Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/R4i1Ggg1qGS2iBF1rATn9PSz5Os.roa
File:                     R4i1Ggg1qGS2iBF1rATn9PSz5Os.roa (raw, json)
Hash identifier:          MHaI2cEI35Kgvc33cMcSkHxQ+0+986/AZbXWaCohfWA=
Subject key identifier:   47:88:B5:1A:08:35:A8:64:B6:88:11:75:AC:04:E7:F4:F4:B3:E4:EB
Certificate issuer:       /CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
Certificate serial:       01856CB84A1C342319EA46078BF0996FFDC4
Authority key identifier: E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/R4i1Ggg1qGS2iBF1rATn9PSz5Os.roa
Signing time:             Sun 01 Jan 2023 09:44:54 +0000
ROA not before:           Sun 01 Jan 2023 09:44:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     54133
IP address blocks:        176.125.236.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Fri 24 Feb 2023 23:16:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:b8:4a:1c:34:23:19:ea:46:07:8b:f0:99:6f:fd:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
        Validity
            Not Before: Jan  1 09:44:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4788b51a0835a864b6881175ac04e7f4f4b3e4eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e4:73:7b:80:47:1f:5c:9a:8c:75:7b:07:55:
                    72:e3:06:99:a5:d5:c3:0d:ff:71:3f:8c:c4:d0:63:
                    2a:2d:72:cb:6d:99:30:9e:26:9d:b8:29:81:46:ea:
                    2e:b7:42:59:b3:79:82:b2:c8:32:1e:5a:00:15:1c:
                    4f:23:e7:1e:92:2f:f8:fc:51:13:53:84:54:23:b0:
                    4a:94:cc:b2:64:12:a8:15:f7:11:b3:27:f9:70:2c:
                    be:02:1b:d5:75:5c:fb:fa:0c:86:c3:de:e2:a2:b9:
                    f7:1a:b0:2d:ac:62:fd:60:71:31:71:9c:e4:dc:e3:
                    59:bd:62:f1:c2:a2:d3:46:99:2f:14:2c:e8:ed:a4:
                    a0:67:26:b5:48:6a:13:f6:72:ed:f4:2e:43:cd:ae:
                    2a:88:1c:89:ac:cf:b8:fe:8e:6d:14:c7:aa:0e:95:
                    32:d3:45:dc:45:a4:54:bf:07:94:d4:a3:5c:83:ae:
                    cb:3e:4e:6e:59:02:c6:90:94:5e:b4:15:3b:81:67:
                    0c:b1:e8:48:40:d0:75:0e:b4:66:3f:2f:6b:d8:b5:
                    b0:ee:e5:3b:9b:c8:3f:2a:60:27:94:e9:41:e6:f1:
                    d5:c8:fb:95:f6:8b:58:78:46:c4:1b:8a:04:a9:45:
                    b4:dd:b3:ad:2e:6b:b1:a9:4b:e1:28:bb:73:bc:26:
                    9b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:88:B5:1A:08:35:A8:64:B6:88:11:75:AC:04:E7:F4:F4:B3:E4:EB
            X509v3 Authority Key Identifier:
                keyid:E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/R4i1Ggg1qGS2iBF1rATn9PSz5Os.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/5uRoerix623hq9BKB2F8htEYUY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.125.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:43:62:0c:e5:28:a1:7a:31:0d:7b:36:c8:b7:11:10:61:f1:
         2b:c6:10:28:db:2e:ab:c1:29:08:5e:82:d6:6d:90:04:f5:d0:
         c5:e8:ca:dc:cf:b0:cf:9f:a7:bd:a9:95:8d:a0:1a:98:e7:14:
         fe:42:b2:90:c1:42:af:d3:ab:02:a5:25:8e:52:7b:1b:b4:5e:
         39:1d:72:6d:12:10:cd:c7:b9:47:ab:ca:49:01:cf:89:3a:21:
         a8:4f:4a:49:1b:5d:98:79:ff:62:e0:43:19:b3:a1:8f:9c:fc:
         04:19:73:d2:0c:72:80:9d:dc:6b:41:73:80:5d:fa:aa:e4:fa:
         54:d9:f8:2c:58:05:d0:bd:34:e4:3c:56:54:b1:5b:01:5d:74:
         af:1a:e9:94:1b:69:c9:ef:1b:c6:ac:5f:88:fa:c3:92:e3:2c:
         49:35:7d:7a:9c:24:52:42:b7:8a:51:f5:17:9f:16:b6:cd:df:
         b8:aa:c9:e1:e2:21:16:c7:0a:8b:bf:d3:2f:c5:b9:5c:a8:cb:
         95:f6:d0:f8:fc:e1:9d:d1:ba:54:e5:6d:e6:a1:bc:57:08:ae:
         4c:ce:c6:d9:3a:95:e0:f8:15:02:11:d3:f3:2d:c5:ed:cf:6e:
         76:3c:e0:4c:5a:95:9d:a6:d8:62:1f:d7:ee:f1:c1:d9:48:27:
         65:83:a7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:07 2024 by rpki-client on console-ams.rpki-client.org