Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/T06iv2u6LHJO8a7vDVR0hid4WDI.roa
File:                     T06iv2u6LHJO8a7vDVR0hid4WDI.roa (raw, json)
Hash identifier:          sViXFEMUIgdKDLcNcY3UKnonjPcN2+EY8y2ebW6EU/0=
Subject key identifier:   4F:4E:A2:BF:6B:BA:2C:72:4E:F1:AE:EF:0D:54:74:86:27:78:58:32
Certificate issuer:       /CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
Certificate serial:       01894174F5E3F9BAB590CCE324D8F20373C7
Authority key identifier: 05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/T06iv2u6LHJO8a7vDVR0hid4WDI.roa
Signing time:             Mon 10 Jul 2023 20:18:51 +0000
ROA not before:           Mon 10 Jul 2023 20:18:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208439
IP address blocks:        45.136.164.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:30:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:41:74:f5:e3:f9:ba:b5:90:cc:e3:24:d8:f2:03:73:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
        Validity
            Not Before: Jul 10 20:18:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4f4ea2bf6bba2c724ef1aeef0d54748627785832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d6:6c:8a:b6:e4:2c:a6:01:08:5e:3e:d6:44:
                    a9:d9:9b:b9:b0:f8:6e:0c:a1:ea:f2:01:97:6d:c9:
                    d2:4d:dc:c0:f0:83:cb:00:6c:76:73:56:8a:48:97:
                    6c:13:cf:25:a1:1c:50:33:5c:d1:ab:a4:9e:fa:d1:
                    ef:90:e4:88:6a:02:1a:43:49:41:42:89:33:bf:02:
                    7e:54:c0:03:63:48:c7:3c:ad:11:c7:00:24:d2:7a:
                    a7:05:9f:2b:35:5b:d8:27:c8:f9:0f:51:fc:db:77:
                    99:d3:7b:1d:bc:ef:a7:0a:78:7a:f3:a0:ef:50:db:
                    bd:c5:9e:86:fd:37:c0:94:54:9f:eb:0b:43:bb:d2:
                    42:4b:23:b1:6a:61:2d:95:e5:75:c4:52:02:31:86:
                    0b:6f:3a:aa:a3:bc:11:83:eb:a5:ce:49:2f:9a:dc:
                    40:b1:91:d3:01:ea:ed:24:b8:e2:00:b3:0a:00:48:
                    78:16:91:c9:6b:a8:84:d8:6c:dd:2c:04:93:7f:a8:
                    f3:fb:b3:44:3d:05:60:42:d6:29:1d:7c:db:c2:98:
                    c6:ae:1d:7c:a5:7c:4e:d1:81:d0:74:0e:f7:57:e8:
                    35:15:0d:3f:bd:a1:4b:71:fd:0a:64:e0:77:05:62:
                    af:ae:55:2b:fa:75:bc:ea:05:5a:b2:ed:b8:84:1f:
                    a1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:4E:A2:BF:6B:BA:2C:72:4E:F1:AE:EF:0D:54:74:86:27:78:58:32
            X509v3 Authority Key Identifier:
                keyid:05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/T06iv2u6LHJO8a7vDVR0hid4WDI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.136.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:1c:0d:6c:bd:2b:1b:da:d3:66:c9:88:38:d2:3d:0f:d9:bc:
         3c:07:0b:84:ad:96:7d:7a:40:79:4f:b1:04:3d:be:10:c1:09:
         b8:ed:fd:2b:97:c8:de:d4:a8:e7:26:b4:c5:f5:f4:41:f4:2b:
         de:45:7e:35:b7:22:e3:1a:9d:6d:97:98:94:d9:0d:d5:ed:0b:
         59:83:26:0a:72:a0:69:ef:4e:42:58:11:ab:df:e0:2c:ff:2d:
         15:6b:5a:1d:00:8d:82:dc:75:e3:db:dd:22:ed:62:84:32:ca:
         9b:2f:b4:24:73:88:9b:96:27:63:0c:19:1e:d0:30:ad:d7:28:
         8f:19:4d:a3:a4:06:fe:c4:5e:5a:5d:0e:d6:ea:f8:35:9a:d4:
         e6:ab:d5:c4:b2:2a:af:9f:bd:db:40:cb:31:e5:b7:79:19:0c:
         2c:0d:d8:29:af:f6:0d:a9:9d:fd:14:32:3b:53:8d:81:69:96:
         05:76:a4:fd:7c:e0:f3:06:12:c2:d4:e3:94:a0:4e:90:6e:d3:
         bc:e9:6e:dd:3b:dd:2a:aa:c5:06:f7:2b:6d:03:0d:3e:76:5b:
         3a:a9:39:e3:04:75:9b:85:09:ce:b8:ab:d9:c7:46:3d:43:b6:
         94:eb:2b:de:ca:d6:50:1f:e9:67:f5:87:2d:c0:3b:79:bc:cd:
         14:09:f5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:16 2024 by rpki-client on console-fra.rpki-client.org