Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/b_hg582cXiAT0crye6ud66KunNo.roa
File:                     b_hg582cXiAT0crye6ud66KunNo.roa (raw, json)
Hash identifier:          qr4IcZWLdFZczrtoGyinA/9bD3bBC1/lQxyxSavmWdc=
Subject key identifier:   6F:F8:60:E7:CD:9C:5E:20:13:D1:CA:F2:7B:AB:9D:EB:A2:AE:9C:DA
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       0187280F313A6702612D8D0D4F1277DC898F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/b_hg582cXiAT0crye6ud66KunNo.roa
Signing time:             Tue 28 Mar 2023 11:51:36 +0000
ROA not before:           Tue 28 Mar 2023 11:51:36 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209737
IP address blocks:        45.84.90.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 24 Apr 2023 16:49:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:28:0f:31:3a:67:02:61:2d:8d:0d:4f:12:77:dc:89:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Mar 28 11:51:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6ff860e7cd9c5e2013d1caf27bab9deba2ae9cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f3:7f:12:f2:2b:c0:9f:bd:86:42:21:69:03:
                    81:5d:1f:7e:90:a0:ab:88:8d:41:bf:0b:22:71:d0:
                    1b:cb:b4:e2:c6:df:81:e4:d4:8a:63:5c:aa:0d:f7:
                    27:90:40:68:b8:08:d6:04:44:18:01:7a:b2:a0:82:
                    af:61:17:91:c0:00:6e:8f:f7:92:fd:5a:c7:fd:c6:
                    fb:1f:bc:41:43:7f:d0:37:94:24:57:b5:f9:23:54:
                    a4:82:8a:42:98:a1:30:86:37:fb:cf:7c:b6:fa:e2:
                    01:7c:e1:3f:86:83:bf:8d:88:c2:3e:bd:48:12:c3:
                    56:ca:c1:bc:2c:1d:1d:17:b5:58:45:59:9e:7b:f3:
                    4b:85:57:26:c6:b5:6a:c9:5c:1b:a5:c9:95:6b:26:
                    ec:ef:50:e7:5e:85:ed:c8:48:2b:e0:df:58:d2:1f:
                    47:c0:03:b8:aa:90:3c:87:11:f4:85:d0:44:97:3f:
                    52:74:b1:a5:95:6c:eb:b3:a9:b0:99:7c:4f:ea:ec:
                    cf:92:98:a2:b2:86:0b:3a:70:8b:b4:ae:d0:a5:e0:
                    aa:f6:54:c7:6c:23:2b:cf:d3:16:6f:27:8b:7f:c0:
                    8c:3a:df:c3:74:30:cb:7f:30:cc:88:2e:09:28:58:
                    29:14:58:9d:fc:1a:6e:61:1d:fc:61:10:d7:d1:5d:
                    1b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:F8:60:E7:CD:9C:5E:20:13:D1:CA:F2:7B:AB:9D:EB:A2:AE:9C:DA
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/b_hg582cXiAT0crye6ud66KunNo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.84.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:e9:b1:00:e4:bc:e5:ae:9c:04:40:47:fc:62:37:1b:07:0c:
         a6:bd:5d:25:04:da:97:ab:8a:a0:69:9f:8f:69:3e:74:87:fb:
         e3:94:2e:5a:78:a8:89:7f:c0:af:4d:c4:8b:3a:ec:0e:20:89:
         d0:f4:9e:71:23:5f:6b:b3:a8:e8:c8:2d:d0:a3:5e:a3:f6:f4:
         03:54:1c:b4:94:e0:36:8b:ad:bf:4f:99:26:51:22:01:93:53:
         93:cf:05:a0:6a:cb:f4:25:01:3e:bd:d6:17:04:3b:3e:ed:ef:
         47:df:61:89:0a:28:f2:5b:fe:f2:80:98:44:f7:37:83:4a:12:
         18:81:40:80:64:57:f7:c8:16:59:16:72:27:c2:e7:7f:0d:23:
         df:89:4b:f7:65:4e:49:93:12:3a:42:66:32:14:74:a7:a6:2c:
         83:7b:08:6f:69:c8:25:73:c5:83:16:6a:c7:02:0b:5e:ba:fb:
         46:ad:02:5b:1b:a5:40:06:ba:e1:57:d8:23:d9:a7:0d:3d:82:
         52:3f:3e:71:1c:fd:55:9a:ad:25:b8:35:8b:15:b2:79:6f:c4:
         9f:67:2c:84:db:ba:67:59:f1:5b:35:d0:0d:80:04:ec:3e:ca:
         6c:74:7e:03:47:0a:38:97:e2:c7:c1:09:5e:fe:c5:ff:4c:20:
         15:8a:b7:2a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYcoDzE6ZwJhLY0NTxJ33ImPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwMzI4MTE1MTM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmY4NjBlN2NkOWM1ZTIwMTNkMWNhZjI3YmFiOWRlYmEyYWU5Y2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufN/EvIrwJ+9hkIhaQOBXR9+kKCr
iI1BvwsicdAby7Tixt+B5NSKY1yqDfcnkEBouAjWBEQYAXqyoIKvYReRwABuj/eS
/VrH/cb7H7xBQ3/QN5QkV7X5I1SkgopCmKEwhjf7z3y2+uIBfOE/hoO/jYjCPr1I
EsNWysG8LB0dF7VYRVmee/NLhVcmxrVqyVwbpcmVaybs71DnXoXtyEgr4N9Y0h9H
wAO4qpA8hxH0hdBElz9SdLGllWzrs6mwmXxP6uzPkpiisoYLOnCLtK7QpeCq9lTH
bCMrz9MWbyeLf8CMOt/DdDDLfzDMiC4JKFgpFFid/BpuYR38YRDX0V0bPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG/4YOfNnF4gE9HK8nurneuirpzaMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvYl9oZzU4MmNYaUFUMGNyeWU2dWQ2Nkt1bk5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVRaMA0G
CSqGSIb3DQEBCwUAA4IBAQBN6bEA5LzlrpwEQEf8YjcbBwymvV0lBNqXq4qgaZ+P
aT50h/vjlC5aeKiJf8CvTcSLOuwOIInQ9J5xI19rs6joyC3Qo16j9vQDVBy0lOA2
i62/T5kmUSIBk1OTzwWgasv0JQE+vdYXBDs+7e9H32GJCijyW/7ygJhE9zeDShIY
gUCAZFf3yBZZFnInwud/DSPfiUv3ZU5JkxI6QmYyFHSnpiyDewhvacglc8WDFmrH
AgteuvtGrQJbG6VABrrhV9gj2acNPYJSPz5xHP1Vmq0luDWLFbJ5b8SfZyyE27pn
WfFbNdANgATsPspsdH4DRwo4l+LHwQle/sX/TCAVircq
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:38 2024 by rpki-client on console-ams.rpki-client.org