Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PWdU-1jgKRqLXB99FF02pd1W7Gs.roa
File:                     PWdU-1jgKRqLXB99FF02pd1W7Gs.roa (raw, json)
Hash identifier:          2dDdpW2xiekLweHnE1drUgHS6s3cROz1x3KE6JAAMxs=
Subject key identifier:   3D:67:54:FB:58:E0:29:1A:8B:5C:1F:7D:14:5D:36:A5:DD:56:EC:6B
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       0190833E079BF12DD4A68B4A2F94F792F344
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PWdU-1jgKRqLXB99FF02pd1W7Gs.roa
Signing time:             Fri 05 Jul 2024 14:13:18 +0000
ROA not before:           Fri 05 Jul 2024 14:13:18 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     61135
IP address blocks:        45.151.90.0/24 maxlen: 24
                          45.151.91.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 Jul 2024 07:22:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:83:3e:07:9b:f1:2d:d4:a6:8b:4a:2f:94:f7:92:f3:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Jul  5 14:13:18 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=3d6754fb58e0291a8b5c1f7d145d36a5dd56ec6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:cf:4e:bd:21:0b:ea:ce:15:52:e9:20:04:af:
                    e1:d7:71:b3:0d:34:02:84:81:ea:e5:bd:85:82:94:
                    4f:07:cd:f3:2f:7c:79:c7:b0:3b:a1:c3:ea:28:3b:
                    51:c4:b2:ad:37:7b:49:66:4e:17:0b:ab:13:e0:fd:
                    dc:de:6b:5d:50:86:ef:10:14:ef:29:01:6d:e4:72:
                    e3:b0:e7:3e:e6:d6:4d:d3:0b:df:6f:72:01:45:e1:
                    5d:97:18:00:65:3e:8e:55:e9:a3:d5:5d:c4:75:77:
                    15:05:dc:4f:b5:ef:a6:fe:da:69:d1:b9:a3:7b:ea:
                    8f:d7:11:28:27:5b:b2:6a:1b:a3:66:3a:ef:4d:ee:
                    2e:ff:45:75:13:42:ed:95:dd:1a:9c:0d:4b:54:18:
                    22:3b:01:e1:24:a7:a8:d2:8f:20:a2:27:62:12:95:
                    91:f7:96:38:d6:49:4a:e9:f4:65:03:a9:42:4d:e0:
                    c8:5e:87:60:42:b7:39:31:e3:15:5d:c3:42:0a:15:
                    89:b7:2f:11:0e:47:fb:98:73:f5:d3:1e:06:d8:e9:
                    69:dc:61:ce:42:d3:7b:ee:4f:5e:4e:76:29:bc:db:
                    3c:54:51:34:63:08:ae:c2:4e:03:88:d3:74:59:0a:
                    dc:e4:de:8a:4a:3f:aa:e3:62:7a:fc:e9:a2:bf:80:
                    dd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:67:54:FB:58:E0:29:1A:8B:5C:1F:7D:14:5D:36:A5:DD:56:EC:6B
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PWdU-1jgKRqLXB99FF02pd1W7Gs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.151.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:db:ac:dd:da:27:38:a7:56:4d:4b:67:a4:36:67:e8:c5:d0:
         b2:a4:61:61:df:6c:1f:98:56:fd:42:45:ca:4a:f8:10:8e:2b:
         d5:a1:4b:d5:e8:50:a8:5b:e3:8a:aa:e0:12:ee:7c:7c:f9:62:
         5e:62:d2:a3:38:25:2b:30:0e:7b:fc:dd:54:e5:9d:25:f3:ee:
         ab:fa:cf:6a:0b:7d:27:25:57:68:c9:fd:15:10:fb:ba:9f:e6:
         2e:ee:64:16:52:57:75:8f:72:13:e9:85:ee:c6:a0:f6:e0:40:
         7c:62:1e:40:8a:83:d2:a9:e6:54:b7:68:28:ee:68:9a:e7:5e:
         59:0c:30:4c:92:65:82:e8:5d:70:57:da:2e:92:af:47:a0:0e:
         d2:27:0c:ce:f6:93:8c:bc:21:4f:f6:83:94:48:ea:ff:3d:12:
         92:5d:42:f0:33:a1:c3:8c:a6:1f:ec:a0:5e:6d:f5:1a:86:02:
         a4:bc:d5:28:3f:32:6f:85:5b:11:ac:6d:52:e5:8f:0a:51:59:
         b5:c5:39:2a:06:8f:9e:9e:9b:2c:37:26:41:e6:86:e7:66:13:
         fb:ad:b8:54:c4:17:dc:0f:96:36:3e:e6:dd:94:95:9d:03:9e:
         bd:d0:b2:6c:00:bb:33:64:48:06:dc:c1:17:fc:b2:0b:4e:b8:
         f7:fa:ba:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 08:59:44 2024 by rpki-client on console-ams.rpki-client.org