Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/ng-Px9j9BYfhZUKv48lqMYCzvHc.roa
File:                     ng-Px9j9BYfhZUKv48lqMYCzvHc.roa (raw, json)
Hash identifier:          1ChJKp/h7ruG3g00FkOFRXzUl18QLZsey3OVwTwjp3A=
Subject key identifier:   9E:0F:8F:C7:D8:FD:05:87:E1:65:42:AF:E3:C9:6A:31:80:B3:BC:77
Certificate issuer:       /CN=16e9aaace50279585b5c5a5d8ee85610686c26c0
Certificate serial:       0185728C9CCD1881E4BFB2E3ACB249977CF8
Authority key identifier: 16:E9:AA:AC:E5:02:79:58:5B:5C:5A:5D:8E:E8:56:10:68:6C:26:C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/ng-Px9j9BYfhZUKv48lqMYCzvHc.roa
Signing time:             Mon 02 Jan 2023 12:54:55 +0000
ROA not before:           Mon 02 Jan 2023 12:54:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35367
IP address blocks:        45.155.72.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:8c:9c:cd:18:81:e4:bf:b2:e3:ac:b2:49:97:7c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16e9aaace50279585b5c5a5d8ee85610686c26c0
        Validity
            Not Before: Jan  2 12:54:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9e0f8fc7d8fd0587e16542afe3c96a3180b3bc77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c0:54:b0:bc:da:57:44:c9:df:c2:7b:db:81:
                    11:ea:7a:65:75:a4:84:de:2d:d7:0e:2d:40:65:c7:
                    e4:50:5f:66:7d:6d:60:d2:33:b8:12:ed:20:71:1c:
                    01:46:d6:5a:2f:85:30:f1:3d:02:5e:ed:a7:04:b1:
                    a7:1c:c7:6f:6d:47:21:78:56:59:81:b7:ba:8d:55:
                    d2:5a:a4:56:f4:c0:54:20:30:38:e7:4a:13:be:40:
                    e3:e5:db:62:79:52:46:9d:13:be:db:7d:19:13:83:
                    68:70:9d:d5:0a:7e:73:1c:b3:95:5e:db:b1:5e:64:
                    48:fd:55:9c:a2:0a:19:98:65:f3:74:3d:24:df:34:
                    94:31:bf:5b:cf:0e:d5:47:18:d6:20:90:2d:f0:37:
                    37:cc:71:c6:f2:f4:da:37:4b:f3:a6:10:dc:69:64:
                    83:9c:65:69:01:68:a2:12:5e:b1:80:22:75:85:b3:
                    2e:67:65:0d:2d:af:91:4a:7c:09:30:93:d1:10:5f:
                    17:3c:e5:7b:b4:8b:7e:6c:fc:6c:67:d1:df:62:1d:
                    2b:ea:b1:d9:57:e0:79:a4:b5:56:63:85:5b:00:4a:
                    f3:13:a8:45:99:77:0b:28:73:de:2c:52:fe:e0:3e:
                    18:c6:c6:cb:3a:38:d1:05:a8:b7:e3:01:a3:64:07:
                    2d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:0F:8F:C7:D8:FD:05:87:E1:65:42:AF:E3:C9:6A:31:80:B3:BC:77
            X509v3 Authority Key Identifier:
                keyid:16:E9:AA:AC:E5:02:79:58:5B:5C:5A:5D:8E:E8:56:10:68:6C:26:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/ng-Px9j9BYfhZUKv48lqMYCzvHc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:74:f4:e7:f9:90:b1:22:0b:5d:88:b6:6a:7d:aa:c3:19:9d:
         64:e6:61:a3:22:15:a3:42:ff:94:18:71:e5:f1:3e:03:c0:42:
         53:7b:e8:7a:18:f9:d8:4a:33:af:6a:8b:64:73:64:86:c9:5e:
         84:76:97:76:71:c8:ea:05:40:5a:1b:08:d7:19:fa:1c:35:9b:
         28:a3:3b:7a:b1:92:34:91:12:4a:2a:58:fd:04:49:e6:a5:44:
         11:75:a7:9b:ac:a3:e1:f4:59:17:00:f7:93:d3:89:d0:c7:2a:
         18:08:63:45:3c:5e:54:8b:e6:6d:dc:1d:d8:fa:fb:97:52:6b:
         3c:c8:22:4f:48:46:6e:fe:3e:91:c2:64:a9:bc:11:42:54:f1:
         ce:7b:e1:90:bf:3d:45:b5:53:f9:f9:9e:93:40:01:8e:04:25:
         2e:e4:40:d2:56:f6:23:a7:86:76:e6:a1:d3:ad:c6:89:14:9c:
         cf:83:f4:a6:58:53:39:03:bd:76:dc:a2:71:51:35:5a:de:c2:
         81:ec:24:57:cd:6c:ac:34:a6:e4:99:2f:95:5e:39:b3:2b:8c:
         cb:3e:c1:8c:f6:2b:78:4a:d8:e1:4e:ed:ac:d5:f7:a2:94:c9:
         19:5d:63:ff:d1:f3:af:94:90:d5:a4:0b:b3:89:39:9c:ce:fb:
         b6:f2:c1:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyjJzNGIHkv7LjrLJJl3z4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZTlhYWFjZTUwMjc5NTg1YjVjNWE1ZDhlZTg1NjEwNjg2
YzI2YzAwHhcNMjMwMTAyMTI1NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTBmOGZjN2Q4ZmQwNTg3ZTE2NTQyYWZlM2M5NmEzMTgwYjNiYzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssBUsLzaV0TJ38J724ER6npldaSE
3i3XDi1AZcfkUF9mfW1g0jO4Eu0gcRwBRtZaL4Uw8T0CXu2nBLGnHMdvbUcheFZZ
gbe6jVXSWqRW9MBUIDA450oTvkDj5dtieVJGnRO+230ZE4NocJ3VCn5zHLOVXtux
XmRI/VWcogoZmGXzdD0k3zSUMb9bzw7VRxjWIJAt8Dc3zHHG8vTaN0vzphDcaWSD
nGVpAWiiEl6xgCJ1hbMuZ2UNLa+RSnwJMJPREF8XPOV7tIt+bPxsZ9HfYh0r6rHZ
V+B5pLVWY4VbAErzE6hFmXcLKHPeLFL+4D4YxsbLOjjRBai34wGjZActEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ4Pj8fY/QWH4WVCr+PJajGAs7x3MB8GA1UdIwQY
MBaAFBbpqqzlAnlYW1xaXY7oVhBobCbAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnVtcXJPVUNlVmhiWEZwZGp1aFdFR2hzSnNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMmRmMGUtN2JmZS00NGE5LWJmODYt
ZjllZjk3NDIwNzY0LzEvbmctUHg5ajlCWWZoWlVLdjQ4bHFNWUN6dkhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lMmRmMGUtN2JmZS00NGE5LWJmODYtZjllZjk3NDIwNzY0
LzEvRnVtcXJPVUNlVmhiWEZwZGp1aFdFR2hzSnNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZtIMA0G
CSqGSIb3DQEBCwUAA4IBAQAQdPTn+ZCxIgtdiLZqfarDGZ1k5mGjIhWjQv+UGHHl
8T4DwEJTe+h6GPnYSjOvaotkc2SGyV6Edpd2ccjqBUBaGwjXGfocNZsoozt6sZI0
kRJKKlj9BEnmpUQRdaebrKPh9FkXAPeT04nQxyoYCGNFPF5Ui+Zt3B3Y+vuXUms8
yCJPSEZu/j6RwmSpvBFCVPHOe+GQvz1FtVP5+Z6TQAGOBCUu5EDSVvYjp4Z25qHT
rcaJFJzPg/SmWFM5A7123KJxUTVa3sKB7CRXzWysNKbkmS+VXjmzK4zLPsGM9it4
StjhTu2s1feilMkZXWP/0fOvlJDVpAuziTmczvu28sEa
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:26 2024 by rpki-client on console-ams.rpki-client.org