Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/I59Drt6tcPUSKNrNi6EGsihYDoo.roa
File:                     I59Drt6tcPUSKNrNi6EGsihYDoo.roa (raw, json)
Hash identifier:          AF8uLDSBdp/BVEtRJCowNvfDb7eKQ7LUfWTHdt7nGVM=
Subject key identifier:   23:9F:43:AE:DE:AD:70:F5:12:28:DA:CD:8B:A1:06:B2:28:58:0E:8A
Certificate issuer:       /CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Certificate serial:       0187C17E220C2FEFACEF37531F55F29E272D
Authority key identifier: 33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/I59Drt6tcPUSKNrNi6EGsihYDoo.roa
Signing time:             Thu 27 Apr 2023 06:54:41 +0000
ROA not before:           Thu 27 Apr 2023 06:54:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     55933
IP address blocks:        45.145.230.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 27 Apr 2023 07:08:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:c1:7e:22:0c:2f:ef:ac:ef:37:53:1f:55:f2:9e:27:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=333361fba8409174fb3c482b8ca26f235ebd22c2
        Validity
            Not Before: Apr 27 06:54:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=239f43aedead70f51228dacd8ba106b228580e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:08:fc:47:6c:22:48:63:59:99:a9:8f:98:6e:
                    08:16:89:92:89:ab:f8:2c:02:95:aa:55:eb:2a:d8:
                    98:f0:76:6a:2b:5b:3e:e5:cd:aa:49:e9:6f:4b:73:
                    67:8a:eb:a8:2b:b1:f1:4a:f3:23:4d:80:29:42:fd:
                    7d:0d:cd:5d:bb:0b:d3:47:c9:58:7c:a3:45:40:34:
                    f0:7e:8b:d6:27:78:4e:78:c1:e8:ae:c3:56:fb:cf:
                    06:52:d4:86:81:a7:12:75:da:18:2f:d8:e3:fa:43:
                    71:cf:24:c2:65:4b:99:1d:0d:19:6e:aa:28:18:3e:
                    01:7c:52:5b:2c:df:63:fd:8e:5c:a9:ec:c9:1e:6b:
                    e2:c6:9e:c5:83:41:1a:be:0f:c9:a1:65:96:7e:dd:
                    94:09:ba:fa:ac:54:44:1e:d0:4c:ca:02:59:6b:fc:
                    31:7d:df:ef:10:f1:7b:6e:49:09:ab:7c:80:e6:af:
                    f0:9e:7d:75:15:ea:df:2d:10:7b:db:64:7e:b2:54:
                    69:4a:89:98:c3:70:9f:35:49:58:34:68:db:a0:2d:
                    92:45:60:42:47:4c:26:9a:db:61:21:50:06:55:94:
                    a9:75:9b:c0:ee:4a:05:37:03:ba:17:5f:6c:76:12:
                    65:49:ce:82:14:1d:76:08:1f:db:80:b5:56:dd:62:
                    6f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:9F:43:AE:DE:AD:70:F5:12:28:DA:CD:8B:A1:06:B2:28:58:0E:8A
            X509v3 Authority Key Identifier:
                keyid:33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/I59Drt6tcPUSKNrNi6EGsihYDoo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.145.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cc:36:ba:97:43:e9:c8:97:b3:26:ba:13:4b:43:26:8a:7e:b2:
         a6:02:e8:d9:94:ce:ef:d2:25:bf:5d:37:53:77:5a:44:aa:64:
         e6:ce:42:5c:8f:7b:ec:59:ba:ac:39:f7:65:47:1a:6c:23:82:
         e7:33:5b:91:78:28:4a:8a:d4:6d:ea:43:f4:d6:dc:ff:f5:07:
         e9:a1:ca:5f:63:15:15:4d:03:c3:e1:ee:64:e6:74:b0:ef:47:
         67:e8:5c:02:22:32:76:28:a0:57:9e:13:1c:9d:74:ee:68:3e:
         0d:64:5b:21:8d:42:ac:61:0b:41:79:4a:a1:eb:a3:d7:09:4e:
         0d:26:64:fd:a5:c0:9a:cf:8e:f2:72:8b:cc:e5:81:f8:5a:62:
         f7:59:c6:6c:39:5f:90:64:7f:a3:d3:70:bb:fc:43:cc:59:79:
         1f:3e:5d:6b:2e:7a:33:84:be:98:a1:9f:9c:fb:4e:51:f8:2c:
         66:43:4e:cc:f3:68:dd:df:29:e9:29:69:7c:83:54:27:9b:d9:
         6d:14:fe:ba:09:47:92:da:c5:19:8f:17:36:00:e5:4d:05:02:
         a4:78:9e:ff:82:a3:97:36:67:83:b5:2f:0d:ad:4c:af:4d:3d:
         2a:8b:4f:52:73:b3:5e:a2:4d:30:e0:e4:39:c9:3b:11:7a:ca:
         2c:68:e8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:56 2024 by rpki-client on console-fra.rpki-client.org