Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/b-INkpjPTLfrdqYH6mcdrB_7MHk.roa
File:                     b-INkpjPTLfrdqYH6mcdrB_7MHk.roa (raw, json)
Hash identifier:          uJDJWqmv/ZkauGmHVdvspDJfK/O0hz6ZTeMrrmIZXNU=
Subject key identifier:   6F:E2:0D:92:98:CF:4C:B7:EB:76:A6:07:EA:67:1D:AC:1F:FB:30:79
Certificate issuer:       /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial:       0187805BA119C10D261AA5C4C8BD3B1F15FE
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/b-INkpjPTLfrdqYH6mcdrB_7MHk.roa
Signing time:             Fri 14 Apr 2023 15:21:41 +0000
ROA not before:           Fri 14 Apr 2023 15:21:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     19437
IP address blocks:        45.143.163.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 16:29:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:80:5b:a1:19:c1:0d:26:1a:a5:c4:c8:bd:3b:1f:15:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
        Validity
            Not Before: Apr 14 15:21:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6fe20d9298cf4cb7eb76a607ea671dac1ffb3079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7f:7d:ee:14:65:38:7f:31:f9:f9:36:92:cb:
                    a9:96:21:bd:5f:74:28:a8:59:22:c9:c5:4b:59:3c:
                    60:08:c7:88:05:40:51:1c:60:e9:74:6d:e1:38:88:
                    57:b6:c4:6d:6f:42:26:f4:48:b7:f3:cb:a0:47:0a:
                    07:f8:ce:07:c6:df:1f:a0:c2:3d:49:5a:7a:1d:22:
                    a0:1d:f4:5a:2b:46:05:ce:9b:cc:78:a2:b5:96:b7:
                    a0:76:69:67:38:08:35:dc:8a:7f:05:18:2a:bf:e4:
                    da:f2:a8:c7:07:52:83:71:41:23:46:33:fe:be:6d:
                    fc:cf:a7:1c:2b:50:6e:ec:ca:b3:2d:cc:46:a9:fa:
                    bd:35:5c:47:e2:29:6e:86:45:6d:77:66:c7:d9:e9:
                    99:9a:30:de:d4:cf:25:9a:31:eb:81:fc:5b:45:9f:
                    3f:74:3f:93:fc:fd:0c:8c:2f:9f:e1:16:5d:95:46:
                    a2:48:7b:00:7b:7f:ed:b9:26:da:bc:1f:db:7f:4f:
                    9e:d6:6b:a3:79:f7:0d:44:c6:e1:cd:8e:0b:b3:81:
                    c6:16:b3:f6:c0:46:88:6b:20:cb:26:eb:e8:93:6d:
                    43:51:5a:50:c8:71:2b:69:5c:22:7a:3c:b6:7d:d5:
                    25:ad:36:b5:21:ac:99:60:37:1e:62:83:cd:e3:5d:
                    ca:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E2:0D:92:98:CF:4C:B7:EB:76:A6:07:EA:67:1D:AC:1F:FB:30:79
            X509v3 Authority Key Identifier:
                keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/b-INkpjPTLfrdqYH6mcdrB_7MHk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.143.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:ff:a4:12:5d:8e:9c:27:00:ef:00:0e:19:a2:bd:c7:fe:3e:
         6a:ef:16:f6:5c:c9:62:e5:c8:65:d5:c4:81:3f:56:3b:b9:50:
         1f:8d:41:77:29:f8:c2:18:4d:de:42:fb:ef:21:f1:d8:4e:55:
         57:2c:75:2d:1e:2f:8c:87:a8:74:78:92:a6:0a:21:dd:be:30:
         db:5a:b8:15:7e:6f:d7:28:3a:af:83:52:a6:ff:62:88:31:ca:
         a0:69:10:2d:e9:a6:b5:09:43:30:79:ce:2a:b6:9a:83:6d:e4:
         9e:08:ac:8b:0d:ea:f7:c7:1a:3e:27:ee:6f:e5:fb:25:bf:41:
         a0:9a:5a:2e:81:fc:c5:2d:f6:84:6d:82:8b:29:51:42:77:73:
         77:3b:6e:00:83:d5:6e:43:d4:93:0c:2f:14:ef:63:54:48:21:
         04:d6:b9:16:3b:aa:60:97:bb:3f:68:a4:7b:f1:01:7c:85:e1:
         55:55:de:af:18:60:df:09:08:b9:77:c8:db:c3:f4:a8:bb:ea:
         c7:03:4c:e7:ca:2d:3a:e4:6b:2c:06:ea:d7:aa:3a:35:57:08:
         09:66:65:6e:65:95:c7:09:eb:eb:b2:8a:96:50:b4:52:7a:54:
         cc:d2:06:ce:34:d2:b3:17:ce:7b:20:0c:7e:0c:9f:52:fc:da:
         76:46:9b:fd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYeAW6EZwQ0mGqXEyL07HxX+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNGQwZTY5YWI3NjlmNjViYjJiMTU1YmRmYTgzYTcxODZl
ZWFjNDQwHhcNMjMwNDE0MTUyMTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmUyMGQ5Mjk4Y2Y0Y2I3ZWI3NmE2MDdlYTY3MWRhYzFmZmIzMDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuH997hRlOH8x+fk2ksupliG9X3Qo
qFkiycVLWTxgCMeIBUBRHGDpdG3hOIhXtsRtb0Im9Ei388ugRwoH+M4Hxt8foMI9
SVp6HSKgHfRaK0YFzpvMeKK1lregdmlnOAg13Ip/BRgqv+Ta8qjHB1KDcUEjRjP+
vm38z6ccK1Bu7MqzLcxGqfq9NVxH4iluhkVtd2bH2emZmjDe1M8lmjHrgfxbRZ8/
dD+T/P0MjC+f4RZdlUaiSHsAe3/tuSbavB/bf0+e1mujefcNRMbhzY4Ls4HGFrP2
wEaIayDLJuvok21DUVpQyHEraVwiejy2fdUlrTa1IayZYDceYoPN413KbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG/iDZKYz0y363amB+pnHawf+zB5MB8GA1UdIwQY
MBaAFLpNDmmrdp9luysVW9+oOnGG7qxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgt
OGVmZjNmZDNjNDhhLzEvYi1JTmtwalBUTGZyZHFZSDZtY2RyQl83TUhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgtOGVmZjNmZDNjNDhh
LzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY+jMA0G
CSqGSIb3DQEBCwUAA4IBAQA1/6QSXY6cJwDvAA4Zor3H/j5q7xb2XMli5chl1cSB
P1Y7uVAfjUF3KfjCGE3eQvvvIfHYTlVXLHUtHi+Mh6h0eJKmCiHdvjDbWrgVfm/X
KDqvg1Km/2KIMcqgaRAt6aa1CUMwec4qtpqDbeSeCKyLDer3xxo+J+5v5fslv0Gg
mlougfzFLfaEbYKLKVFCd3N3O24Ag9VuQ9STDC8U72NUSCEE1rkWO6pgl7s/aKR7
8QF8heFVVd6vGGDfCQi5d8jbw/Sou+rHA0znyi065GssBurXqjo1VwgJZmVuZZXH
CevrsoqWULRSelTM0gbONNKzF857IAx+DJ9S/Np2Rpv9
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:08 2024 by rpki-client on console-ams.rpki-client.org