Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS140208.roa
File:                     AS140208.roa (raw, json)
Hash identifier:          +8LfRsUIr/H9Gam5jUQ7IELuX8E5fdK1f9CLSu5WN7E=
Subject key identifier:   51:55:BE:00:01:4B:8D:84:FD:C0:95:FD:DE:0E:9A:B2:B3:0E:A5:BB
Certificate issuer:       /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial:       4E8B071EEE6B0D599A0396FBC66D90E598FCCB34
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS140208.roa
Signing time:             Fri 19 Apr 2024 06:23:58 +0000
ROA not before:           Fri 19 Apr 2024 06:18:58 +0000
ROA not after:            Fri 18 Apr 2025 06:23:58 +0000
asID:                     140208
IP address blocks:        181.214.119.0/24 maxlen: 24
                          181.214.134.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 09 May 2024 15:05:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:8b:07:1e:ee:6b:0d:59:9a:03:96:fb:c6:6d:90:e5:98:fc:cb:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
        Validity
            Not Before: Apr 19 06:18:58 2024 GMT
            Not After : Apr 18 06:23:58 2025 GMT
        Subject: CN=5155BE00014B8D84FDC095FDDE0E9AB2B30EA5BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:44:ab:66:4b:13:38:49:06:50:5d:ad:77:9e:
                    76:d2:5f:6c:cf:15:96:64:77:57:f4:c6:eb:2b:8f:
                    60:12:60:dd:c1:f3:7e:87:ec:a9:22:10:14:d5:97:
                    cb:55:4f:47:5b:3d:a8:b5:47:55:0e:fc:f6:36:0a:
                    99:e9:76:d3:ff:58:90:5b:00:2e:a5:1e:d1:3f:ad:
                    a0:9c:89:f7:7c:93:10:48:1a:80:d7:00:ca:d1:f8:
                    1b:a1:dc:f7:b4:0d:22:66:88:9c:02:99:a4:2f:e4:
                    11:e9:f8:02:1f:ac:58:22:d0:70:30:d6:26:b9:fc:
                    6d:ae:13:ae:77:38:31:4f:43:d6:e5:fd:65:90:77:
                    6c:62:be:38:31:8b:34:db:fd:70:92:24:a0:9e:3e:
                    20:49:f3:77:4c:e1:8e:ec:50:b8:2f:ff:13:85:b6:
                    b8:b9:e1:48:8a:a6:b1:c3:f2:8e:d6:d5:90:d6:fb:
                    58:6c:4f:0b:7c:7a:44:27:e5:b1:26:c3:dc:00:c6:
                    dd:15:73:73:bc:ed:32:19:7e:ab:c6:5f:ca:51:e6:
                    e8:9f:9e:68:b8:0c:36:ac:44:9f:2b:bf:a6:c6:48:
                    2d:e1:6e:68:06:eb:32:b0:a7:9f:f1:29:83:3b:7d:
                    fd:7c:23:85:4a:22:52:36:b7:ed:73:00:51:be:a9:
                    f5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:55:BE:00:01:4B:8D:84:FD:C0:95:FD:DE:0E:9A:B2:B3:0E:A5:BB
            X509v3 Authority Key Identifier:
                keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS140208.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.119.0/24
                  181.214.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:35:ad:92:4d:5f:f9:c5:c9:e5:05:d6:d6:61:4a:a2:59:10:
         62:5f:a9:6b:f1:10:d5:9d:33:8c:61:dd:79:ff:76:60:40:f9:
         2d:e3:18:20:7c:64:19:ba:6c:e3:9e:2f:94:50:7c:53:8a:81:
         83:b2:47:8f:68:45:5a:0d:8b:b7:51:19:62:e5:7c:1a:7e:73:
         7c:13:4f:75:26:e9:b9:77:95:ce:49:82:a0:4d:a3:c3:5f:75:
         16:8c:46:2e:c9:ea:03:bc:2e:57:a8:83:09:8a:05:1f:b3:ef:
         43:82:d8:d1:9a:e8:47:2f:43:8a:e6:7d:db:5b:6e:78:0e:53:
         ee:4b:47:09:b0:35:ec:8b:0d:4d:ec:da:fa:e3:a1:6f:3e:a5:
         82:45:0e:52:98:0c:51:43:d1:e9:9e:72:d8:fa:00:4d:4d:ce:
         80:73:32:51:c8:fe:27:97:99:36:c5:dd:e4:d4:8c:c9:ee:e5:
         36:ec:e9:06:9b:c4:a4:7d:64:7c:07:d9:c9:25:dd:b7:52:4b:
         e5:6c:26:f0:10:86:06:f2:0d:4b:20:1b:eb:d4:52:29:82:68:
         ca:81:62:6f:ab:db:bb:e8:bd:f9:d1:1d:ec:91:e5:07:f3:68:
         a7:38:ff:0b:cf:dc:89:7a:94:b6:0f:0d:6f:7e:51:d3:30:5b:
         3f:b2:5d:28
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUTosHHu5rDVmaA5b7xm2Q5Zj8yzQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjFiMWJiNDQ0NzcxOGYxNmIzZDM2Njc1ZDIwNWM0ZGVh
NDFiYmEwYTAeFw0yNDA0MTkwNjE4NThaFw0yNTA0MTgwNjIzNThaMDMxMTAvBgNV
BAMTKDUxNTVCRTAwMDE0QjhEODRGREMwOTVGRERFMEU5QUIyQjMwRUE1QkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgRKtmSxM4SQZQXa13nnbSX2zP
FZZkd1f0xusrj2ASYN3B836H7KkiEBTVl8tVT0dbPai1R1UO/PY2CpnpdtP/WJBb
AC6lHtE/raCcifd8kxBIGoDXAMrR+Buh3Pe0DSJmiJwCmaQv5BHp+AIfrFgi0HAw
1ia5/G2uE653ODFPQ9bl/WWQd2xivjgxizTb/XCSJKCePiBJ83dM4Y7sULgv/xOF
tri54UiKprHD8o7W1ZDW+1hsTwt8ekQn5bEmw9wAxt0Vc3O87TIZfqvGX8pR5uif
nmi4DDasRJ8rv6bGSC3hbmgG6zKwp5/xKYM7ff18I4VKIlI2t+1zAFG+qfWJAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUUVW+AAFLjYT9wJX93g6asrMOpbswHwYDVR0j
BBgwFoAUYbG7REdxjxaz02Z10gXE3qQbugowDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvNTM3NDU5ZTctMmE4My00M2QxLTlhYTEtNTg0MTdhYmFj
NGI2LzEvNjFCMUJCNDQ0NzcxOEYxNkIzRDM2Njc1RDIwNUM0REVBNDFCQkEwQS5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1liRzdSRWR4anhhejAyWjEwZ1hFM3FR
YnVnby5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzUzNzQ1OWU3LTJhODMt
NDNkMS05YWExLTU4NDE3YWJhYzRiNi8xL0FTMTQwMjA4LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAtdZ3
AwQAtdaGMA0GCSqGSIb3DQEBCwUAA4IBAQAcNa2STV/5xcnlBdbWYUqiWRBiX6lr
8RDVnTOMYd15/3ZgQPkt4xggfGQZumzjni+UUHxTioGDskePaEVaDYu3URli5Xwa
fnN8E091Jum5d5XOSYKgTaPDX3UWjEYuyeoDvC5XqIMJigUfs+9DgtjRmuhHL0OK
5n3bW254DlPuS0cJsDXsiw1N7Nr646FvPqWCRQ5SmAxRQ9HpnnLY+gBNTc6AczJR
yP4nl5k2xd3k1IzJ7uU27OkGm8SkfWR8B9nJJd23UkvlbCbwEIYG8g1LIBvr1FIp
gmjKgWJvq9u76L350R3skeUH82inOP8Lz9yJepS2Dw1vflHTMFs/sl0o
Generated at Thu May 9 19:14:07 2024 by rpki-client on console-ams.rpki-client.org