Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/qcUfJrwUk_mX1TzQa3tYJZhf8zE.roa
File:                     qcUfJrwUk_mX1TzQa3tYJZhf8zE.roa (raw, json)
Hash identifier:          2BkTNrMKUwCp0MTkR9d9Swu2vYoeEt1SeziCc9XOov4=
Subject key identifier:   A9:C5:1F:26:BC:14:93:F9:97:D5:3C:D0:6B:7B:58:25:98:5F:F3:31
Certificate issuer:       /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial:       0188F3D2C8C4F13983AAE76E8829FC6D1B20
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/qcUfJrwUk_mX1TzQa3tYJZhf8zE.roa
Signing time:             Sun 25 Jun 2023 18:30:57 +0000
ROA not before:           Sun 25 Jun 2023 18:30:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212219
IP address blocks:        45.94.4.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:34:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:f3:d2:c8:c4:f1:39:83:aa:e7:6e:88:29:fc:6d:1b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
        Validity
            Not Before: Jun 25 18:30:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a9c51f26bc1493f997d53cd06b7b5825985ff331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:56:15:03:d1:41:6b:fd:28:06:91:8e:ae:b2:
                    e6:31:b0:95:53:5f:28:75:a8:b2:84:a6:6d:21:a0:
                    d2:97:01:6e:60:3b:47:89:b8:87:a0:7d:fd:27:58:
                    92:bc:05:dc:c4:52:de:72:34:32:c9:42:2c:2e:71:
                    f9:ea:12:ce:29:a0:4b:ae:d3:54:69:2e:24:72:4e:
                    86:a3:f5:47:42:1b:39:ac:c4:40:c5:7b:fe:85:74:
                    ef:8e:fc:9f:97:47:68:9e:6e:3f:a1:77:eb:43:30:
                    da:ad:df:93:3d:a0:a6:56:5c:73:69:3b:f9:92:99:
                    87:d6:51:0c:44:e6:8a:29:30:a6:47:93:a4:17:5f:
                    d5:8a:ec:9f:40:5a:94:e9:98:cc:6d:73:4d:6c:b1:
                    0f:c7:55:cc:ee:26:2f:8b:67:7c:fc:c9:4e:fa:0f:
                    d7:3c:8c:f5:8e:3c:cd:26:6c:65:c9:92:bf:7d:72:
                    bc:76:0c:0c:09:5b:92:ee:18:97:05:7a:d2:60:d8:
                    84:ce:2c:3d:7a:6a:6e:b1:bc:87:92:b3:fe:ed:6d:
                    3a:47:53:78:cd:65:58:49:0c:4a:3b:d1:a8:6b:3e:
                    41:90:42:f2:e0:6d:60:7c:3c:89:91:c3:ef:62:be:
                    55:31:95:76:9c:1e:2b:9f:44:d1:0a:a7:fd:dd:2f:
                    fd:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C5:1F:26:BC:14:93:F9:97:D5:3C:D0:6B:7B:58:25:98:5F:F3:31
            X509v3 Authority Key Identifier:
                keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/qcUfJrwUk_mX1TzQa3tYJZhf8zE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.94.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:d4:9c:7f:e6:8e:d8:2a:c8:63:bf:d8:1d:30:26:bd:6b:d3:
         39:bd:58:56:b0:75:cf:c1:e2:f6:ce:48:ab:c2:92:83:cb:70:
         d8:a4:2a:df:d4:02:89:22:34:59:1a:5c:23:58:d6:9c:db:9d:
         fa:02:2b:31:11:9b:c2:77:f5:4d:75:ec:38:78:eb:71:7c:a4:
         6f:11:ef:a3:f5:ac:c7:46:99:07:4f:f0:fd:36:93:63:68:c8:
         fb:14:9f:5c:59:00:d2:44:0b:47:93:a6:c9:8c:0d:6a:e8:ba:
         fb:9d:ab:86:8e:cf:ae:cc:dc:74:fc:e9:b7:41:20:8e:80:41:
         4f:a5:7e:64:d1:8d:e5:bd:54:c1:e3:9d:e8:9c:5f:cf:14:22:
         a8:ed:0a:29:0f:ac:90:67:c8:17:a2:ee:9d:a3:a1:d9:83:68:
         a9:df:f6:0d:fc:ab:7c:92:08:42:69:8f:81:9f:a3:42:31:49:
         26:76:15:8c:a5:d6:f7:20:50:b7:db:30:0e:a0:0b:00:8a:a1:
         9d:37:be:2d:df:18:41:a8:e2:c6:12:88:7f:5b:8d:72:e4:83:
         cd:f7:41:10:5c:e5:32:c1:f8:85:d2:2e:35:dd:ff:ee:88:02:
         2d:ea:78:1c:f2:34:6b:25:7b:0f:84:37:1f:9b:d9:5e:f2:89:
         45:15:2c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:36 2024 by rpki-client on console-ams.rpki-client.org