Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/T4YCCMKSlNEaCdr6AySqrRrX1_Q.roa
File:                     T4YCCMKSlNEaCdr6AySqrRrX1_Q.roa (raw, json)
Hash identifier:          /oHOsdpnzW+6yl6Iyhw0FrtqLePinPfRTOxyM6cnHlE=
Subject key identifier:   4F:86:02:08:C2:92:94:D1:1A:09:DA:FA:03:24:AA:AD:1A:D7:D7:F4
Certificate issuer:       /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial:       0192D723BF0A325F6BB477601D79B7615FEF
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/T4YCCMKSlNEaCdr6AySqrRrX1_Q.roa
Signing time:             Tue 29 Oct 2024 07:18:17 +0000
ROA not before:           Tue 29 Oct 2024 07:18:17 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     63023
IP address blocks:        103.114.41.0/24 maxlen: 24
                          103.114.42.0/24 maxlen: 24
                          2a13:1480::/29 maxlen: 29
                          2a13:18c2::/32 maxlen: 32
                          2a13:8c87::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 25 Nov 2024 08:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:d7:23:bf:0a:32:5f:6b:b4:77:60:1d:79:b7:61:5f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
        Validity
            Not Before: Oct 29 07:18:17 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4f860208c29294d11a09dafa0324aaad1ad7d7f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:89:3d:c4:5d:e1:90:68:1c:1a:5a:c9:4c:12:
                    b2:d7:f4:ce:c1:66:e2:cb:09:d4:5f:7e:c0:6b:d8:
                    78:cb:5a:6f:dc:88:6a:c4:c7:10:67:5d:34:d0:5d:
                    dd:ec:d7:d9:9f:1a:1b:aa:4e:70:99:ee:fa:09:70:
                    e4:e4:67:bc:5f:32:a4:4c:4f:b0:93:15:82:4a:58:
                    87:0f:3a:b0:a6:9b:77:ae:73:0d:72:2f:2f:92:8b:
                    da:ba:1f:c7:b6:74:0b:ba:85:04:cd:fe:4d:09:ce:
                    1d:aa:2c:d4:48:09:15:bc:2f:02:5b:c4:cd:4e:18:
                    f7:3c:b5:39:09:6c:7c:fb:48:d6:4a:e4:23:eb:25:
                    f8:92:24:40:f7:42:29:0a:76:2f:2c:89:2c:63:2f:
                    ab:a2:9f:c9:f2:2c:52:21:7f:95:d7:85:43:42:3f:
                    18:61:ba:2c:51:af:8a:a6:62:a9:ca:d1:a1:13:32:
                    ef:78:f1:2b:de:15:43:73:bf:fa:58:aa:9e:8b:58:
                    29:60:52:d1:c3:70:f4:62:06:52:3e:12:ae:79:52:
                    ad:45:e3:fb:f7:ab:21:7b:d3:93:6e:45:70:14:e4:
                    e6:7a:b5:5e:f8:3c:ec:ca:2d:cb:21:be:62:6d:8e:
                    2f:ff:9b:32:d0:40:2a:cd:48:36:b3:d0:55:f9:8e:
                    33:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:86:02:08:C2:92:94:D1:1A:09:DA:FA:03:24:AA:AD:1A:D7:D7:F4
            X509v3 Authority Key Identifier:
                keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/T4YCCMKSlNEaCdr6AySqrRrX1_Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.41.0-103.114.42.255
                IPv6:
                  2a13:1480::/29
                  2a13:18c2::/32
                  2a13:8c87::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:b2:1b:29:bd:96:7d:e8:4f:c1:05:a2:f0:3e:4d:6d:89:20:
         34:a1:d0:c5:db:ce:4d:0a:c4:45:f2:45:da:7a:6c:47:b6:08:
         a9:37:62:f9:39:1b:fd:13:14:a1:fa:25:6f:10:00:b2:b7:db:
         e6:11:4f:82:64:96:98:13:6f:dc:30:0a:18:de:3f:80:d1:64:
         9a:b7:01:3b:d3:29:a3:d2:b4:fa:eb:47:c7:5e:50:fb:9e:ce:
         94:7c:e6:a1:88:36:8b:ea:4c:a3:d4:28:bd:fa:52:08:10:4b:
         c7:54:c0:5e:32:69:35:c6:85:da:13:07:c7:9a:1a:57:54:2e:
         36:43:e1:9a:b0:9c:30:d3:26:fd:97:5b:4f:e7:97:50:1b:75:
         2c:b2:02:65:68:a0:36:d0:37:d9:09:b6:30:7c:e4:4c:37:79:
         b4:94:4a:f6:03:1c:05:21:28:72:54:7a:6c:87:91:29:ff:e3:
         5c:47:5b:8a:02:69:1a:c0:0d:7d:eb:c6:57:23:2e:f0:4d:f8:
         45:2d:e0:a0:c7:54:a5:17:c0:c4:22:cc:f6:be:82:5c:a4:28:
         62:2d:50:90:c1:b3:ee:25:96:1c:34:a0:90:09:78:78:da:5d:
         49:ae:5e:01:8a:2c:54:d0:0c:39:71:cd:f2:30:d1:8e:51:98:
         19:b3:77:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 12:01:08 2024 by rpki-client on console-ams.rpki-client.org