Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/qqjGURwJA2NR5t0pi6-DjD4RidY.roa
File:                     qqjGURwJA2NR5t0pi6-DjD4RidY.roa (raw, json)
Hash identifier:          QyPYLl332jwTDF391bAdg74ExjFktkK7PTT+hAUouyE=
Subject key identifier:   AA:A8:C6:51:1C:09:03:63:51:E6:DD:29:8B:AF:83:8C:3E:11:89:D6
Certificate issuer:       /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Certificate serial:       018810B667311B363739586B17F23025DA13
Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/qqjGURwJA2NR5t0pi6-DjD4RidY.roa
Signing time:             Fri 12 May 2023 16:06:09 +0000
ROA not before:           Fri 12 May 2023 16:06:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29884
IP address blocks:        57.250.56.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:29:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:10:b6:67:31:1b:36:37:39:58:6b:17:f2:30:25:da:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
        Validity
            Not Before: May 12 16:06:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=aaa8c6511c09036351e6dd298baf838c3e1189d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:98:25:36:2d:db:40:5a:5b:6c:07:62:1a:95:
                    80:3b:8c:bd:ba:a3:17:58:d9:6c:fe:12:28:1b:e8:
                    81:76:bf:51:21:a0:bd:42:9c:db:3f:30:59:21:fa:
                    bd:49:c3:d7:73:ab:e9:20:e6:21:45:c8:d0:99:26:
                    e4:ea:32:f7:7e:4f:50:51:b4:22:22:6b:a5:a4:06:
                    d2:9f:90:f3:d0:cb:4f:39:9d:58:cd:21:0d:a0:f1:
                    c5:2c:45:35:6b:57:14:4c:6e:a6:bc:61:a7:f0:8a:
                    22:ff:79:66:bf:b0:48:56:4a:bb:a4:7f:7a:75:ee:
                    d7:a1:42:34:71:e9:37:4a:ad:dd:ea:8f:4f:8e:e2:
                    e6:64:36:c2:cb:51:74:8a:91:94:f2:dc:08:d1:cc:
                    47:d6:b4:c9:73:5b:d0:e1:bc:3d:b4:3e:24:04:b4:
                    f3:02:08:8c:af:30:34:a2:5b:06:3a:f9:a3:de:39:
                    6e:b3:eb:a4:ac:99:0f:5b:d9:a9:d2:43:0b:53:f3:
                    b0:11:9a:73:6a:31:00:81:a3:2e:8b:b1:1a:eb:4b:
                    c6:8d:fc:40:c5:8e:99:61:f7:d1:72:2f:4d:c4:34:
                    f8:f6:a9:30:8c:0f:27:db:ff:33:13:08:2b:8e:49:
                    88:c1:38:9a:02:ef:10:24:13:9a:14:c7:e9:8f:ee:
                    9d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A8:C6:51:1C:09:03:63:51:E6:DD:29:8B:AF:83:8C:3E:11:89:D6
            X509v3 Authority Key Identifier:
                keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/qqjGURwJA2NR5t0pi6-DjD4RidY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.250.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:ee:3d:18:a2:18:40:8a:57:ea:8c:fe:07:67:8a:1c:ff:24:
         7c:16:37:2e:94:a2:3f:43:cf:e9:52:8f:af:4c:77:1b:17:89:
         79:32:8e:78:3c:b6:9d:1a:5e:e8:e7:9b:17:87:a9:cb:23:53:
         ac:81:a2:cf:f9:fa:ba:d3:e7:3d:f8:6d:6a:c9:22:17:3e:59:
         3d:76:93:b5:81:01:d6:0d:0c:56:9d:34:86:4b:01:8a:47:5b:
         8e:cc:cc:f4:6b:f3:92:a1:5e:81:df:8b:13:1e:f8:e2:85:df:
         dc:21:27:60:fb:a5:20:6d:82:d4:27:48:81:5b:30:c3:8b:15:
         53:87:4d:aa:47:0e:4a:6e:75:70:b9:b8:9b:ca:1a:ed:a3:66:
         f4:b6:cc:44:1a:5d:d4:88:f1:69:7b:8a:27:74:d9:95:74:94:
         eb:66:15:32:d9:37:03:4b:89:76:98:34:61:bc:a4:29:16:b1:
         e0:94:d1:2c:06:95:70:e0:00:33:7d:6e:30:d6:79:c9:8b:6d:
         e9:5e:47:57:2d:2b:c2:69:fb:08:57:92:b5:f1:98:29:64:55:
         53:f2:b3:37:d0:94:f0:64:23:bf:12:12:2d:04:e6:4a:33:43:
         f3:f4:96:3b:de:50:ad:12:e1:3e:ad:82:10:7b:84:91:e2:08:
         e5:ea:18:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:17 2024 by rpki-client on console-fra.rpki-client.org