Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Ssoq5HjzzxZzQ_XIVLA-QMdlDLg.roa
File:                     Ssoq5HjzzxZzQ_XIVLA-QMdlDLg.roa (raw, json)
Hash identifier:          Olo7ff6v/uyCE0xmxyiCyKG2N3pLOTxDEHU3T0gxjXw=
Subject key identifier:   4A:CA:2A:E4:78:F3:CF:16:73:43:F5:C8:54:B0:3E:40:C7:65:0C:B8
Certificate issuer:       /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial:       018D9D8FC672017E411C22943C80A93D08E0
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Ssoq5HjzzxZzQ_XIVLA-QMdlDLg.roa
Signing time:             Mon 12 Feb 2024 13:44:21 +0000
ROA not before:           Mon 12 Feb 2024 13:44:21 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     36113
IP address blocks:        45.67.202.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 16 Feb 2024 09:46:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:9d:8f:c6:72:01:7e:41:1c:22:94:3c:80:a9:3d:08:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
        Validity
            Not Before: Feb 12 13:44:21 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4aca2ae478f3cf167343f5c854b03e40c7650cb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e7:c6:e8:55:84:78:58:ea:a8:a5:3a:3a:65:
                    4d:a9:e8:9b:f5:5c:85:d6:d8:91:87:c1:9b:53:70:
                    2b:0c:77:72:ec:6d:50:30:dd:47:92:e5:04:c9:45:
                    03:97:96:c5:42:26:49:74:10:97:4a:c9:35:60:4c:
                    68:e5:cf:42:60:ab:d3:cc:1f:bd:36:b1:b1:ae:54:
                    d2:ab:2f:a5:17:d7:aa:82:ba:09:d4:12:15:c5:ff:
                    71:21:80:ea:11:6a:c4:a6:58:e8:fc:a0:5e:f9:28:
                    e1:98:2d:f7:57:d4:e3:39:f7:aa:4b:e6:b7:b5:3c:
                    d7:e5:dd:50:3a:56:90:5b:b4:ab:ec:98:f9:de:17:
                    7b:d2:3e:55:45:ef:dc:71:68:65:b4:4c:3f:36:e0:
                    bd:f9:73:a0:02:b9:e4:9a:23:8a:a1:69:76:2c:ad:
                    3d:d3:89:6c:af:22:dd:cb:f5:16:d0:35:18:f3:15:
                    7a:25:fb:62:8a:ca:75:aa:80:9a:1a:10:df:72:cd:
                    a6:99:df:5f:a5:a4:56:a5:29:16:35:c8:6e:e3:1c:
                    a4:c7:68:63:2c:8b:d9:a1:ad:0d:40:5e:fc:71:10:
                    96:6e:fe:39:b6:62:80:7d:ec:85:43:30:96:cb:62:
                    7b:c3:cf:9f:6e:65:37:d1:0b:25:a7:f7:97:eb:1d:
                    ce:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CA:2A:E4:78:F3:CF:16:73:43:F5:C8:54:B0:3E:40:C7:65:0C:B8
            X509v3 Authority Key Identifier:
                keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Ssoq5HjzzxZzQ_XIVLA-QMdlDLg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.67.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:ec:f8:e6:12:06:57:3b:3f:41:93:31:30:ee:37:13:31:d9:
         97:89:36:6e:c2:36:6d:e3:1e:8f:03:6c:11:40:5b:8e:ec:74:
         6d:b4:d3:0e:65:32:cc:68:e4:f6:2f:84:cf:24:92:18:01:a9:
         65:dc:dc:d7:5c:f7:80:43:dc:de:de:ca:25:07:24:2b:4c:b6:
         83:76:04:64:60:9a:7e:8c:17:75:2e:0d:9a:5d:f5:7d:ad:a3:
         17:fb:02:28:fa:02:1a:be:ac:36:b5:a9:9e:ed:51:ac:eb:61:
         c9:fd:6d:e2:c8:60:2e:00:60:14:1a:88:17:a9:0b:14:1e:b3:
         d6:ef:ea:23:ab:ec:a9:e6:32:95:09:65:30:ab:b6:ca:bc:33:
         b8:59:ed:68:38:68:d3:71:56:ec:a2:b7:ca:cf:90:46:0c:d6:
         5c:7b:68:6c:ba:8d:4d:ad:33:7f:99:51:db:32:f4:d5:9d:b8:
         ba:a9:a5:8a:83:f8:db:61:9a:4d:31:5f:bd:3d:1f:28:95:c2:
         77:02:26:80:c6:f2:48:08:12:56:04:1d:b3:48:3f:6a:7d:11:
         0a:00:df:e3:c1:09:46:be:b3:b5:d2:fe:c7:b6:90:aa:79:0a:
         7a:09:ba:aa:db:c3:95:82:90:a6:27:11:19:d5:c5:e2:20:a1:
         ce:bc:1e:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY2dj8ZyAX5BHCKUPICpPQjgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw
MjNlYmUwHhcNMjQwMjEyMTM0NDIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWNhMmFlNDc4ZjNjZjE2NzM0M2Y1Yzg1NGIwM2U0MGM3NjUwY2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOfG6FWEeFjqqKU6OmVNqeib9VyF
1tiRh8GbU3ArDHdy7G1QMN1HkuUEyUUDl5bFQiZJdBCXSsk1YExo5c9CYKvTzB+9
NrGxrlTSqy+lF9eqgroJ1BIVxf9xIYDqEWrEpljo/KBe+SjhmC33V9TjOfeqS+a3
tTzX5d1QOlaQW7Sr7Jj53hd70j5VRe/ccWhltEw/NuC9+XOgArnkmiOKoWl2LK09
04lsryLdy/UW0DUY8xV6Jftiisp1qoCaGhDfcs2mmd9fpaRWpSkWNchu4xykx2hj
LIvZoa0NQF78cRCWbv45tmKAfeyFQzCWy2J7w8+fbmU30Qslp/eX6x3OUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFErKKuR4888Wc0P1yFSwPkDHZQy4MB8GA1UdIwQY
MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt
OTlhY2I5OWNlNzU0LzEvU3NvcTVIanp6eFp6UV9YSVZMQS1RTWRsRExnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0
LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUPKMA0G
CSqGSIb3DQEBCwUAA4IBAQAN7PjmEgZXOz9BkzEw7jcTMdmXiTZuwjZt4x6PA2wR
QFuO7HRttNMOZTLMaOT2L4TPJJIYAall3NzXXPeAQ9ze3solByQrTLaDdgRkYJp+
jBd1Lg2aXfV9raMX+wIo+gIavqw2tame7VGs62HJ/W3iyGAuAGAUGogXqQsUHrPW
7+ojq+yp5jKVCWUwq7bKvDO4We1oOGjTcVbsorfKz5BGDNZce2hsuo1NrTN/mVHb
MvTVnbi6qaWKg/jbYZpNMV+9PR8olcJ3AiaAxvJICBJWBB2zSD9qfREKAN/jwQlG
vrO10v7HtpCqeQp6Cbqq28OVgpCmJxEZ1cXiIKHOvB7q
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org