Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/n6aLVJge5NKsZMV-JRPcJTDz1PY.roa
File:                     n6aLVJge5NKsZMV-JRPcJTDz1PY.roa (raw, json)
Hash identifier:          olN7iQnP5U6fSWySX9tCA//5x19aY0X9c5sMfYCYBOI=
Subject key identifier:   9F:A6:8B:54:98:1E:E4:D2:AC:64:C5:7E:25:13:DC:25:30:F3:D4:F6
Certificate issuer:       /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial:       018A31097B99D9164A4D4558117AA0F2B849
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/n6aLVJge5NKsZMV-JRPcJTDz1PY.roa
Signing time:             Sat 26 Aug 2023 08:50:19 +0000
ROA not before:           Sat 26 Aug 2023 08:50:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15924
IP address blocks:        45.156.28.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 11 Sep 2023 17:47:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:31:09:7b:99:d9:16:4a:4d:45:58:11:7a:a0:f2:b8:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
        Validity
            Not Before: Aug 26 08:50:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9fa68b54981ee4d2ac64c57e2513dc2530f3d4f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:92:96:70:d6:f9:26:cb:36:dc:07:8b:dd:da:
                    41:09:85:4c:2a:8d:f5:b2:62:cc:56:5c:1e:4c:18:
                    b1:f6:d0:e8:6a:e5:c1:13:ad:94:3f:c0:f8:87:36:
                    65:f8:62:c7:40:4e:91:41:8e:13:37:8e:ad:3d:a8:
                    dd:a6:07:de:f8:ae:56:7e:71:87:65:91:27:f9:f2:
                    97:15:c0:7e:71:e5:73:de:00:15:ca:3a:58:45:91:
                    d5:60:df:a9:90:4a:de:1a:50:eb:00:f9:b9:ce:85:
                    e4:69:ef:f9:96:87:7b:71:fe:01:86:50:75:b6:03:
                    a3:a8:95:e9:bd:b5:03:87:8c:5d:91:11:18:b2:c5:
                    52:ba:97:7f:85:27:d6:cd:fa:30:98:bc:d6:84:33:
                    a5:46:16:ca:98:be:38:70:6e:36:36:5e:9c:b1:46:
                    04:50:a1:1d:95:e7:eb:2f:bf:5e:3c:5b:8b:40:2f:
                    17:40:30:e2:bb:e0:21:b7:3b:74:e4:48:09:3e:60:
                    d2:4b:f7:68:ba:c1:79:87:ba:4b:de:2b:b6:ed:a0:
                    8f:55:51:29:d5:c7:de:75:e6:76:66:58:87:a1:f3:
                    6a:08:9d:f5:8c:0c:c9:cd:ac:dd:3f:2b:a3:4e:1b:
                    e9:9d:e8:03:b0:3c:a4:bf:b0:59:62:8a:e3:e8:eb:
                    e8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:A6:8B:54:98:1E:E4:D2:AC:64:C5:7E:25:13:DC:25:30:F3:D4:F6
            X509v3 Authority Key Identifier:
                keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/n6aLVJge5NKsZMV-JRPcJTDz1PY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.156.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:a4:7f:f7:5d:e1:86:34:c0:a3:7b:66:37:fe:9a:19:89:b6:
         46:4e:f9:cf:2a:b0:7e:f2:e8:69:77:d1:5a:a7:55:6a:9f:55:
         68:99:99:ac:40:4c:8a:3b:46:e0:0d:59:53:5a:d8:60:52:a6:
         13:a5:d1:85:ab:47:e8:e1:e9:f7:1e:3a:ef:96:5e:ea:c4:a1:
         12:16:06:0c:e8:e3:f6:5b:64:42:8f:83:c8:e3:f3:3d:b5:a8:
         40:24:61:96:3c:4f:16:1d:34:6e:34:f5:f8:20:6e:9a:47:c0:
         1d:e1:8e:71:1c:f2:17:5e:e4:46:98:18:f4:0b:41:7a:8a:3c:
         da:5f:c7:42:d2:82:97:87:9f:f7:83:dd:b2:32:18:9b:c3:42:
         99:2e:1c:16:d7:2e:1e:63:ec:93:f9:b5:e4:88:b8:cb:53:64:
         9b:20:c1:2a:4d:f1:76:cd:16:fa:c8:c9:06:4d:f8:8e:01:fd:
         ef:0b:78:03:e9:80:fa:f7:f0:3e:f3:75:8e:be:bf:43:2c:ec:
         94:f2:61:77:de:3b:55:b8:2a:7c:67:3d:38:3f:09:a4:ae:9a:
         62:c6:92:18:57:b1:6c:1b:32:8d:3d:ac:79:9c:79:2b:25:7f:
         8e:7d:ba:aa:55:06:24:67:6a:f9:03:26:75:3f:85:8e:ae:d1:
         a9:df:49:6a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYoxCXuZ2RZKTUVYEXqg8rhJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYzBiZGFmYWRlYTc4ZGNlMzEyZjg2MmRkZjQyYjFiZDRj
NGY2NDUwHhcNMjMwODI2MDg1MDE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmE2OGI1NDk4MWVlNGQyYWM2NGM1N2UyNTEzZGMyNTMwZjNkNGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZKWcNb5Jss23AeL3dpBCYVMKo31
smLMVlweTBix9tDoauXBE62UP8D4hzZl+GLHQE6RQY4TN46tPajdpgfe+K5WfnGH
ZZEn+fKXFcB+ceVz3gAVyjpYRZHVYN+pkEreGlDrAPm5zoXkae/5lod7cf4BhlB1
tgOjqJXpvbUDh4xdkREYssVSupd/hSfWzfowmLzWhDOlRhbKmL44cG42Nl6csUYE
UKEdlefrL79ePFuLQC8XQDDiu+Ahtzt05EgJPmDSS/dousF5h7pL3iu27aCPVVEp
1cfedeZ2ZliHofNqCJ31jAzJzazdPyujThvpnegDsDykv7BZYorj6Ovo2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ+mi1SYHuTSrGTFfiUT3CUw89T2MB8GA1UdIwQY
MBaAFLLAva+t6njc4xL4Yt30KxvUxPZFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xZjM3MTItY2YyYy00ODZlLTk1YjMt
ZmNjMzM2ZWVkOGQ3LzEvbjZhTFZKZ2U1TktzWk1WLUpSUGNKVER6MVBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xZjM3MTItY2YyYy00ODZlLTk1YjMtZmNjMzM2ZWVkOGQ3
LzEvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZwcMA0G
CSqGSIb3DQEBCwUAA4IBAQAopH/3XeGGNMCje2Y3/poZibZGTvnPKrB+8uhpd9Fa
p1Vqn1VomZmsQEyKO0bgDVlTWthgUqYTpdGFq0fo4en3Hjrvll7qxKESFgYM6OP2
W2RCj4PI4/M9tahAJGGWPE8WHTRuNPX4IG6aR8Ad4Y5xHPIXXuRGmBj0C0F6ijza
X8dC0oKXh5/3g92yMhibw0KZLhwW1y4eY+yT+bXkiLjLU2SbIMEqTfF2zRb6yMkG
TfiOAf3vC3gD6YD69/A+83WOvr9DLOyU8mF33jtVuCp8Zz04PwmkrppixpIYV7Fs
GzKNPax5nHkrJX+OfbqqVQYkZ2r5AyZ1P4WOrtGp30lq
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:55 2024 by rpki-client on console-fra.rpki-client.org