Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/woTWhVu3FM1fLavHa4z3fnllb5g.roa
File:                     woTWhVu3FM1fLavHa4z3fnllb5g.roa (raw, json)
Hash identifier:          pXsILW+1LCEN3WGhAw7gAOoJDwRRd2m06F4EXVhPfmI=
Subject key identifier:   C2:84:D6:85:5B:B7:14:CD:5F:2D:AB:C7:6B:8C:F7:7E:79:65:6F:98
Certificate issuer:       /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial:       01906DAC7B309E57A78004C7C89173D2F325
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/woTWhVu3FM1fLavHa4z3fnllb5g.roa
Signing time:             Mon 01 Jul 2024 09:42:18 +0000
ROA not before:           Mon 01 Jul 2024 09:42:18 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     215239
IP address blocks:        45.143.0.0/22 maxlen: 32

Validation:               Failed, certificate revoked on Mon 01 Jul 2024 14:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6d:ac:7b:30:9e:57:a7:80:04:c7:c8:91:73:d2:f3:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
        Validity
            Not Before: Jul  1 09:42:18 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c284d6855bb714cd5f2dabc76b8cf77e79656f98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5d:6f:ea:36:5a:25:a9:7d:1d:eb:e4:c6:c3:
                    64:14:4d:75:29:f5:8a:bc:bc:e2:94:9a:63:be:55:
                    fe:7d:78:8e:03:4e:53:83:94:1a:fb:ff:42:02:a7:
                    cf:c8:53:c7:e1:08:14:45:c3:c0:63:05:22:23:0d:
                    17:36:fd:d6:50:e1:92:2d:9d:da:fb:70:78:a6:81:
                    12:90:9c:8d:8b:b5:ad:e2:4e:29:3e:52:15:9b:57:
                    9c:70:1e:78:0c:b7:bb:91:c2:66:83:d3:24:f9:e1:
                    81:e5:bf:b4:71:d6:4f:08:e6:6c:3e:da:9c:2b:c8:
                    27:2a:d0:4c:11:3f:e3:00:98:9b:dd:78:1e:c8:bf:
                    71:ec:f6:b0:ef:09:91:8c:48:9d:b0:02:c0:6d:40:
                    7d:2f:ba:ed:47:a6:74:c4:dc:d8:14:b0:02:2a:16:
                    1e:22:03:c5:96:89:8b:e2:36:30:28:02:94:f5:14:
                    d1:44:8e:c9:e0:8d:2e:b0:aa:14:6c:77:3e:b5:bb:
                    7f:f3:fc:99:ba:22:2b:62:eb:85:96:b8:c5:b7:fb:
                    bd:c9:48:d5:93:d1:c8:b4:8e:8a:4e:d2:53:40:a6:
                    99:30:11:7a:80:4e:eb:50:d3:b8:26:24:ed:56:c4:
                    86:14:c3:98:ce:b7:db:d6:27:1b:c6:90:4e:ea:d1:
                    99:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:84:D6:85:5B:B7:14:CD:5F:2D:AB:C7:6B:8C:F7:7E:79:65:6F:98
            X509v3 Authority Key Identifier:
                keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/woTWhVu3FM1fLavHa4z3fnllb5g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.143.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:4a:c7:ce:a9:9b:83:c7:a1:8c:a6:a3:c0:7e:90:de:eb:5c:
         46:68:5c:0c:be:30:f4:55:76:ed:e8:55:b7:af:48:3d:56:18:
         92:25:ce:f4:45:46:bf:0d:a5:2d:89:f0:dc:b4:c9:d1:7c:0f:
         03:ce:61:70:48:28:9f:b1:8b:39:78:49:10:ee:6a:9d:86:d1:
         6d:6c:ea:da:42:68:46:4d:59:ff:d7:89:a2:b1:36:84:93:c9:
         6a:77:1d:5a:bb:44:ee:86:7e:63:43:84:f5:f3:fa:47:d9:f4:
         d8:17:c5:c7:f3:be:bd:d3:f0:41:7c:ee:d3:cc:27:74:23:a5:
         b1:ed:28:b8:4f:9a:6d:51:51:26:ef:30:4f:dd:8d:a9:cd:af:
         c8:e4:48:1c:e4:3f:45:63:da:22:8e:90:df:9f:33:ce:13:d6:
         30:c1:51:0b:de:1e:ed:d8:45:14:be:a3:95:c0:d2:dc:63:2b:
         3a:1f:9a:b9:a3:8c:cc:fb:36:94:38:e3:8c:ed:74:11:0b:81:
         35:fc:41:4d:21:47:64:cc:ed:c1:db:34:e4:fa:fc:8b:3d:28:
         9d:78:aa:fb:57:f6:0c:08:46:72:76:40:6d:20:0d:8a:d6:08:
         af:eb:a1:58:cd:12:c0:3a:1c:35:82:86:04:4b:20:78:2a:a6:
         d8:7d:98:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 16:11:29 2024 by rpki-client on console-fra.rpki-client.org