Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/hXEGsl5qQzAA1qUdQtNGBqiww10.roa
File:                     hXEGsl5qQzAA1qUdQtNGBqiww10.roa (raw, json)
Hash identifier:          VhmT0oyWxTqRPxA05l/SiDGCzCOgHGrb6X/m2cHTsoM=
Subject key identifier:   85:71:06:B2:5E:6A:43:30:00:D6:A5:1D:42:D3:46:06:A8:B0:C3:5D
Certificate issuer:       /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial:       018EC459F0B0DBE53902A1AD63B19160ED46
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/hXEGsl5qQzAA1qUdQtNGBqiww10.roa
Signing time:             Tue 09 Apr 2024 19:33:32 +0000
ROA not before:           Tue 09 Apr 2024 19:33:32 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     196695
IP address blocks:        45.147.3.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 22 May 2024 18:28:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:c4:59:f0:b0:db:e5:39:02:a1:ad:63:b1:91:60:ed:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
        Validity
            Not Before: Apr  9 19:33:32 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=857106b25e6a433000d6a51d42d34606a8b0c35d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:71:24:e3:1e:58:4e:50:40:9c:a2:7e:df:b0:
                    d6:c4:2d:64:67:1a:ba:7f:70:ba:1c:95:2f:93:05:
                    1e:45:d3:b0:46:43:91:31:0b:c0:f0:22:bc:ef:af:
                    f2:b4:3f:25:75:30:a2:89:93:21:10:44:f3:ac:06:
                    76:96:cf:2f:25:39:93:80:a6:c9:84:1d:44:1f:41:
                    fa:eb:4b:06:94:9e:06:4d:9d:9a:a2:fc:d9:6f:47:
                    b2:e7:e8:81:91:e6:4b:ea:50:98:35:6e:c7:5c:c4:
                    3e:8b:55:d2:57:d4:f0:c1:c7:06:c8:f8:e9:0a:68:
                    53:83:9e:63:e5:06:e2:38:1c:af:03:c6:7f:71:a2:
                    65:f5:01:c1:db:5c:f9:31:fc:e0:ed:f9:e2:ef:94:
                    0e:ae:bd:bf:ef:f8:24:ec:67:29:fe:42:ed:29:cf:
                    55:16:43:69:1d:47:83:01:ae:35:97:d8:72:4a:99:
                    9f:82:80:98:a2:ed:f7:73:b8:66:e8:e7:ce:1e:2d:
                    79:d4:ee:0e:51:a9:f0:fd:e7:25:01:0a:3e:49:46:
                    95:7f:a9:5d:8d:be:41:27:a5:bf:bd:8e:23:01:07:
                    23:54:d1:50:08:97:b7:76:2a:24:5e:9e:f5:7e:e6:
                    4e:58:2c:b4:5a:be:5c:ff:b9:e8:89:49:ee:2f:08:
                    c9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:71:06:B2:5E:6A:43:30:00:D6:A5:1D:42:D3:46:06:A8:B0:C3:5D
            X509v3 Authority Key Identifier:
                keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/hXEGsl5qQzAA1qUdQtNGBqiww10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.147.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:29:33:dc:6c:95:46:c1:30:dd:4d:e2:aa:2d:a0:c2:3a:4f:
         cc:c0:54:68:ab:76:f4:e6:51:32:21:0e:01:12:72:9c:3d:94:
         c6:de:9f:99:92:f8:76:8b:35:f6:df:eb:69:60:da:d1:b1:b4:
         e6:c9:a6:45:54:09:2b:b6:e8:7f:55:09:96:1e:36:b3:db:79:
         f8:16:76:8b:52:18:d2:4a:e0:d5:4e:2d:98:e0:82:ab:27:a5:
         ba:93:78:f3:68:19:4d:52:a0:cb:52:8c:4f:d4:35:e2:03:93:
         31:ec:73:74:cc:11:fc:d5:5f:e2:fd:10:af:43:0b:6e:72:e2:
         ab:00:9a:dd:ea:13:e4:69:62:46:88:3b:6b:69:17:fb:3a:88:
         bb:86:94:ba:4a:75:b1:d5:89:49:3c:ce:46:e3:81:1e:e5:3d:
         cb:c4:31:6a:6f:3b:41:42:2b:94:39:4d:2c:83:92:ed:1b:62:
         fc:fc:e7:c3:de:74:df:df:2b:e9:30:7e:a0:1b:70:bf:d0:fe:
         da:0b:6a:bc:46:9a:77:bc:d4:0c:ac:b8:c7:b3:a4:06:58:43:
         be:b3:04:09:89:1e:a8:25:7e:01:fb:52:0e:0c:f8:2b:0f:cd:
         63:e0:66:01:9d:50:74:c2:17:8a:d2:e6:92:1c:e4:a9:f2:fa:
         0e:fe:fc:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:04 2024 by rpki-client on console-ams.rpki-client.org