Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/teY32oGRCANBHEAnCjnFn0hmRV8.roa
File:                     teY32oGRCANBHEAnCjnFn0hmRV8.roa (raw, json)
Hash identifier:          INfqSyc+vuV2DcUWh0p58TyGno2vxeRHpgTuKIMxuaE=
Subject key identifier:   B5:E6:37:DA:81:91:08:03:41:1C:40:27:0A:39:C5:9F:48:66:45:5F
Certificate issuer:       /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial:       0193005F8A27751F63892C2B1950179F483F
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/teY32oGRCANBHEAnCjnFn0hmRV8.roa
Signing time:             Wed 06 Nov 2024 07:28:01 +0000
ROA not before:           Wed 06 Nov 2024 07:28:01 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     7029
IP address blocks:        45.155.243.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 01 Jan 2025 01:48:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:00:5f:8a:27:75:1f:63:89:2c:2b:19:50:17:9f:48:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
        Validity
            Not Before: Nov  6 07:28:01 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b5e637da81910803411c40270a39c59f4866455f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e3:71:93:eb:00:0e:35:48:3e:22:17:49:27:
                    fb:96:7a:27:c9:c2:50:e1:d4:7e:bf:c0:91:66:a5:
                    1d:fa:da:38:9e:24:be:d9:e7:0f:0f:e0:3e:e8:8f:
                    0a:80:1f:cb:6b:90:cc:fc:83:d3:a8:b3:1e:0a:39:
                    ff:48:10:31:6c:b4:40:80:7f:64:99:c4:25:4b:77:
                    47:23:8b:cb:38:0e:45:2d:f6:bc:91:ab:e3:8f:62:
                    bc:a0:16:1f:a3:bf:39:81:e6:df:05:18:db:ed:52:
                    6e:09:9d:af:6a:c4:0b:83:0f:b5:03:85:c1:89:aa:
                    d7:09:c7:e7:af:5f:f7:57:42:83:38:8e:3b:a6:ca:
                    67:5d:e5:d9:62:d4:51:26:2b:32:2e:c3:10:03:0e:
                    40:f8:30:19:3d:ad:e0:a4:86:0f:e4:06:f1:25:4f:
                    77:a8:d9:35:9b:1c:fa:93:79:d3:4d:93:93:58:33:
                    57:81:7f:bd:09:06:d1:e6:77:6d:75:4e:89:d6:13:
                    52:29:fc:16:97:af:5a:0d:ac:c1:1c:5c:5b:96:85:
                    4e:fb:1f:95:d9:d9:bc:0e:be:fd:b7:1f:09:09:a3:
                    db:53:fa:e0:25:17:1f:27:76:64:e6:61:48:d9:6d:
                    b7:02:64:be:90:8a:46:43:71:e6:e2:16:e1:28:92:
                    f6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:E6:37:DA:81:91:08:03:41:1C:40:27:0A:39:C5:9F:48:66:45:5F
            X509v3 Authority Key Identifier:
                keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/teY32oGRCANBHEAnCjnFn0hmRV8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:df:a0:ab:e3:44:85:c1:ab:56:fe:10:39:90:c8:7b:43:e0:
         fb:e9:3b:d6:25:6c:8a:87:eb:e5:95:77:ae:96:39:00:94:c2:
         ee:5f:f1:62:4d:bd:2b:25:22:36:7d:c0:d9:8d:e8:8a:c7:c4:
         b8:00:ec:ac:13:81:e2:86:e3:ee:45:00:67:ab:94:73:e9:94:
         b6:24:4a:c9:d6:71:6e:fd:82:8c:9b:8c:65:2b:b0:3f:7e:39:
         31:7d:f1:6b:b8:63:33:25:bc:de:04:00:42:34:40:01:64:66:
         6e:4d:4b:57:03:4f:17:01:0c:8e:7f:ba:b3:47:33:74:0e:05:
         b2:d3:a7:8a:fd:8f:b3:3f:19:72:68:84:56:88:10:d2:e9:36:
         80:78:fc:72:ae:5c:07:55:1f:07:65:a0:af:03:9a:89:81:65:
         b8:67:63:5a:ec:4d:7a:03:1a:fc:48:9e:be:a5:5a:aa:6a:42:
         3b:d4:86:9a:bd:66:b9:42:ef:a0:13:6a:8e:bf:af:88:1e:81:
         46:bd:77:db:50:40:c2:c4:4e:8d:e2:24:23:40:fe:73:78:7d:
         8c:b7:72:53:b1:61:5f:b5:24:d8:b8:f6:98:48:2c:37:de:b0:
         b7:3c:1f:57:82:e0:ae:de:d2:5a:69:27:79:40:59:12:41:29:
         28:d9:53:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:08:03 2025 by rpki-client