Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/1-_dAmpaiRFOLKEsihNMHiecVcck.roa
File:                     1-_dAmpaiRFOLKEsihNMHiecVcck.roa (raw, json)
Hash identifier:          j9L8trQBIuPlfDHa5iO8+LcIMYvwZPdkzpa7VAMSuYg=
Subject key identifier:   FB:F7:40:9A:96:A2:44:53:8B:28:4B:22:84:D3:07:89:E7:15:71:C9
Certificate issuer:       /CN=33358b451ee0fe85b004a0564f8310fb211c95fa
Certificate serial:       0185711E67A80DA827360F0F7DA3923E54C8
Authority key identifier: 33:35:8B:45:1E:E0:FE:85:B0:04:A0:56:4F:83:10:FB:21:1C:95:FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MzWLRR7g_oWwBKBWT4MQ-yEclfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/1-_dAmpaiRFOLKEsihNMHiecVcck.roa
Signing time:             Mon 02 Jan 2023 06:14:56 +0000
ROA not before:           Mon 02 Jan 2023 06:14:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     64425
IP address blocks:        45.148.123.0/24 maxlen: 24
                          45.148.120.0/24 maxlen: 24
                          45.148.121.0/24 maxlen: 24
                          45.148.122.0/24 maxlen: 24
                          2a0f:5e05::/32 maxlen: 32
                          2a0f:5e03::/32 maxlen: 32
                          2a0f:5e07::/32 maxlen: 32
                          2a0f:5e01::/32 maxlen: 32
                          2a0f:5e04::/32 maxlen: 32
                          2a0f:5e02::/32 maxlen: 32
                          2a0f:5e00::/32 maxlen: 32
                          2a0f:5e06::/32 maxlen: 32

Validation:               Failed, certificate revoked on Wed 19 Apr 2023 06:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:1e:67:a8:0d:a8:27:36:0f:0f:7d:a3:92:3e:54:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33358b451ee0fe85b004a0564f8310fb211c95fa
        Validity
            Not Before: Jan  2 06:14:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fbf7409a96a244538b284b2284d30789e71571c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e9:58:c5:e1:59:d6:97:9a:37:64:a7:85:c2:
                    62:ca:fe:67:4f:d8:f9:8c:a6:42:b6:4f:68:98:6a:
                    8b:1d:35:5e:4d:01:e7:47:98:93:00:5e:7d:fc:83:
                    0d:c9:b5:3d:f3:46:a2:d3:d2:0e:7a:bf:f3:a4:ad:
                    ca:3b:bf:03:c1:9a:e7:48:0b:f0:81:8e:d9:9c:d9:
                    e6:55:9d:2c:cf:df:d9:19:93:65:30:2c:1e:07:41:
                    77:1e:15:59:b1:28:3a:c4:44:a0:f2:95:a3:b9:e1:
                    1b:59:5e:63:53:75:7a:9b:e0:cb:21:9b:e2:e7:2b:
                    70:45:ab:59:ce:0a:81:2c:8d:bf:3d:18:2f:30:13:
                    5f:c4:9d:cf:62:24:37:78:dd:36:11:5f:c7:a7:6a:
                    93:a8:54:5c:4c:90:03:63:7b:d5:ca:0f:58:e7:74:
                    e6:4f:2f:fd:f5:db:8f:92:6b:b3:8c:5d:19:dc:61:
                    0d:98:0c:21:90:88:99:ca:a4:f7:ca:8a:49:42:12:
                    df:2b:66:2e:09:ce:3b:58:b3:88:79:4b:3b:67:04:
                    21:8f:31:36:b3:24:37:df:15:06:23:30:79:c1:f3:
                    cf:df:96:52:d1:6f:74:d7:70:e8:fa:63:cb:78:28:
                    99:a0:18:ca:71:2c:54:38:a3:5a:fc:e1:46:5b:0e:
                    1e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F7:40:9A:96:A2:44:53:8B:28:4B:22:84:D3:07:89:E7:15:71:C9
            X509v3 Authority Key Identifier:
                keyid:33:35:8B:45:1E:E0:FE:85:B0:04:A0:56:4F:83:10:FB:21:1C:95:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzWLRR7g_oWwBKBWT4MQ-yEclfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/1-_dAmpaiRFOLKEsihNMHiecVcck.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/9f18f8-96c4-4b23-931f-d5f047c29190/1/MzWLRR7g_oWwBKBWT4MQ-yEclfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.148.120.0/22
                IPv6:
                  2a0f:5e00::/29

    Signature Algorithm: sha256WithRSAEncryption
         b0:be:1a:0d:91:4a:15:09:40:ca:b7:05:ee:bd:fe:bb:8b:bb:
         7b:47:e9:aa:16:ba:51:98:c3:ba:b9:57:fe:33:d8:39:ac:cf:
         87:da:0c:2e:6e:36:ea:46:06:04:47:c8:8f:d8:10:3d:d6:b7:
         24:48:ef:58:c6:d9:87:a9:d0:49:c0:41:43:32:5b:c9:95:1c:
         51:00:9a:48:07:ee:50:c4:38:76:be:4c:18:52:90:2c:56:f1:
         e0:39:17:f2:c5:74:2e:d5:73:fc:b0:c4:db:5d:bf:b8:3f:cd:
         b2:71:8e:b3:c3:95:f7:f1:c0:48:a8:d1:28:b8:24:db:72:aa:
         07:42:86:db:4f:c3:46:76:ba:f4:41:a8:7f:ed:de:c8:ff:8a:
         36:7a:56:a3:1a:c7:cc:4f:05:58:d4:b9:5c:9c:3e:02:09:5e:
         fa:5c:02:ea:e5:e4:b0:f3:a8:69:48:1a:60:ff:1f:c3:9c:35:
         4d:ae:22:61:9e:f4:42:8f:21:ea:5b:a9:41:2a:6b:a2:f6:e9:
         22:82:ee:ba:fb:78:6f:20:30:7a:a2:9e:42:41:24:40:5e:a3:
         e6:fa:b3:32:53:fe:d2:b8:07:e6:c7:e1:37:27:32:6f:94:86:
         fd:54:c5:84:3f:b0:ec:05:67:7c:1d:54:56:bd:9c:46:bf:9c:
         d8:ff:ca:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:35 2024 by rpki-client on console-fra.rpki-client.org