Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/fP_rJm_VnYBfSqGKaz2feOwXCEY.roa
File:                     fP_rJm_VnYBfSqGKaz2feOwXCEY.roa (raw, json)
Hash identifier:          FRGn1D6jqMDCvLu80FNoOn7pyKQj9eiUily6ffn2mCQ=
Subject key identifier:   7C:FF:EB:26:6F:D5:9D:80:5F:4A:A1:8A:6B:3D:9F:78:EC:17:08:46
Certificate issuer:       /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial:       01869ED9F44D8511D0999F0FA89E606B17B0
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/fP_rJm_VnYBfSqGKaz2feOwXCEY.roa
Signing time:             Wed 01 Mar 2023 20:25:29 +0000
ROA not before:           Wed 01 Mar 2023 20:25:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34582
IP address blocks:        45.158.47.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:9e:d9:f4:4d:85:11:d0:99:9f:0f:a8:9e:60:6b:17:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
        Validity
            Not Before: Mar  1 20:25:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7cffeb266fd59d805f4aa18a6b3d9f78ec170846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:40:90:f0:b3:44:45:50:49:76:bb:70:1c:d2:
                    6a:5d:ae:72:9c:ad:63:d3:e7:9a:97:2f:ae:99:2f:
                    39:b6:79:79:cd:fa:9b:0b:e1:9c:45:df:df:92:9a:
                    4a:56:e6:c0:29:3b:81:27:40:06:0f:92:39:88:de:
                    4c:d2:00:bf:06:f5:e0:b3:e4:67:e4:60:d9:d4:c9:
                    76:4a:51:45:92:2e:a3:34:c6:36:ec:82:2f:d8:ba:
                    77:a8:27:3c:9a:ff:d9:a9:b3:f8:4c:48:b8:ac:a5:
                    15:76:db:a4:53:f9:b2:b0:15:9c:ec:9a:df:cb:3d:
                    ca:c7:9e:c4:1d:dc:ee:1b:e7:77:01:26:03:63:10:
                    05:2a:0f:8d:0e:bb:70:48:0c:03:e0:44:fe:ee:59:
                    58:b9:11:fa:2c:7c:4e:4f:75:21:c5:94:11:77:af:
                    0b:b2:8c:43:52:23:6e:15:86:50:e0:f6:c2:70:d1:
                    ef:15:94:ef:28:e5:02:c9:cc:33:12:fd:ee:91:42:
                    b9:fb:38:b0:96:b6:8a:be:fe:4c:2c:0c:4c:71:fe:
                    5a:c0:80:58:ae:69:1e:fb:70:67:d2:2e:e6:2d:27:
                    15:2b:89:da:b4:55:88:e2:79:9d:29:d4:e5:16:d7:
                    72:e5:eb:60:98:dd:6d:9f:9a:c3:e2:d8:f9:3d:1a:
                    b8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:FF:EB:26:6F:D5:9D:80:5F:4A:A1:8A:6B:3D:9F:78:EC:17:08:46
            X509v3 Authority Key Identifier:
                keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/fP_rJm_VnYBfSqGKaz2feOwXCEY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.158.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:ee:60:73:e5:c0:ab:7f:29:0d:25:70:d6:49:87:2e:37:c8:
         f4:a6:61:28:ab:6e:5d:f3:41:5f:0b:70:51:c2:76:02:74:cc:
         2a:12:95:e9:92:9d:c4:fd:4c:04:7d:ee:b1:70:e6:17:2c:36:
         50:50:ad:36:b2:93:65:91:f6:55:df:9c:0a:55:7c:3b:fb:52:
         d3:89:1b:2b:b5:8b:aa:19:43:85:4b:e0:b3:82:f8:67:78:ef:
         41:66:23:d5:bb:c9:25:a9:c8:36:e7:96:92:ad:f4:c1:b7:18:
         43:41:5e:ac:66:b6:02:c3:5a:01:d9:07:5c:ab:c4:1c:15:9a:
         6f:a8:8a:9a:2c:0b:6c:f9:dd:77:47:95:28:51:76:02:47:c2:
         9d:63:0f:6b:4d:6b:12:3b:8c:4e:44:97:ca:35:e3:94:70:f2:
         f4:eb:0f:c6:80:cf:41:72:05:ea:4f:4f:bb:6c:c9:c2:66:5c:
         fb:22:e4:a4:99:b7:ab:43:53:6f:2f:0a:dd:76:de:88:3f:b5:
         29:21:a1:ea:73:de:03:27:99:71:6e:04:f9:c3:5d:77:23:fc:
         3b:69:2f:a2:e3:d6:ca:f5:b7:bc:03:b3:e0:06:a3:e7:49:5b:
         df:75:d5:79:e2:a1:5e:31:9c:c5:49:94:65:c7:d3:eb:01:08:
         53:fd:1c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:51 2024 by rpki-client on console-fra.rpki-client.org