Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/48y5UlGOS0_rdWscsGuo29FUiIo.roa
File:                     48y5UlGOS0_rdWscsGuo29FUiIo.roa (raw, json)
Hash identifier:          2UQRlUvpGpBgq/8y4tlOj1zS0qxuFCumvWiRrUIAxH4=
Subject key identifier:   E3:CC:B9:52:51:8E:4B:4F:EB:75:6B:1C:B0:6B:A8:DB:D1:54:88:8A
Certificate issuer:       /CN=8e3f1663996be1707611fdce1ddea8920dd398a3
Certificate serial:       018B49591D1013C6C0F6C71CC8069E0F07FF
Authority key identifier: 8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/48y5UlGOS0_rdWscsGuo29FUiIo.roa
Signing time:             Thu 19 Oct 2023 19:10:58 +0000
ROA not before:           Thu 19 Oct 2023 19:10:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     64286
IP address blocks:        45.139.210.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 10:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:49:59:1d:10:13:c6:c0:f6:c7:1c:c8:06:9e:0f:07:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e3f1663996be1707611fdce1ddea8920dd398a3
        Validity
            Not Before: Oct 19 19:10:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e3ccb952518e4b4feb756b1cb06ba8dbd154888a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:af:2b:4e:5a:61:e5:60:a2:d6:01:55:a8:08:
                    73:b4:31:42:38:16:e0:fb:e4:f4:0f:9e:3e:9f:22:
                    b3:ee:e1:89:54:fc:e7:13:f8:81:36:a2:a4:be:c1:
                    f5:f0:23:a1:ba:d1:d5:24:29:3f:2a:e1:23:91:40:
                    db:eb:4b:90:1b:24:63:4c:49:06:4a:e4:a1:ca:c5:
                    a2:c6:32:32:ed:58:89:01:07:10:8d:9e:71:fc:bc:
                    78:97:fa:c0:e1:ad:ca:87:bd:c6:da:f2:a6:eb:d1:
                    41:e9:0a:f6:6d:d9:08:67:06:a4:7a:3d:0d:58:ab:
                    ef:40:d7:36:3c:eb:a4:60:08:3e:36:32:79:96:08:
                    b0:d2:2c:b0:32:fa:20:dc:08:49:88:81:09:d6:f3:
                    a0:e2:54:4a:b6:d5:72:c3:6b:a5:22:d9:0d:ea:cc:
                    8b:0b:81:26:a7:c8:e6:9f:d4:62:88:c4:a7:fb:6a:
                    6c:ab:2e:c1:47:83:31:8e:af:d4:dd:03:e8:0e:27:
                    4c:a8:a1:42:36:0d:25:ad:14:c9:1c:4c:85:1d:f3:
                    6d:fe:1f:bb:0c:63:28:78:66:e0:5f:78:3a:7a:94:
                    a7:42:22:fb:e3:69:0e:38:dc:e6:8a:eb:da:30:ee:
                    58:9e:98:2b:ff:59:4c:5f:a4:72:cd:88:f3:a6:c3:
                    93:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CC:B9:52:51:8E:4B:4F:EB:75:6B:1C:B0:6B:A8:DB:D1:54:88:8A
            X509v3 Authority Key Identifier:
                keyid:8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/48y5UlGOS0_rdWscsGuo29FUiIo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.139.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:5b:8c:2c:55:a4:28:cc:de:c3:e9:c6:ac:2b:7f:a6:b9:54:
         16:a7:d2:3f:7a:42:e1:3a:24:e0:a7:8a:74:49:0d:94:29:ae:
         9c:6d:f0:7c:de:28:8b:37:fb:81:f7:97:90:f6:1d:95:75:19:
         ac:ce:2b:9b:d2:52:38:42:58:af:59:39:c6:de:10:30:ba:4c:
         a9:a7:6e:b8:41:5d:aa:31:9c:4f:0f:1f:5e:15:d0:34:ac:82:
         1c:94:6e:4d:0d:cd:48:7a:aa:7e:8c:a9:78:d6:ca:88:40:e8:
         79:49:78:a8:38:75:51:d0:b9:15:a7:a9:1e:ab:21:15:54:61:
         2f:ce:f1:df:1f:ec:6e:a8:78:67:b2:5a:9c:63:b2:04:7d:be:
         7b:31:f6:69:08:20:aa:f7:82:3a:44:12:4b:a2:f4:2b:94:1e:
         b0:ed:60:84:27:0a:4c:18:86:f3:3c:8a:2c:40:b4:c0:04:cb:
         7f:39:ca:63:1f:ab:54:1a:b7:7b:74:ff:52:f2:01:75:7a:1a:
         3f:c1:81:82:3f:c4:aa:c5:5a:a9:6b:cc:8d:1d:9b:3c:51:29:
         8c:50:15:de:1e:e4:38:92:d3:bc:44:11:ad:d2:f2:b0:fa:35:
         96:44:9e:34:58:f0:b4:b1:54:fa:14:a9:de:a8:a1:2d:25:74:
         2d:fe:6c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:15 2024 by rpki-client on console-fra.rpki-client.org