Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/5R4DF6hg4wD3ooYTT3h1J78tUnM.roa
File:                     5R4DF6hg4wD3ooYTT3h1J78tUnM.roa (raw, json)
Hash identifier:          jXGZI3wmL2pNjuNbMTH73seCJf2TElSB1P/82fWo9FI=
Subject key identifier:   E5:1E:03:17:A8:60:E3:00:F7:A2:86:13:4F:78:75:27:BF:2D:52:73
Certificate issuer:       /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Certificate serial:       018A662CD1A3D17B6FBCEC14C0A3F580FEB2
Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/5R4DF6hg4wD3ooYTT3h1J78tUnM.roa
Signing time:             Tue 05 Sep 2023 16:28:47 +0000
ROA not before:           Tue 05 Sep 2023 16:28:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198912
IP address blocks:        57.191.0.0/21 maxlen: 24
                          57.191.224.0/19 maxlen: 19
                          57.191.127.0/24 maxlen: 24
                          57.191.192.0/19 maxlen: 19
                          2a0a:90c2:1000::/36 maxlen: 36
                          2a0a:90c2::/36 maxlen: 36

Validation:               Failed, certificate revoked on Tue 26 Sep 2023 15:45:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:66:2c:d1:a3:d1:7b:6f:bc:ec:14:c0:a3:f5:80:fe:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
        Validity
            Not Before: Sep  5 16:28:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e51e0317a860e300f7a286134f787527bf2d5273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b5:37:ca:5a:98:47:26:78:8b:71:0b:2e:6f:
                    fe:74:cd:6f:13:01:b2:ca:c2:c9:f7:a9:5c:a9:ad:
                    30:55:a5:23:50:0a:d2:70:1b:ad:38:dc:7d:36:20:
                    26:dc:dd:75:bd:87:46:9b:64:c6:a6:1b:6e:a9:33:
                    b3:6c:22:8a:d2:ff:a9:03:18:a1:29:0a:00:9b:e2:
                    cd:70:50:51:26:47:c7:b0:0b:5a:f5:11:cb:dc:d2:
                    f0:06:54:25:b2:3b:4e:0d:59:71:0f:82:24:9b:00:
                    42:36:e6:7f:fd:13:4f:d1:a9:b7:ad:b1:4e:97:33:
                    b3:52:6f:dc:cf:a8:f8:2d:a3:81:c7:50:a1:a6:ab:
                    28:8d:52:c4:65:5c:76:7d:df:2f:63:0b:4d:44:57:
                    ad:5f:3a:0b:3b:01:7d:72:45:0b:0c:4f:3e:d1:30:
                    61:cd:de:82:ed:15:c2:85:ee:df:cd:32:51:70:c0:
                    3a:ac:24:ec:92:26:b5:0a:66:3d:70:8b:7a:54:30:
                    64:b1:32:5f:a0:e9:1d:11:46:fc:e6:7e:63:a0:95:
                    10:72:24:ea:86:f7:26:14:60:6d:fd:16:cd:0c:4e:
                    7a:45:23:b7:29:4f:79:ec:bc:f1:6a:2f:84:61:4f:
                    2c:6a:df:80:45:b4:37:14:df:b6:2c:f9:90:42:b7:
                    a0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:1E:03:17:A8:60:E3:00:F7:A2:86:13:4F:78:75:27:BF:2D:52:73
            X509v3 Authority Key Identifier:
                keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/5R4DF6hg4wD3ooYTT3h1J78tUnM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.191.0.0/21
                  57.191.127.0/24
                  57.191.192.0/18
                IPv6:
                  2a0a:90c2::/35

    Signature Algorithm: sha256WithRSAEncryption
         19:e2:9e:b0:6f:4e:ed:2d:6e:65:fe:69:69:a4:d8:bf:25:c2:
         80:20:3f:11:50:0c:45:4b:81:26:fc:8c:b9:0a:69:de:59:66:
         73:fb:5d:a9:e9:9d:2d:a5:5c:4c:e1:92:ee:63:32:88:01:3e:
         b4:ea:f3:d6:df:f2:65:f1:5d:f4:91:0a:5a:9b:89:e9:e7:da:
         21:8f:98:7b:55:bb:df:12:3c:92:ac:f4:03:b3:6e:27:a8:4a:
         17:4a:24:f7:72:a8:4b:89:5c:5f:58:b1:4a:f4:b5:58:cd:a9:
         c8:45:19:97:fc:df:c0:8f:26:02:e1:94:53:6f:98:a7:51:be:
         8c:b4:32:b4:22:76:f1:be:fb:bd:97:e6:55:44:76:3d:1f:07:
         f0:91:a3:3e:20:9f:05:c7:59:26:6d:4b:81:92:d7:3d:1c:30:
         c0:53:b5:fe:bc:59:98:0b:8e:21:83:0d:f1:94:66:50:ae:3d:
         6e:2b:bc:e4:99:7b:67:9c:e1:51:21:49:81:4d:ac:50:63:f3:
         31:fa:e7:30:2a:90:fb:cb:18:27:6e:62:28:04:ea:99:0f:5d:
         b6:6f:39:54:15:c1:86:3a:50:da:36:a7:8d:fc:87:cb:15:5a:
         37:6f:d7:0c:6a:9a:19:b2:43:30:1e:b9:30:4b:af:a0:51:cc:
         6b:4d:a5:e1
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYpmLNGj0XtvvOwUwKP1gP6yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZDViYTA4MTVjOWY1MTkzZjgwOTg5ZWU4OTNhY2FjYzRi
YTg4NDkwHhcNMjMwOTA1MTYyODQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTFlMDMxN2E4NjBlMzAwZjdhMjg2MTM0Zjc4NzUyN2JmMmQ1MjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7U3ylqYRyZ4i3ELLm/+dM1vEwGy
ysLJ96lcqa0wVaUjUArScButONx9NiAm3N11vYdGm2TGphtuqTOzbCKK0v+pAxih
KQoAm+LNcFBRJkfHsAta9RHL3NLwBlQlsjtODVlxD4IkmwBCNuZ//RNP0am3rbFO
lzOzUm/cz6j4LaOBx1ChpqsojVLEZVx2fd8vYwtNRFetXzoLOwF9ckULDE8+0TBh
zd6C7RXChe7fzTJRcMA6rCTskia1CmY9cIt6VDBksTJfoOkdEUb85n5joJUQciTq
hvcmFGBt/RbNDE56RSO3KU957Lzxai+EYU8sat+ARbQ3FN+2LPmQQregEwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOUeAxeoYOMA96KGE094dSe/LVJzMB8GA1UdIwQY
MBaAFEPVuggVyfUZP4CYnuiTrKzEuohJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEt
ZTEzZTU1NzljNWRjLzEvNVI0REY2aGc0d0Qzb29ZVFQzaDFKNzh0VW5NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEtZTEzZTU1NzljNWRj
LzEvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAYBAIAATASAwQDOb8AAwQA
Ob9/AwQGOb/AMA4EAgACMAgDBgUqCpDCADANBgkqhkiG9w0BAQsFAAOCAQEAGeKe
sG9O7S1uZf5paaTYvyXCgCA/EVAMRUuBJvyMuQpp3llmc/tdqemdLaVcTOGS7mMy
iAE+tOrz1t/yZfFd9JEKWpuJ6efaIY+Ye1W73xI8kqz0A7NuJ6hKF0ok93KoS4lc
X1ixSvS1WM2pyEUZl/zfwI8mAuGUU2+Yp1G+jLQytCJ28b77vZfmVUR2PR8H8JGj
PiCfBcdZJm1LgZLXPRwwwFO1/rxZmAuOIYMN8ZRmUK49biu85Jl7Z5zhUSFJgU2s
UGPzMfrnMCqQ+8sYJ25iKATqmQ9dtm85VBXBhjpQ2janjfyHyxVaN2/XDGqaGbJD
MB65MEuvoFHMa02l4Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:48 2024 by rpki-client on console-ams.rpki-client.org