Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/LyHOjwIzncwtTt1YxfwdhR0iwQ0.roa
File:                     LyHOjwIzncwtTt1YxfwdhR0iwQ0.roa (raw, json)
Hash identifier:          XtZcSEkPC9OilvtSkPXu7WWClPnzyQUdxj7nXliplbA=
Subject key identifier:   2F:21:CE:8F:02:33:9D:CC:2D:4E:DD:58:C5:FC:1D:85:1D:22:C1:0D
Certificate issuer:       /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Certificate serial:       01856CB82343DCE6070A165592839ED67D05
Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/LyHOjwIzncwtTt1YxfwdhR0iwQ0.roa
Signing time:             Sun 01 Jan 2023 09:44:44 +0000
ROA not before:           Sun 01 Jan 2023 09:44:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208858
IP address blocks:        45.66.184.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:30:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:b8:23:43:dc:e6:07:0a:16:55:92:83:9e:d6:7d:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
        Validity
            Not Before: Jan  1 09:44:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2f21ce8f02339dcc2d4edd58c5fc1d851d22c10d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e8:ae:68:a3:49:da:ea:f0:e6:12:10:02:9c:
                    e6:73:c8:59:4d:e2:e4:13:23:aa:a0:d0:98:48:88:
                    8f:76:96:fe:b5:1c:cb:b3:fe:7b:2a:ad:36:c9:87:
                    c6:f7:71:c0:fe:7c:65:e9:55:bc:3c:ce:77:bc:a9:
                    da:f8:5b:81:95:bf:d3:c2:a4:18:c9:8d:25:f4:33:
                    da:14:23:9e:2a:18:9a:ea:da:2c:61:af:bc:97:80:
                    eb:e3:74:e5:7b:dd:41:1c:b0:51:54:d0:61:91:31:
                    2c:e3:12:20:bd:7b:17:20:ee:9c:9f:3e:9b:4e:40:
                    62:39:ce:88:76:0e:23:13:27:42:bd:d9:1d:2e:c8:
                    bd:6e:b2:d2:6c:6d:9b:b6:02:9a:34:51:54:61:3a:
                    f7:91:9b:dc:b7:f0:0d:55:3f:61:88:68:ab:aa:5a:
                    1a:81:09:a2:16:6c:7f:4d:14:7a:66:a9:81:ca:a7:
                    ec:3b:ad:87:bf:82:61:fd:76:63:46:56:3d:45:62:
                    0d:c2:ba:13:0a:bb:11:89:3b:0b:96:f4:0a:7e:c8:
                    7e:e1:b1:e8:c8:c5:29:12:fc:25:b2:d9:f5:ce:5e:
                    e5:94:dc:77:7f:50:75:b0:1f:ce:ee:e5:79:4b:f0:
                    20:cd:e6:c3:d6:95:f4:e3:c6:ad:c8:49:7a:b4:fe:
                    01:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:21:CE:8F:02:33:9D:CC:2D:4E:DD:58:C5:FC:1D:85:1D:22:C1:0D
            X509v3 Authority Key Identifier:
                keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/LyHOjwIzncwtTt1YxfwdhR0iwQ0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.66.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:67:ba:ba:f9:b7:10:d4:29:19:84:9f:09:8d:f8:75:ff:4f:
         0e:59:bb:54:8c:cb:b3:80:23:ee:85:dd:3d:6e:87:12:1c:13:
         47:3d:b2:8c:05:e0:d9:bf:64:3d:f0:86:b9:3e:ac:71:31:c1:
         35:7e:c7:2a:df:5b:3f:d7:85:91:3f:8d:29:0f:1c:a6:2b:72:
         54:9b:07:ad:75:8d:df:84:ce:24:e4:05:31:44:55:2b:ea:af:
         c9:1e:1a:e7:9a:ff:9b:75:ce:de:41:41:da:18:db:08:76:d9:
         8b:ec:ab:35:c8:de:fa:ae:10:70:86:6f:b2:13:26:5d:27:2b:
         e3:58:c2:84:3f:d6:a5:55:63:a6:e8:06:5a:c2:e4:8d:ed:25:
         5f:70:76:b4:f4:61:78:6a:d4:3c:81:21:89:9d:e9:13:c2:9f:
         a5:7c:2a:75:7d:90:d9:21:6c:64:98:92:44:46:dd:fb:b1:fe:
         ac:b2:b2:81:17:e6:a3:78:e2:1d:c0:a7:98:41:67:be:e9:62:
         36:4e:1b:7b:3c:73:76:e2:e7:94:a7:37:1e:b3:4d:14:ff:37:
         3a:ca:bf:28:6a:f5:6f:d5:95:1f:0d:01:57:58:19:bb:a7:9d:
         33:2e:51:c6:13:c9:c6:eb:f2:73:65:16:ce:0a:84:4e:7c:b7:
         6d:68:31:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:49 2024 by rpki-client on console-ams.rpki-client.org