Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/auHP1IqGlP_GXBy90FuPboz2L_c.roa
File:                     auHP1IqGlP_GXBy90FuPboz2L_c.roa (raw, json)
Hash identifier:          Av3e7jpbIvaJ+Vf6OWQDZ9VJ+myYbBFmtKdoiahkBaY=
Subject key identifier:   6A:E1:CF:D4:8A:86:94:FF:C6:5C:1C:BD:D0:5B:8F:6E:8C:F6:2F:F7
Certificate issuer:       /CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Certificate serial:       0185708CD40662179E74C692F02FC0F3741E
Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/auHP1IqGlP_GXBy90FuPboz2L_c.roa
Signing time:             Mon 02 Jan 2023 03:35:55 +0000
ROA not before:           Mon 02 Jan 2023 03:35:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     46261
IP address blocks:        45.90.204.0/22 maxlen: 22
                          45.129.220.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 22:31:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:8c:d4:06:62:17:9e:74:c6:92:f0:2f:c0:f3:74:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc
        Validity
            Not Before: Jan  2 03:35:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6ae1cfd48a8694ffc65c1cbdd05b8f6e8cf62ff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:90:fd:20:63:37:3a:17:d9:2a:61:20:a5:50:
                    40:76:e8:e6:a6:e8:1e:c2:47:95:41:0d:37:85:1d:
                    a0:72:24:cd:7e:5f:a2:40:9b:1e:68:78:dc:f0:56:
                    60:15:b2:77:57:38:c0:f4:58:ef:a0:7c:84:f9:34:
                    55:94:b7:26:f0:db:89:e3:e5:2d:95:6d:d6:0b:5a:
                    d9:b5:32:17:4a:62:be:25:53:8a:87:e7:38:2a:f1:
                    e5:e1:76:be:6f:18:02:8b:de:d3:70:6a:36:cd:29:
                    e3:af:91:54:d8:46:c1:3e:6e:c8:a9:70:4b:4c:de:
                    d5:83:a6:2f:eb:43:f6:80:07:5d:b6:e7:c4:b0:59:
                    64:3d:9e:28:8b:b5:7b:80:e6:c8:9b:c5:ef:ee:35:
                    4f:ff:5c:ea:91:90:4d:2b:80:8a:a6:23:e4:cf:eb:
                    51:b7:ab:ca:0f:c5:bb:84:4e:cb:2e:43:39:b3:f1:
                    ce:be:06:60:b8:bf:26:aa:42:98:d8:43:13:e4:2b:
                    7c:33:e7:aa:ee:59:23:e2:d5:a1:01:38:b4:41:b3:
                    3f:1f:37:fe:da:b8:0b:85:37:da:c7:c8:54:79:98:
                    4c:a0:85:71:e4:10:1c:60:3e:fa:2d:09:8f:a2:97:
                    38:c7:e4:5a:5c:ed:37:ca:43:19:86:cc:96:7a:16:
                    f8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E1:CF:D4:8A:86:94:FF:C6:5C:1C:BD:D0:5B:8F:6E:8C:F6:2F:F7
            X509v3 Authority Key Identifier:
                keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/auHP1IqGlP_GXBy90FuPboz2L_c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.90.204.0/22
                  45.129.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:49:96:46:a1:98:53:66:56:13:61:5b:ed:74:50:39:7f:a3:
         b7:20:c9:8e:13:a8:dc:4a:27:37:71:ba:83:9c:3a:0c:95:fd:
         09:1f:d1:8b:24:bd:43:27:0b:24:cf:6a:68:4b:48:ea:f4:b6:
         99:74:70:68:35:a6:8b:de:51:42:93:98:f7:b5:48:36:34:9e:
         b9:1a:52:c1:e4:68:82:ba:b0:a3:16:7f:56:3c:16:04:ca:7a:
         5e:f6:1c:00:2c:9c:df:ca:53:3e:53:53:e8:00:e9:f5:4b:2f:
         c8:31:ac:bd:8c:b3:7e:28:8c:dc:d7:f8:fb:6f:82:39:8f:0c:
         06:14:6e:56:93:ed:a4:18:ac:67:a3:03:8c:32:79:10:e8:38:
         16:0d:bc:ed:bf:dd:72:f9:86:fc:06:ab:7f:77:ca:71:a5:70:
         3b:17:ac:e3:79:f9:f6:d3:f8:33:b2:f9:b4:21:4f:25:81:53:
         cc:32:77:dd:95:2c:76:c9:20:dc:73:8f:09:ab:d4:17:9f:f3:
         d9:7b:d2:79:50:4d:01:11:7e:b7:ed:b4:50:ea:09:14:61:d8:
         60:32:33:cb:bd:9c:73:a8:87:17:81:c7:27:03:a1:21:5f:45:
         50:c9:b9:12:dc:57:3a:4a:ef:51:c4:7e:11:ef:50:a9:ad:ba:
         79:bb:00:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:24 2024 by rpki-client on console-fra.rpki-client.org