Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212219.roa
File:                     AS212219.roa (raw, json)
Hash identifier:          KrSBMWzrXH2pucGNyEjtTbUEV8cSgcQE8ouJQVHtnug=
Subject key identifier:   F1:F1:31:16:37:2F:8E:DE:B1:8C:82:9F:8B:FA:5C:7B:94:06:0E:63
Certificate issuer:       /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial:       0F4A481586BF608E612A33BAA31E481B215D084C
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212219.roa
Signing time:             Fri 24 Mar 2023 15:11:02 +0000
ROA not before:           Fri 24 Mar 2023 15:06:02 +0000
ROA not after:            Fri 22 Mar 2024 15:11:02 +0000
asID:                     212219
IP address blocks:        45.155.19.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:4a:48:15:86:bf:60:8e:61:2a:33:ba:a3:1e:48:1b:21:5d:08:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
        Validity
            Not Before: Mar 24 15:06:02 2023 GMT
            Not After : Mar 22 15:11:02 2024 GMT
        Subject: CN=F1F13116372F8EDEB18C829F8BFA5C7B94060E63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3c:77:3b:29:78:86:1e:34:a5:4f:b7:0c:a8:
                    86:75:5b:32:1e:59:1c:fd:0d:29:08:00:c1:f8:e4:
                    58:7f:16:86:61:2f:94:0d:2c:a6:5a:ad:14:98:83:
                    63:68:67:f7:87:f1:6a:e4:09:d6:1c:99:d5:69:2b:
                    87:f0:80:b4:d3:48:92:ca:0e:e5:cc:9a:88:04:52:
                    a1:27:e9:ae:ea:31:00:0c:1d:c3:dd:27:2b:94:9e:
                    22:2f:a5:bc:51:32:a5:a6:da:47:6c:5b:ff:80:99:
                    dd:30:bf:26:55:ff:1e:47:73:78:78:99:1e:06:57:
                    91:46:30:f4:af:c8:cd:fe:28:02:37:9b:30:34:91:
                    5f:d3:3e:92:da:d6:ac:92:b8:95:0d:fd:59:54:2c:
                    ac:5e:b4:94:05:3b:4b:10:6a:6d:f7:53:bc:24:c4:
                    62:79:6d:7f:65:d1:e0:14:4b:00:2e:c8:cd:2e:b6:
                    e9:da:0f:2c:e9:f4:82:86:5a:68:3e:50:5d:b7:74:
                    ea:e3:a1:c4:99:37:1e:4c:4f:97:80:20:fd:c0:6a:
                    e5:fe:2b:53:c2:53:7c:a0:95:94:77:43:84:21:42:
                    d5:e7:0f:2d:48:67:25:6f:23:4a:81:f8:c4:59:ec:
                    f2:bf:64:53:d6:38:a2:c7:b9:de:55:54:91:5b:b8:
                    cf:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F1:31:16:37:2F:8E:DE:B1:8C:82:9F:8B:FA:5C:7B:94:06:0E:63
            X509v3 Authority Key Identifier:
                keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS212219.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:ba:9e:b1:90:5a:bc:39:33:ee:fc:1a:2c:b3:7b:3a:ec:4b:
         1b:12:32:06:f5:19:3a:42:e2:77:7d:e0:97:c3:67:33:6f:c5:
         22:61:61:c6:6e:1b:fd:d7:bf:e8:12:c9:ef:42:47:a0:77:5a:
         d5:65:76:b6:f5:bb:11:b0:98:8e:27:a2:1b:de:52:3f:d3:43:
         cd:5a:3a:f6:bd:c0:2e:c5:ab:57:6c:34:fe:4a:37:ea:4b:24:
         a6:ac:28:62:68:6d:82:ee:9b:06:78:0a:c9:3d:82:35:b9:5c:
         4f:61:b9:0f:02:5d:21:62:85:62:b0:05:92:88:55:30:96:bf:
         f9:06:00:e0:44:af:8f:c7:3f:39:7c:59:45:4d:0e:60:09:a3:
         de:eb:aa:97:ea:ff:cb:ae:f6:47:b7:42:48:8c:52:b9:cb:6c:
         7d:e1:9d:19:64:6c:c3:90:8d:51:4c:97:e2:1d:35:5d:ed:8b:
         4f:54:8d:8d:b0:12:ef:4a:d0:66:57:41:89:01:1a:86:88:12:
         f2:d7:54:08:7b:1f:67:ef:0f:55:8e:24:7d:ac:5f:c3:77:16:
         ae:90:1f:7f:08:06:14:c2:82:59:76:a3:4a:d4:32:0f:44:18:
         ad:b6:71:19:6b:ae:16:4f:ca:26:a5:d7:c1:00:37:6b:26:1c:
         e5:58:9d:3e
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUD0pIFYa/YI5hKjO6ox5IGyFdCEwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yMzAzMjQxNTA2MDJaFw0yNDAzMjIxNTExMDJaMDMxMTAvBgNV
BAMTKEYxRjEzMTE2MzcyRjhFREVCMThDODI5RjhCRkE1QzdCOTQwNjBFNjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBPHc7KXiGHjSlT7cMqIZ1WzIe
WRz9DSkIAMH45Fh/FoZhL5QNLKZarRSYg2NoZ/eH8WrkCdYcmdVpK4fwgLTTSJLK
DuXMmogEUqEn6a7qMQAMHcPdJyuUniIvpbxRMqWm2kdsW/+Amd0wvyZV/x5Hc3h4
mR4GV5FGMPSvyM3+KAI3mzA0kV/TPpLa1qySuJUN/VlULKxetJQFO0sQam33U7wk
xGJ5bX9l0eAUSwAuyM0utunaDyzp9IKGWmg+UF23dOrjocSZNx5MT5eAIP3AauX+
K1PCU3yglZR3Q4QhQtXnDy1IZyVvI0qB+MRZ7PK/ZFPWOKLHud5VVJFbuM8dAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQU8fExFjcvjt6xjIKfi/pce5QGDmMwHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMjEyMjE5LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZsT
MA0GCSqGSIb3DQEBCwUAA4IBAQA6up6xkFq8OTPu/Boss3s67EsbEjIG9Rk6QuJ3
feCXw2czb8UiYWHGbhv917/oEsnvQkegd1rVZXa29bsRsJiOJ6Ib3lI/00PNWjr2
vcAuxatXbDT+SjfqSySmrChiaG2C7psGeArJPYI1uVxPYbkPAl0hYoVisAWSiFUw
lr/5BgDgRK+Pxz85fFlFTQ5gCaPe66qX6v/LrvZHt0JIjFK5y2x94Z0ZZGzDkI1R
TJfiHTVd7YtPVI2NsBLvStBmV0GJARqGiBLy11QIex9n7w9VjiR9rF/DdxaukB9/
CAYUwoJZdqNK1DIPRBittnEZa64WT8ompdfBADdrJhzlWJ0+
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:47 2023 by rpki-client on console-ams.rpki-client.org