Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/wfeomvVenM67t23z6agh1pBe7Sk.roa
File:                     wfeomvVenM67t23z6agh1pBe7Sk.roa (raw, json)
Hash identifier:          egfBBnU6sOwB+ZzUtyc6OYpJAKZePXi1x4ZybxsTzTQ=
Subject key identifier:   C1:F7:A8:9A:F5:5E:9C:CE:BB:B7:6D:F3:E9:A8:21:D6:90:5E:ED:29
Certificate issuer:       /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
Certificate serial:       01856F5DA6B55DCD4A88448363A4A190F42C
Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/wfeomvVenM67t23z6agh1pBe7Sk.roa
Signing time:             Sun 01 Jan 2023 22:04:46 +0000
ROA not before:           Sun 01 Jan 2023 22:04:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198912
IP address blocks:        57.191.0.0/21 maxlen: 24
                          57.191.224.0/19 maxlen: 19
                          57.191.192.0/19 maxlen: 19
                          2a0a:90c2:1000::/36 maxlen: 36
                          2a0a:90c2::/36 maxlen: 36

Validation:               Failed, certificate revoked on Tue 05 Sep 2023 16:28:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:5d:a6:b5:5d:cd:4a:88:44:83:63:a4:a1:90:f4:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849
        Validity
            Not Before: Jan  1 22:04:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c1f7a89af55e9ccebbb76df3e9a821d6905eed29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:65:f5:db:65:73:e4:8f:05:24:07:70:7d:bd:
                    c4:d6:b2:b9:c7:7c:46:9d:54:ca:99:f4:ea:65:0e:
                    a5:63:85:97:e7:40:7a:4a:b9:33:02:1c:8c:23:9f:
                    ea:98:85:bf:14:e0:22:4a:bc:7b:89:27:1b:d4:ef:
                    9c:c1:9b:16:ba:9d:b5:07:26:76:54:3f:9b:97:b2:
                    54:71:63:c4:7b:09:fe:32:7e:4c:fd:40:be:28:a7:
                    90:20:39:48:50:8b:73:bd:c7:9b:40:9f:9e:7a:1e:
                    90:81:7d:ee:f5:e4:ce:a4:aa:0e:d8:46:7a:0b:5a:
                    ee:d5:4c:3e:ee:99:b9:db:3d:21:10:c3:03:bf:d2:
                    2c:83:16:ba:37:39:cc:cc:74:f2:d2:56:33:f9:e9:
                    72:9f:6c:8d:d5:85:9d:07:62:be:0a:af:78:d9:be:
                    cf:c7:ca:1f:02:39:61:57:9a:19:c4:52:7f:a5:8e:
                    93:66:3e:55:82:8b:4a:e1:0c:cd:f1:ff:60:84:5c:
                    f9:03:5b:c2:f5:5d:78:58:26:91:ec:c0:ee:5d:12:
                    46:8f:2e:29:86:31:ff:ad:27:12:1b:f8:d3:e1:9e:
                    78:14:b5:b0:0e:bc:b5:6d:5f:25:f4:f4:c9:74:5b:
                    da:0c:5a:96:53:80:c5:1a:6c:15:8c:14:a8:76:71:
                    c5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F7:A8:9A:F5:5E:9C:CE:BB:B7:6D:F3:E9:A8:21:D6:90:5E:ED:29
            X509v3 Authority Key Identifier:
                keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/wfeomvVenM67t23z6agh1pBe7Sk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.191.0.0/21
                  57.191.192.0/18
                IPv6:
                  2a0a:90c2::/35

    Signature Algorithm: sha256WithRSAEncryption
         1f:3e:42:58:3f:78:88:42:ee:ae:a6:bb:07:51:e6:70:93:30:
         35:53:45:36:b9:80:f9:6b:02:a0:95:61:9d:ea:b3:45:71:dd:
         0b:97:3a:fe:05:f9:66:ca:11:ae:58:05:e5:17:73:67:c9:32:
         0b:84:02:e2:1d:30:1b:37:d7:ed:4f:25:7c:57:1a:5f:47:7b:
         62:25:3f:9e:09:06:41:93:7d:87:8c:35:f4:5d:7b:e7:5e:c1:
         72:03:45:e7:9a:11:4c:03:b7:92:8b:7b:28:4b:b1:63:f6:16:
         c7:0c:39:b7:a8:7c:bf:87:15:6c:d4:ff:8d:92:95:28:31:ff:
         d6:c3:04:39:be:9b:81:8e:c2:9f:58:74:a8:12:a6:2f:f3:b3:
         75:75:11:e6:9e:03:1e:d6:c6:85:b8:cd:a0:08:72:e0:c0:df:
         e1:07:73:ad:47:e8:3b:52:a4:4b:ed:66:1b:25:7e:cb:a7:f7:
         82:78:42:ae:f4:f1:e3:41:be:8a:83:9f:e2:af:d6:2a:27:9b:
         0c:c0:5a:09:f0:eb:c1:72:5e:ac:26:77:fb:de:5c:9c:32:b7:
         0d:cb:16:6d:ff:0f:9c:1b:ab:49:77:36:99:8e:78:d1:dd:77:
         cd:d3:2b:7a:43:80:b6:d1:18:eb:da:da:a0:4b:47:4f:ff:1e:
         09:3d:2f:5b
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAYVvXaa1Xc1KiESDY6ShkPQsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzZDViYTA4MTVjOWY1MTkzZjgwOTg5ZWU4OTNhY2FjYzRi
YTg4NDkwHhcNMjMwMTAxMjIwNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWY3YTg5YWY1NWU5Y2NlYmJiNzZkZjNlOWE4MjFkNjkwNWVlZDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmX122Vz5I8FJAdwfb3E1rK5x3xG
nVTKmfTqZQ6lY4WX50B6SrkzAhyMI5/qmIW/FOAiSrx7iScb1O+cwZsWup21ByZ2
VD+bl7JUcWPEewn+Mn5M/UC+KKeQIDlIUItzvcebQJ+eeh6QgX3u9eTOpKoO2EZ6
C1ru1Uw+7pm52z0hEMMDv9Isgxa6NznMzHTy0lYz+elyn2yN1YWdB2K+Cq942b7P
x8ofAjlhV5oZxFJ/pY6TZj5VgotK4QzN8f9ghFz5A1vC9V14WCaR7MDuXRJGjy4p
hjH/rScSG/jT4Z54FLWwDry1bV8l9PTJdFvaDFqWU4DFGmwVjBSodnHFXwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFMH3qJr1XpzOu7dt8+moIdaQXu0pMB8GA1UdIwQY
MBaAFEPVuggVyfUZP4CYnuiTrKzEuohJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEt
ZTEzZTU1NzljNWRjLzEvd2Zlb212VmVuTTY3dDIzejZhZ2gxcEJlN1NrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEtZTEzZTU1NzljNWRj
LzEvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQDOb8AAwQG
Ob/AMA4EAgACMAgDBgUqCpDCADANBgkqhkiG9w0BAQsFAAOCAQEAHz5CWD94iELu
rqa7B1HmcJMwNVNFNrmA+WsCoJVhneqzRXHdC5c6/gX5ZsoRrlgF5RdzZ8kyC4QC
4h0wGzfX7U8lfFcaX0d7YiU/ngkGQZN9h4w19F17517BcgNF55oRTAO3kot7KEux
Y/YWxww5t6h8v4cVbNT/jZKVKDH/1sMEOb6bgY7Cn1h0qBKmL/OzdXUR5p4DHtbG
hbjNoAhy4MDf4QdzrUfoO1KkS+1mGyV+y6f3gnhCrvTx40G+ioOf4q/WKiebDMBa
CfDrwXJerCZ3+95cnDK3DcsWbf8PnBurSXc2mY540d13zdMrekOAttEY69raoEtH
T/8eCT0vWw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:48 2024 by rpki-client on console-ams.rpki-client.org