:f8:5b:1f:95:10:19:bf:2f:
                    5b:2b:49:d8:11:57:41:ed:0f:97:11:0d:ff:e0:98:
                    9b:2c:42:4b:06:ce:7c:71:21:ff:4b:41:e2:06:a6:
                    86:8d:02:5c:cc:66:24:a0:18:41:52:4b:04:1c:b4:
                    a0:ed:64:9a:c3:aa:b8:26:f3:f0:93:9c:cf:e5:1d:
                    8a:a7:94:1c:fe:89:cc:61:74:92:91:d1:32:b7:bb:
                    86:2e:54:19:35:05:ad:4e:54:62:a2:d9:43:e0:7e:
                    8e:24:a9:36:5d:3e:80:b5:67:f9:6a:6f:9d:4d:bc:
                    1b:80:47:2f:54:71:36:e7:6d:43:16:86:27:a8:83:
                    32:2f:54:44:6b:d1:bf:b6:fe:6c:df:6d:e7:93:9c:
                    54:af:77:b8:a7:b1:b3:23:29:4c:ad:ca:f8:44:5d:
                    92:a8:23:42:da:32:e1:f0:03:39:b8:1c:21:90:2f:
                    9d:bd:6f:92:6f:c8:5c:b2:93:b9:52:56:7b:95:9d:
                    66:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:22:E5:35:72:62:BA:DA:DF:1B:06:42:CE:94:2B:CE:21:2A:84:1C
            X509v3 Authority Key Identifier:
                keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/uSLlNXJiutrfGwZCzpQrziEqhBw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.57.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:7e:37:76:20:d1:9f:91:bd:6e:64:b7:75:e3:a0:4c:52:91:
         e2:4a:72:66:3b:7c:63:82:f0:5a:5f:2a:24:c8:56:e2:5c:f1:
         59:8f:9e:0c:b0:75:3d:8a:65:43:b8:85:45:8d:d0:6c:db:94:
         5d:e0:93:5a:39:48:74:1c:ac:e9:46:cf:45:26:da:3a:db:e8:
         53:98:1c:c9:cc:8d:d9:87:d2:95:41:01:46:77:d4:80:48:ab:
         32:51:8d:d6:0a:0d:08:d2:d4:4c:ab:6e:26:ca:a2:93:c3:ce:
         a5:92:1e:21:24:0a:8c:a7:17:1e:8a:bd:db:17:9b:ea:29:9f:
         5a:7c:9b:a0:01:6c:e8:0b:0d:bd:02:df:4b:1e:59:8c:78:20:
         44:86:e2:39:05:cf:c1:b3:88:69:aa:45:eb:08:a0:70:6f:59:
         76:a3:7f:cc:8f:19:3b:9c:ce:2f:52:66:24:cc:7a:06:91:75:
         04:07:9e:f7:06:b5:38:c5:e7:1c:e0:5c:46:a8:fb:2d:f9:17:
         64:17:b2:f8:74:e4:06:a5:34:c4:50:d9:4b:de:99:d6:fb:0c:
         7c:af:0d:9c:25:98:39:e7:ce:41:51:32:66:f1:81:06:00:c3:
         d1:bc:b9:c9:87:6f:0c:a2:1f:82:45:f3:8d:f3:2b:59:fe:a5:
         56:30:ac:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org