Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/Se_MIZzP43rG2gRoSWKWbuo4GPg.roa
File:                     Se_MIZzP43rG2gRoSWKWbuo4GPg.roa (raw, json)
Hash identifier:          29spHsEuPwACcIxX64chsE/3Fu2kA43q3Tp4KE3vTn4=
Subject key identifier:   49:EF:CC:21:9C:CF:E3:7A:C6:DA:04:68:49:62:96:6E:EA:38:18:F8
Certificate issuer:       /CN=b56cb179b3db5c6b36cd3308340801fedb2b7d19
Certificate serial:       01856F4B5174239214552C47D5080EE35328
Authority key identifier: B5:6C:B1:79:B3:DB:5C:6B:36:CD:33:08:34:08:01:FE:DB:2B:7D:19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/Se_MIZzP43rG2gRoSWKWbuo4GPg.roa
Signing time:             Sun 01 Jan 2023 21:44:45 +0000
ROA not before:           Sun 01 Jan 2023 21:44:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     553
IP address blocks:        141.47.0.0/16 maxlen: 16

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:29:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:4b:51:74:23:92:14:55:2c:47:d5:08:0e:e3:53:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56cb179b3db5c6b36cd3308340801fedb2b7d19
        Validity
            Not Before: Jan  1 21:44:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=49efcc219ccfe37ac6da04684962966eea3818f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3f:cc:a3:bb:3e:fb:a2:45:b7:cc:00:f1:d4:
                    9d:4d:4d:86:91:cf:14:50:6c:42:fa:4e:49:f1:b5:
                    77:08:70:40:b3:a6:5c:1f:a4:2d:57:35:e2:9e:c6:
                    5d:f6:f1:bc:ec:37:6c:33:48:0b:c2:4f:b0:f4:ac:
                    dd:d1:45:62:c1:e4:21:ee:25:71:4c:aa:3e:83:95:
                    7c:78:06:fc:c6:f7:2f:e3:e4:d5:6e:5f:bb:f5:b9:
                    84:e1:ae:93:8a:fe:03:58:31:8a:fd:bf:d2:81:75:
                    32:bb:24:2c:1b:49:d8:7d:9a:42:34:ce:7a:77:4f:
                    01:03:e4:fd:52:b3:7a:d6:50:8e:c5:45:02:e4:c2:
                    4b:2b:6a:fb:64:1b:5d:2c:dc:2f:5e:72:8a:7f:14:
                    9d:34:0a:d5:8d:39:56:49:fc:97:11:50:e3:ea:eb:
                    b6:30:51:a3:9e:1b:4c:43:65:d1:8a:21:02:7c:8b:
                    df:66:45:a4:f6:71:1d:00:51:4e:64:0c:10:eb:db:
                    71:23:16:c5:91:9c:3a:73:f8:ea:90:08:f1:81:94:
                    ed:13:b3:bb:b7:6c:26:49:08:0f:ba:e1:94:18:9d:
                    91:fa:d2:5c:72:5e:70:d3:f2:2c:61:cf:dd:71:38:
                    96:2d:b4:0a:24:c8:8c:4e:ec:32:7e:f5:c4:bd:42:
                    36:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:EF:CC:21:9C:CF:E3:7A:C6:DA:04:68:49:62:96:6E:EA:38:18:F8
            X509v3 Authority Key Identifier:
                keyid:B5:6C:B1:79:B3:DB:5C:6B:36:CD:33:08:34:08:01:FE:DB:2B:7D:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/Se_MIZzP43rG2gRoSWKWbuo4GPg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.47.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         46:2e:f5:dc:9a:3a:8a:bb:8b:f7:50:74:60:fd:53:ff:e9:6f:
         e1:bc:22:10:74:d8:be:c6:de:d2:ad:41:6a:70:ad:6e:d0:e0:
         13:b9:2e:1b:13:2e:ab:9e:44:40:0b:9b:cc:40:fc:75:29:df:
         5a:61:a4:62:86:3e:a6:19:a0:68:fd:55:cf:62:23:8d:ef:65:
         47:90:18:28:f6:5c:15:d1:b2:7b:ea:47:ad:a4:59:11:b0:55:
         9c:52:13:1c:6e:a9:f7:78:45:60:77:d2:dc:6b:cf:19:47:21:
         ce:eb:01:86:c8:73:00:8f:6f:8d:9d:ff:cf:c0:01:bb:fa:57:
         da:0f:6f:79:21:a7:98:f1:df:6d:40:6b:8c:12:85:fe:3c:cf:
         08:35:76:a7:de:a2:01:32:23:b0:ee:ec:b6:3a:e8:b8:71:f2:
         65:15:09:1f:15:f0:52:10:c7:32:36:57:dd:9e:9c:b5:ee:99:
         a5:a7:c5:f6:d8:57:dd:2a:24:5e:13:9e:d7:a6:41:d9:86:e0:
         0c:79:fc:77:b0:fc:22:fe:9e:46:2e:5b:23:c4:d3:d3:7e:45:
         e2:13:33:34:37:40:20:d2:16:ab:f1:09:f9:01:ad:3a:cb:8c:
         f6:31:86:83:11:1d:ea:92:58:6c:48:5f:d1:61:47:08:a8:ca:
         f9:2e:ee:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:58 2024 by rpki-client on console-ams.rpki-client.org