Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/UIfKF6uTUIS55sJpoGwqTYsje84.roa
File:                     UIfKF6uTUIS55sJpoGwqTYsje84.roa (raw, json)
Hash identifier:          3p/vZcD+vgbGS1oUBjVyXngpV61/Fce/TA7qnLWG9G0=
Subject key identifier:   50:87:CA:17:AB:93:50:84:B9:E6:C2:69:A0:6C:2A:4D:8B:23:7B:CE
Certificate issuer:       /CN=48595d4a54ed644213c446195e36f78ec1a28399
Certificate serial:       018570D51B603D43791AC47F9FEC3468088B
Authority key identifier: 48:59:5D:4A:54:ED:64:42:13:C4:46:19:5E:36:F7:8E:C1:A2:83:99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/UIfKF6uTUIS55sJpoGwqTYsje84.roa
Signing time:             Mon 02 Jan 2023 04:54:52 +0000
ROA not before:           Mon 02 Jan 2023 04:54:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204189
IP address blocks:        45.83.100.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:33:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:d5:1b:60:3d:43:79:1a:c4:7f:9f:ec:34:68:08:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48595d4a54ed644213c446195e36f78ec1a28399
        Validity
            Not Before: Jan  2 04:54:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5087ca17ab935084b9e6c269a06c2a4d8b237bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:32:2c:a0:25:e0:bd:fe:46:2f:d6:ba:ab:f3:
                    3d:02:3e:98:e8:d9:35:ff:cc:bc:5a:3e:23:fb:99:
                    62:c2:b5:bb:f6:71:1e:89:5d:b3:ce:73:25:61:23:
                    aa:e9:12:1d:85:ed:b9:85:b6:8c:7d:d3:c8:9d:a6:
                    dc:6f:da:76:d7:e7:77:49:06:f1:60:2a:3a:37:86:
                    30:04:e9:db:8c:af:5b:0e:0a:54:dd:bb:ce:f5:f7:
                    2e:0c:2a:f4:ff:b0:3b:bb:0f:d6:32:a6:db:f4:31:
                    5a:2e:5f:e4:b8:32:b7:6a:0d:47:a3:25:e0:47:39:
                    4c:88:ab:de:67:7f:4a:26:44:f1:1c:8d:ce:cc:00:
                    be:7e:80:4a:de:b3:8e:c0:e5:38:77:11:be:4e:a2:
                    dd:dd:7e:b0:fd:8d:ae:f7:f9:b6:73:99:d6:8f:45:
                    27:97:e6:6f:cc:1e:a7:a6:2d:a7:9d:8c:e2:1e:07:
                    69:49:3c:eb:6f:d6:49:40:44:ef:eb:99:9a:5a:1f:
                    e5:30:c8:37:4e:eb:13:65:73:3d:c2:4e:4c:ae:68:
                    60:97:73:a6:ea:a0:c1:d1:86:c2:8b:eb:b3:9b:91:
                    21:55:de:9e:bd:e4:3d:e6:b8:85:f5:12:c8:e2:81:
                    b4:01:8d:0d:8e:bf:db:d6:6e:9a:da:45:88:69:6b:
                    17:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:87:CA:17:AB:93:50:84:B9:E6:C2:69:A0:6C:2A:4D:8B:23:7B:CE
            X509v3 Authority Key Identifier:
                keyid:48:59:5D:4A:54:ED:64:42:13:C4:46:19:5E:36:F7:8E:C1:A2:83:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFldSlTtZEITxEYZXjb3jsGig5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/UIfKF6uTUIS55sJpoGwqTYsje84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6e6f51-4e13-465e-b4d6-2e8dcdd51651/1/SFldSlTtZEITxEYZXjb3jsGig5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.83.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:9f:0e:de:0a:52:e6:aa:ac:0e:b0:df:89:49:e7:d0:68:63:
         6f:42:e9:4d:f6:ab:2d:9c:2b:96:75:1c:be:c0:24:c3:87:ef:
         9f:f9:2e:dd:b7:69:d4:69:95:e6:b7:f3:91:13:0e:00:25:e9:
         08:7d:18:fb:9f:59:1c:f7:22:46:71:f2:43:f4:8d:d8:de:63:
         dd:b4:61:8b:3e:03:d6:ff:6a:64:e9:3c:14:ff:49:50:9e:c6:
         62:6c:f8:ac:c3:dd:a0:68:72:05:dd:0f:52:e3:78:c9:34:41:
         4e:f6:26:68:85:ef:67:89:17:4e:92:8f:97:cc:b6:e0:e8:b5:
         49:e3:1a:5a:14:a9:80:90:e4:28:9a:ca:e9:c5:e7:f4:c1:cb:
         2f:c9:da:1d:13:0f:69:9e:60:d6:5c:97:2e:e5:52:44:17:03:
         12:85:99:b8:fd:24:47:fc:ce:77:f8:85:43:09:f9:93:ca:81:
         18:06:60:56:9b:31:86:4d:ab:21:f8:c1:76:30:6f:f9:e9:29:
         e5:12:fa:94:6b:4e:50:ed:df:88:15:ad:9f:8f:ef:a9:41:53:
         c0:23:16:84:ff:43:50:0d:85:6c:e2:82:9c:02:5e:c5:44:cf:
         bc:14:20:6c:a6:f7:c8:f5:3c:f3:dc:a3:d2:14:1a:de:8f:15:
         c7:85:a3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:17 2024 by rpki-client on console-fra.rpki-client.org