Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/SmlBLPCxU-DYR66Qw3X-9Q9tZ-Q.roa
File:                     SmlBLPCxU-DYR66Qw3X-9Q9tZ-Q.roa (raw, json)
Hash identifier:          E4gaTA9qd7qABSq3Nid6SJXXFQYuUgOSPptKk3kTnpw=
Subject key identifier:   4A:69:41:2C:F0:B1:53:E0:D8:47:AE:90:C3:75:FE:F5:0F:6D:67:E4
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       018CC94E43CEC74BD177E6877070396779DA
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/SmlBLPCxU-DYR66Qw3X-9Q9tZ-Q.roa
Signing time:             Tue 02 Jan 2024 08:33:18 +0000
ROA not before:           Tue 02 Jan 2024 08:33:18 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     216157
IP address blocks:        45.134.36.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 28 Mar 2024 20:50:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c9:4e:43:ce:c7:4b:d1:77:e6:87:70:70:39:67:79:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Jan  2 08:33:18 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4a69412cf0b153e0d847ae90c375fef50f6d67e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:62:3e:ed:e7:42:0b:c5:d7:0e:1b:9f:a1:63:
                    bb:21:fa:e1:38:96:74:bf:57:be:b2:e9:29:05:62:
                    56:da:fc:47:16:83:c8:1e:66:fe:04:dc:8a:39:ac:
                    ed:b8:ab:0e:7c:63:98:0b:f8:0f:86:3c:ab:63:d4:
                    e6:fe:4f:39:85:b4:8f:e0:bc:d2:4e:f2:c2:ae:82:
                    5e:66:7c:b9:01:ff:49:37:72:57:1e:9c:e3:d1:29:
                    01:af:f6:aa:cd:7b:5c:42:1d:1d:02:69:8c:64:6f:
                    8e:95:ae:51:ed:98:1e:2a:14:fd:26:41:ee:fa:82:
                    3b:c7:1e:5c:fa:36:bf:8b:7c:14:06:ef:91:6c:b0:
                    25:04:5b:b1:84:21:4b:8b:ae:c5:db:75:cd:33:e7:
                    24:50:87:c0:8a:a6:b1:dd:d7:ab:6b:a2:a3:3e:cd:
                    4b:52:73:8e:e7:34:fe:ad:48:1c:b7:c8:d8:4e:82:
                    6d:50:04:7d:07:18:21:59:da:59:29:40:1d:46:91:
                    b0:37:cb:1d:e9:6e:ca:46:a0:d0:f4:be:37:13:2d:
                    98:b7:66:c3:59:21:08:c4:2f:69:80:c7:01:24:6d:
                    0e:3f:43:02:cb:29:a8:5a:ce:cf:cc:f2:3d:28:60:
                    b1:c2:de:cb:b9:58:a0:c4:3b:b3:5c:0f:91:b5:b9:
                    f0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:69:41:2C:F0:B1:53:E0:D8:47:AE:90:C3:75:FE:F5:0F:6D:67:E4
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/SmlBLPCxU-DYR66Qw3X-9Q9tZ-Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.134.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:42:5c:c3:c1:d9:38:9b:a6:db:c8:03:43:12:f0:16:2d:47:
         dc:61:e7:82:a0:89:a5:4f:31:ba:92:41:61:df:9c:77:ba:15:
         a8:a9:b9:50:b2:63:ff:35:27:55:3f:aa:aa:6f:1b:d6:ab:83:
         3c:db:54:44:6b:af:cc:47:38:9b:46:8f:d8:28:c8:c4:d9:46:
         21:b2:45:0a:17:93:31:b9:9f:1b:f1:86:9c:a6:40:14:17:5e:
         45:94:e8:25:ea:5c:01:fc:36:9e:5c:71:70:1a:6a:8f:50:14:
         b7:14:30:9a:3e:6b:d9:93:b5:c8:9b:13:0f:f7:42:99:c5:ee:
         d4:64:c8:bf:3e:87:94:36:2c:82:fe:4d:a3:3c:16:99:c2:23:
         9c:b3:e5:0b:93:8a:88:4f:a0:3a:56:da:d8:65:44:d7:da:33:
         c6:43:37:3c:58:28:46:fd:2c:45:5a:89:b3:96:27:f0:91:af:
         1b:aa:ec:72:1d:b3:be:f4:12:6e:12:34:fc:ce:c3:e2:5d:4b:
         9c:c5:27:e5:1d:94:a8:d6:49:32:14:48:01:a6:3d:03:55:ef:
         be:64:89:6a:1b:ec:29:b6:35:33:95:b1:5f:ad:42:3e:de:e8:
         90:61:70:95:c2:de:53:b1:ae:17:91:ea:4b:28:21:64:20:4b:
         c3:90:70:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 22:13:26 2024 by rpki-client on console-ams.rpki-client.org