Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/PhlM4_zgcuEVSsR-Xnq4G_7NJRc.roa
File:                     PhlM4_zgcuEVSsR-Xnq4G_7NJRc.roa (raw, json)
Hash identifier:          GqjJFpKds5DCcU/KG3lRwSiS8L6wsPOpyEplUtqXeTg=
Subject key identifier:   3E:19:4C:E3:FC:E0:72:E1:15:4A:C4:7E:5E:7A:B8:1B:FE:CD:25:17
Certificate issuer:       /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Certificate serial:       01856F5DA36E19DDB0A0A3E117107C753E64
Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/PhlM4_zgcuEVSsR-Xnq4G_7NJRc.roa
Signing time:             Sun 01 Jan 2023 22:04:45 +0000
ROA not before:           Sun 01 Jan 2023 22:04:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15404
IP address blocks:        57.190.60.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:29:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:5d:a3:6e:19:dd:b0:a0:a3:e1:17:10:7c:75:3e:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
        Validity
            Not Before: Jan  1 22:04:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3e194ce3fce072e1154ac47e5e7ab81bfecd2517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:56:9b:18:5c:5b:a8:42:59:fb:16:c0:f7:77:
                    cd:36:38:01:22:3c:33:66:25:f9:c2:1d:ea:c4:b2:
                    cc:2a:52:7e:bf:1a:4d:fe:c1:26:dc:f6:86:ab:45:
                    8b:95:4c:6d:fb:9d:14:48:f3:33:81:a0:ac:6f:e5:
                    b4:63:ce:b2:9a:e5:41:7f:84:76:51:35:24:d7:cf:
                    91:94:62:ee:4b:00:59:07:e2:b6:ce:00:d9:07:04:
                    79:3f:76:41:0a:86:01:31:40:57:4f:51:59:e2:9c:
                    e2:03:6f:8b:f9:e1:e8:63:e3:54:bc:5b:ec:1c:b8:
                    b9:ae:ed:2f:14:5b:ef:aa:69:50:7b:88:0d:e1:9b:
                    06:ed:31:b6:77:e6:f3:e9:18:b8:5f:53:e9:85:77:
                    1a:99:a5:23:eb:2d:e0:8a:0e:ef:45:0b:1b:e8:8e:
                    f9:ab:7f:36:96:5e:ef:db:2c:1a:96:36:1f:20:87:
                    8e:d6:51:06:1f:dd:1f:d5:e2:c3:8a:12:d2:8d:86:
                    6c:b4:c6:3e:f3:7c:ca:2c:2a:8f:5a:3f:2f:c2:08:
                    9b:1d:89:20:10:57:88:c9:58:a1:d3:59:61:4b:da:
                    0b:fc:7a:58:b0:47:a1:5e:a4:9a:91:b6:cb:e8:84:
                    5c:d4:38:ef:95:1e:14:b9:d7:3a:4b:f2:fc:b0:d1:
                    39:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:19:4C:E3:FC:E0:72:E1:15:4A:C4:7E:5E:7A:B8:1B:FE:CD:25:17
            X509v3 Authority Key Identifier:
                keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/PhlM4_zgcuEVSsR-Xnq4G_7NJRc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.190.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:1c:ab:d6:7f:7c:6b:64:9b:57:ca:16:24:4c:af:6b:9a:06:
         0b:6f:a1:f0:d6:58:b2:49:b9:90:85:01:f5:b4:12:ae:ad:b3:
         0e:9f:e9:8e:87:44:d8:33:bb:1e:f8:ad:ab:dd:e8:f9:a8:91:
         b7:00:18:72:b0:e2:51:5e:34:5e:90:45:9e:d5:0d:71:86:02:
         bf:8c:31:42:ed:f2:7a:39:59:cc:9c:e5:81:d2:ea:b9:ed:6c:
         ca:4c:24:e0:57:c8:fb:c7:b3:39:f6:f8:a3:80:27:f7:d3:15:
         b3:f6:b3:55:e3:70:dd:88:7f:5d:9e:bd:f1:97:b7:ed:fd:57:
         a7:b5:5e:80:04:67:91:7a:93:5a:28:cd:1d:6d:71:8b:cf:40:
         fe:64:e2:30:d3:d8:54:9b:5b:84:a0:f0:39:5a:a4:54:eb:d6:
         e9:67:7d:5c:d6:fc:41:6c:46:64:52:9d:7c:b8:bf:35:e6:e1:
         aa:27:e8:a3:4f:16:c8:23:26:8e:36:49:a1:c6:9c:de:c0:c0:
         54:88:33:4c:9a:f9:43:b5:bd:19:0b:f9:45:ad:03:ef:06:c0:
         db:bf:c3:94:54:fb:bf:2f:46:77:af:85:38:d7:2a:58:d0:ac:
         a9:dc:42:34:da:19:7e:20:4e:8f:05:d1:aa:35:af:10:5f:6f:
         2f:43:54:62
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvXaNuGd2woKPhFxB8dT5kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZDViYTA4MTVjOWY1MTkzZjgwOTg5ZWU4OTNhY2FjYzRi
YTg4NDkwHhcNMjMwMTAxMjIwNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTE5NGNlM2ZjZTA3MmUxMTU0YWM0N2U1ZTdhYjgxYmZlY2QyNTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlabGFxbqEJZ+xbA93fNNjgBIjwz
ZiX5wh3qxLLMKlJ+vxpN/sEm3PaGq0WLlUxt+50USPMzgaCsb+W0Y86ymuVBf4R2
UTUk18+RlGLuSwBZB+K2zgDZBwR5P3ZBCoYBMUBXT1FZ4pziA2+L+eHoY+NUvFvs
HLi5ru0vFFvvqmlQe4gN4ZsG7TG2d+bz6Ri4X1PphXcamaUj6y3gig7vRQsb6I75
q382ll7v2ywaljYfIIeO1lEGH90f1eLDihLSjYZstMY+83zKLCqPWj8vwgibHYkg
EFeIyVih01lhS9oL/HpYsEehXqSakbbL6IRc1DjvlR4Uudc6S/L8sNE5CwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD4ZTOP84HLhFUrEfl56uBv+zSUXMB8GA1UdIwQY
MBaAFEPVuggVyfUZP4CYnuiTrKzEuohJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEt
ZTEzZTU1NzljNWRjLzEvUGhsTTRfemdjdUVWU3NSLVhucTRHXzdOSlJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEtZTEzZTU1NzljNWRj
LzEvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAOb48MA0G
CSqGSIb3DQEBCwUAA4IBAQAxHKvWf3xrZJtXyhYkTK9rmgYLb6Hw1liySbmQhQH1
tBKurbMOn+mOh0TYM7se+K2r3ej5qJG3ABhysOJRXjRekEWe1Q1xhgK/jDFC7fJ6
OVnMnOWB0uq57WzKTCTgV8j7x7M59vijgCf30xWz9rNV43DdiH9dnr3xl7ft/Ven
tV6ABGeRepNaKM0dbXGLz0D+ZOIw09hUm1uEoPA5WqRU69bpZ31c1vxBbEZkUp18
uL815uGqJ+ijTxbIIyaONkmhxpzewMBUiDNMmvlDtb0ZC/lFrQPvBsDbv8OUVPu/
L0Z3r4U41ypY0Kyp3EI02hl+IE6PBdGqNa8QX28vQ1Ri
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:17 2024 by rpki-client on console-fra.rpki-client.org