Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/20QWD1WWiFDhnpHpK0tsh5BG00k.roa
File:                     20QWD1WWiFDhnpHpK0tsh5BG00k.roa (raw, json)
Hash identifier:          O29yf67rlsfTfsDDnjFpuR8InDA4BE68M3hqKrIVp7I=
Subject key identifier:   DB:44:16:0F:55:96:88:50:E1:9E:91:E9:2B:4B:6C:87:90:46:D3:49
Certificate issuer:       /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Certificate serial:       018AD229C3E1D4A32B4FF7C1DA401BBF6A7A
Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/20QWD1WWiFDhnpHpK0tsh5BG00k.roa
Signing time:             Tue 26 Sep 2023 15:44:27 +0000
ROA not before:           Tue 26 Sep 2023 15:44:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     132399
IP address blocks:        57.191.95.0/24 maxlen: 24
                          57.191.96.0/19 maxlen: 24
                          57.191.64.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 26 Sep 2023 16:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:d2:29:c3:e1:d4:a3:2b:4f:f7:c1:da:40:1b:bf:6a:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
        Validity
            Not Before: Sep 26 15:44:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=db44160f55968850e19e91e92b4b6c879046d349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:33:f9:0d:b0:55:c6:1e:9a:10:90:b0:23:ca:
                    28:b0:21:98:be:3a:cc:28:ae:92:bf:58:80:88:58:
                    8e:b6:3f:87:ac:b4:41:19:99:38:58:0b:c1:2a:c2:
                    b9:fd:38:54:67:68:6b:e4:04:8e:8a:46:7e:85:cf:
                    82:5f:55:b0:c2:68:f7:24:03:88:7e:15:56:25:17:
                    52:3e:df:65:bd:07:a4:f4:ea:08:32:e2:98:41:ec:
                    77:7c:5c:98:95:51:7a:f9:1d:45:e4:9f:5a:1a:9c:
                    fb:b0:3f:48:71:cf:81:0b:a5:9e:a3:79:ff:e9:29:
                    ff:54:67:16:77:c9:21:d7:7b:c4:c2:49:87:03:9f:
                    02:31:ec:b2:02:18:5d:84:f5:88:8a:6a:fe:dc:1f:
                    aa:7c:91:c2:43:c7:1c:90:b3:ff:32:b1:91:98:bd:
                    bf:13:c0:98:36:86:7d:08:16:de:95:f2:ca:36:57:
                    4e:82:f5:a9:79:58:07:3e:cb:56:38:f5:77:99:36:
                    a1:c1:b8:2d:24:11:17:22:3e:17:79:a8:48:ca:08:
                    d3:60:e0:98:8a:80:84:ae:1d:77:78:5d:6d:ac:25:
                    56:73:7e:8e:28:eb:f9:0e:d4:d9:fb:2a:4a:25:0d:
                    57:e8:be:c0:bf:c6:7e:fa:01:61:63:b2:06:2f:67:
                    4b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:44:16:0F:55:96:88:50:E1:9E:91:E9:2B:4B:6C:87:90:46:D3:49
            X509v3 Authority Key Identifier:
                keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/20QWD1WWiFDhnpHpK0tsh5BG00k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.191.64.0/22
                  57.191.95.0-57.191.127.255

    Signature Algorithm: sha256WithRSAEncryption
         05:65:2c:e3:7f:88:2a:42:4a:dd:1e:90:1c:c3:a4:ea:2d:eb:
         0a:c4:70:e5:33:3f:a0:19:41:2c:7e:c6:1c:c6:02:54:6b:72:
         0b:71:73:21:66:03:29:9e:01:2e:5a:e4:7b:40:fa:b9:87:bd:
         f7:06:b0:26:76:26:96:df:56:3c:18:bd:a0:7c:52:53:93:be:
         43:de:8e:da:f5:2b:fa:e4:1f:d7:9a:8f:f2:35:7f:77:32:40:
         50:4e:bb:3f:49:66:c9:36:0c:21:9e:5a:6e:e9:16:3f:7d:2f:
         83:3f:a3:1c:57:7d:eb:c4:a5:9b:a0:9a:1d:bc:6b:df:d8:d0:
         2e:b9:cb:b6:da:32:e1:82:08:28:61:ee:48:c9:f5:34:c3:dc:
         30:c7:4b:75:45:76:bc:e6:78:25:45:d1:96:a1:55:ea:d8:59:
         b4:ef:99:c7:63:ec:60:df:cb:0b:d4:2a:bb:92:f7:bc:f4:31:
         5e:3f:b5:fe:e8:81:2a:73:e0:48:b7:d4:07:7a:4b:60:a7:67:
         0e:10:45:27:03:c5:e0:31:8c:17:6c:75:a6:19:11:fb:93:fc:
         50:e5:97:67:c3:bb:85:78:35:a2:da:34:53:89:bf:65:e7:57:
         15:04:d0:7f:eb:28:9e:db:9a:08:0c:0a:cb:a0:b0:17:cc:c4:
         95:c2:98:82
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:48 2024 by rpki-client on console-ams.rpki-client.org