Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/Sn-vcWf6o1kH_Jl2l99Hka3Flm4.roa
File:                     Sn-vcWf6o1kH_Jl2l99Hka3Flm4.roa (raw, json)
Hash identifier:          lP+EbgOX1XG/RKwyLkh8iFbDnR1oG3PclQbkevPzkBQ=
Subject key identifier:   4A:7F:AF:71:67:FA:A3:59:07:FC:99:76:97:DF:47:91:AD:C5:96:6E
Certificate issuer:       /CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
Certificate serial:       018CC56EE0183522ABD9B43357BBFE5E9363
Authority key identifier: 05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/Sn-vcWf6o1kH_Jl2l99Hka3Flm4.roa
Signing time:             Mon 01 Jan 2024 14:30:27 +0000
ROA not before:           Mon 01 Jan 2024 14:30:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     208439
IP address blocks:        45.136.164.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Sat 18 May 2024 17:25:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:6e:e0:18:35:22:ab:d9:b4:33:57:bb:fe:5e:93:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
        Validity
            Not Before: Jan  1 14:30:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4a7faf7167faa35907fc997697df4791adc5966e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:43:e9:a7:76:4d:9a:78:89:db:53:32:f1:8b:
                    3f:62:30:0f:24:d5:b8:a7:3d:a8:60:a9:84:27:f8:
                    d7:be:36:1c:b0:2f:73:5f:d1:fb:6e:5e:cf:38:c5:
                    75:4a:f4:74:61:60:ad:d7:a2:4b:cb:7d:1d:9c:2e:
                    21:ba:09:5f:f9:94:6e:78:93:ae:c8:45:be:37:15:
                    ce:5e:2f:1c:ce:05:6c:22:9a:95:d5:53:70:52:53:
                    9c:bd:ae:13:4a:21:a8:c5:cf:40:42:b1:42:28:c1:
                    66:df:67:4c:08:74:79:44:08:22:3f:d3:0b:e0:c9:
                    f6:92:86:67:ec:04:ac:53:73:1f:c0:c5:67:01:ad:
                    12:08:3d:9e:b1:af:14:d8:d1:79:7f:4e:3a:79:55:
                    33:17:40:85:99:c1:32:be:c2:98:a1:7d:c1:58:6a:
                    bd:da:40:d7:17:b1:a8:c7:fb:d1:50:a2:2b:a1:8d:
                    65:eb:91:eb:8b:ff:f4:5e:c7:e7:90:6d:d4:a6:ae:
                    a9:58:0f:39:94:15:c3:32:e0:d1:3e:c7:de:9b:69:
                    ab:40:8e:51:e4:be:df:aa:bf:50:4d:a4:0e:8a:d6:
                    80:c8:aa:38:2b:df:02:fc:8c:bc:91:b2:6e:5a:8c:
                    29:30:ca:66:c3:88:21:2e:8c:08:ea:62:ba:4b:21:
                    63:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7F:AF:71:67:FA:A3:59:07:FC:99:76:97:DF:47:91:AD:C5:96:6E
            X509v3 Authority Key Identifier:
                keyid:05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/Sn-vcWf6o1kH_Jl2l99Hka3Flm4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.136.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:cb:b5:e4:18:e7:9c:6a:d2:6a:d5:e6:85:cb:52:ae:06:78:
         3c:e5:83:a7:1d:01:c3:65:3e:e8:35:c6:91:8e:fa:e3:2a:59:
         4b:71:1b:e1:d7:30:50:24:e4:8a:e8:8c:5c:65:39:0a:21:b8:
         b5:55:14:3f:73:f4:fb:a5:40:6f:e9:9d:96:b7:74:3f:c1:0d:
         42:71:90:6c:a1:0f:f3:9c:27:97:98:eb:45:0f:2a:b3:17:1f:
         70:70:2e:f9:01:ef:51:36:89:c3:74:56:81:83:82:77:c4:64:
         90:40:80:65:6a:50:a9:7d:b5:c4:96:54:00:2f:98:4a:ac:ea:
         1e:87:88:8c:d9:75:4b:d3:03:80:e1:e5:60:3a:fb:fc:d6:c3:
         47:31:10:40:d5:df:aa:ec:aa:48:1e:36:e8:9d:92:2f:3d:d2:
         4f:d2:3e:1c:ca:5f:fd:b8:60:94:36:77:18:5a:5a:f6:4b:d2:
         85:9a:10:44:13:c4:64:1f:46:49:27:1e:07:ce:14:d5:fa:83:
         bd:f3:7a:71:50:c0:0d:0d:2f:06:e4:40:42:a5:13:dc:57:3b:
         a8:73:da:19:57:e0:11:3e:cf:c2:71:b5:7a:04:b0:99:51:ce:
         ce:80:fd:07:a8:a8:78:2d:eb:d3:53:da:95:03:34:09:55:71:
         b6:c3:96:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:30 2024 by rpki-client on console-ams.rpki-client.org