Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/NjVzZd5nX8viklq6YX_pc_GLY9Q.roa
File:                     NjVzZd5nX8viklq6YX_pc_GLY9Q.roa (raw, json)
Hash identifier:          cqENOsO2rVFLoRSibjWl//TnjU9k3wv/oJ8lwOLG0lo=
Subject key identifier:   36:35:73:65:DE:67:5F:CB:E2:92:5A:BA:61:7F:E9:73:F1:8B:63:D4
Certificate issuer:       /CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Certificate serial:       018D8ABE2CD834F697FAAA224DC9D027643D
Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/NjVzZd5nX8viklq6YX_pc_GLY9Q.roa
Signing time:             Thu 08 Feb 2024 22:02:15 +0000
ROA not before:           Thu 08 Feb 2024 22:02:15 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     9009
IP address blocks:        5.183.240.0/23 maxlen: 23
                          5.183.242.0/23 maxlen: 23
                          45.14.80.0/24 maxlen: 24
                          45.14.81.0/24 maxlen: 24
                          45.86.24.0/22 maxlen: 22
                          92.119.24.0/23 maxlen: 23
                          92.119.26.0/23 maxlen: 23
                          171.22.60.0/23 maxlen: 23
                          171.22.62.0/23 maxlen: 23
                          185.45.94.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 23 Feb 2024 01:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:8a:be:2c:d8:34:f6:97:fa:aa:22:4d:c9:d0:27:64:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc
        Validity
            Not Before: Feb  8 22:02:15 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=36357365de675fcbe2925aba617fe973f18b63d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:09:10:35:99:ec:a8:d9:40:5b:6b:97:3e:87:
                    71:3e:09:38:a2:1c:d2:be:b9:b9:7b:d7:5c:88:41:
                    3b:ec:97:5c:d1:43:af:d2:58:54:1b:46:74:ca:cf:
                    6a:61:b7:c7:0a:fb:23:20:f8:a2:f7:ee:10:c5:8c:
                    83:a3:40:88:59:28:69:a6:d4:72:ab:35:18:ae:23:
                    f5:b5:3f:3f:1b:12:f2:f9:b9:e5:63:04:d8:53:04:
                    27:3d:15:7b:e5:36:a7:39:bc:58:6c:b6:04:e4:bf:
                    0d:b6:6e:37:f4:60:44:02:98:1a:ff:a0:ed:02:c6:
                    64:2f:79:d9:29:cb:a3:10:c1:74:a5:aa:4c:b9:ce:
                    25:7a:ad:90:ac:3e:e4:ed:a7:0d:fc:36:d1:00:8c:
                    d3:0c:a5:24:cc:ab:4a:20:c9:41:0e:09:08:69:7b:
                    90:a3:e8:0c:95:16:51:66:14:44:18:83:b6:73:d1:
                    72:78:d8:f4:9a:fd:01:92:2f:d0:13:d9:fa:b7:c7:
                    1e:60:ce:f7:74:13:e5:31:32:3d:0b:82:89:7c:64:
                    1e:83:25:5e:49:09:7f:73:34:a4:62:2f:7a:9b:e3:
                    29:0a:ea:f6:24:2d:0b:35:c5:74:6f:43:49:31:65:
                    6d:bf:8b:d3:76:fe:f8:95:e5:b4:1e:c8:a6:cf:c7:
                    27:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:35:73:65:DE:67:5F:CB:E2:92:5A:BA:61:7F:E9:73:F1:8B:63:D4
            X509v3 Authority Key Identifier:
                keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/NjVzZd5nX8viklq6YX_pc_GLY9Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.183.240.0/22
                  45.14.80.0/23
                  45.86.24.0/22
                  92.119.24.0/22
                  171.22.60.0/22
                  185.45.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:3e:24:56:56:35:87:2a:74:56:8f:cd:da:2c:b9:87:a5:3b:
         17:b8:80:15:ba:3d:0e:58:9c:65:17:43:9c:a1:bc:f1:d6:31:
         5b:90:d7:71:8a:41:36:63:32:3b:8b:be:35:b3:cf:27:c9:a4:
         8a:3b:fb:da:39:cc:27:8c:96:06:7c:c5:7c:9e:3a:1c:65:ee:
         b3:1c:02:cc:44:b0:27:cf:12:c0:6b:70:3e:87:0c:71:c7:26:
         82:6c:52:1a:82:9b:07:19:8d:ee:1a:16:32:bc:26:cd:64:5f:
         55:4e:8b:de:2d:15:a5:38:07:59:49:bc:99:b7:01:20:42:18:
         cb:8b:5c:c7:11:c4:63:a2:6a:04:14:f4:d5:39:33:a1:08:74:
         7c:47:28:3c:f1:4b:59:b4:4e:34:94:81:67:58:2b:c7:bb:e7:
         ec:1c:51:fa:c4:7b:3c:dc:f5:90:21:2f:ef:f0:c1:50:30:f6:
         33:cb:94:0e:b3:a8:70:69:28:f8:95:4a:f2:82:f5:ac:0f:75:
         f1:ba:90:89:bd:94:41:88:d5:25:91:b9:33:5a:a5:2f:94:49:
         68:a0:fb:fc:cd:c8:a3:6b:31:af:51:90:88:4c:4b:2a:cf:29:
         8f:0a:b3:fd:88:eb:09:90:40:73:23:c7:bb:9c:ef:3c:f3:dc:
         9b:5e:8a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:24 2024 by rpki-client on console-fra.rpki-client.org