Route Origin Authorization

$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/hmvCviqsnoOAjrp2IjBwV5VNLvI.roa
File:                     hmvCviqsnoOAjrp2IjBwV5VNLvI.roa (raw, json)
Hash identifier:          0j45XxcIw+FbO7zAj6jjnky91Lqhn/U9xJnb3FU4Vs4=
Subject key identifier:   86:6B:C2:BE:2A:AC:9E:83:80:8E:BA:76:22:30:70:57:95:4D:2E:F2
Certificate issuer:       /CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Certificate serial:       011094
Authority key identifier: CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
Subject info access:      rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/hmvCviqsnoOAjrp2IjBwV5VNLvI.roa
Signing time:             Sat 17 Jun 2023 00:00:37 +0000
ROA not before:           Sat 17 Jun 2023 00:00:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206238
IP address blocks:        45.138.228.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Thu 15 Feb 2024 17:03:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69780 (0x11094)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
        Validity
            Not Before: Jun 17 00:00:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=866BC2BE2AAC9E83808EBA7622307057954D2EF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f4:47:5d:d4:0c:0f:e0:cf:7b:a3:ef:4d:7c:
                    b7:f5:ec:3a:a2:a3:75:5d:3b:fb:5e:23:4a:5f:f2:
                    21:fd:b8:9b:32:41:c9:e9:91:01:7a:ee:12:40:f1:
                    f6:3c:35:4f:30:3a:96:39:40:a1:ea:22:78:b6:e0:
                    a7:e9:25:c7:24:37:ed:ba:6e:c7:fa:c1:74:f8:f6:
                    bf:eb:8c:83:59:91:b9:43:b7:44:7e:36:84:fd:5f:
                    49:ab:be:42:07:7e:2d:18:9e:a2:d6:d8:d6:b4:ee:
                    8f:e7:a8:ce:61:a2:28:95:bc:1f:c5:55:32:28:ad:
                    0d:00:36:9a:be:de:dc:d2:3e:e2:87:77:bb:66:1b:
                    52:bc:ee:76:8c:c5:45:f0:0e:68:87:08:b0:1e:78:
                    f9:4f:f5:12:4e:db:fc:09:54:d6:76:85:2c:50:a3:
                    1d:0d:c1:df:82:3a:32:9f:c7:e4:b5:46:91:88:c5:
                    83:bb:85:00:80:93:8e:b8:72:5e:e6:f6:03:5c:63:
                    37:50:97:24:0b:e1:99:e2:32:74:88:c0:23:76:05:
                    24:6e:08:22:c7:bd:24:30:51:a6:76:ea:c0:6f:c5:
                    b0:94:5c:05:95:b0:79:25:eb:53:15:5b:e8:b3:1b:
                    d6:43:4d:81:c1:04:66:97:94:07:4a:fe:e5:e2:c6:
                    3a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:6B:C2:BE:2A:AC:9E:83:80:8E:BA:76:22:30:70:57:95:4D:2E:F2
            X509v3 Authority Key Identifier:
                keyid:CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/hmvCviqsnoOAjrp2IjBwV5VNLvI.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.138.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:85:a4:f4:54:69:8c:c4:2b:79:c7:45:b8:af:a8:f7:55:e2:
         54:d4:47:9f:5c:97:f5:7c:be:52:fc:02:ad:d1:a6:2c:d5:36:
         57:5a:c8:b3:f3:38:52:9d:61:be:0a:5b:a2:5d:0a:91:a4:51:
         a2:95:a9:f3:d8:1c:90:0c:a9:94:4b:13:ef:2a:47:8b:e9:82:
         2e:6f:30:25:a4:c6:c1:3f:12:5f:69:9d:c3:b6:92:f7:38:c1:
         b4:59:1d:ec:d2:85:85:a1:2c:7d:dc:61:91:24:51:92:5d:51:
         b2:03:4b:72:21:43:95:f8:80:a4:00:3b:5f:73:50:59:f2:bb:
         53:88:ce:72:06:ed:fb:74:31:c0:5a:02:3b:c1:43:5b:64:02:
         4e:eb:94:d8:6f:31:3a:71:23:47:00:07:79:a4:b6:35:e5:62:
         90:c3:ef:7a:0d:5f:87:5a:f3:80:17:3d:7e:0f:58:a6:9c:9d:
         83:b9:e2:0f:7d:3b:6e:6f:db:98:8b:df:95:79:6b:84:dd:1c:
         02:97:de:b2:66:6d:36:58:95:78:27:e9:03:e5:4b:b6:75:93:
         97:13:83:32:41:b7:9f:a6:23:a6:61:37:ab:c6:e6:68:4b:a6:
         fe:36:e1:ae:35:83:0b:06:97:44:e5:ae:b9:17:87:2d:39:32:
         cb:8d:d5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 15 20:37:04 2024 by rpki-client on console-ams.rpki-client.org