Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gMMdvdLVcSTUaYJS29HHUAjDvzA.roa
File:                     gMMdvdLVcSTUaYJS29HHUAjDvzA.roa (raw, json)
Hash identifier:          YkMdT/gGqlIdIV93WUjpWNQzXhlCQSb5VA4g1bhVNOc=
Subject key identifier:   80:C3:1D:BD:D2:D5:71:24:D4:69:82:52:DB:D1:C7:50:08:C3:BF:30
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       018FBA0815D39DA10E4DD77DF0799BCF4F4D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gMMdvdLVcSTUaYJS29HHUAjDvzA.roa
Signing time:             Mon 27 May 2024 12:30:43 +0000
ROA not before:           Mon 27 May 2024 12:30:43 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     216178
IP address blocks:        45.8.93.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 28 May 2024 10:30:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:ba:08:15:d3:9d:a1:0e:4d:d7:7d:f0:79:9b:cf:4f:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: May 27 12:30:43 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=80c31dbdd2d57124d4698252dbd1c75008c3bf30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8f:0e:79:e3:e8:5e:ab:35:a7:99:a7:b0:c9:
                    2d:f4:51:b8:1a:d6:9d:2d:54:a1:b9:80:6b:ab:88:
                    2c:89:9d:ad:d2:0c:70:bb:8c:00:23:1c:30:cf:0b:
                    fe:7f:3f:11:ea:8c:ad:1e:a5:a5:ca:be:df:e2:77:
                    ac:a5:53:3e:97:3d:fe:33:2d:ee:c8:65:98:d0:fe:
                    50:cb:cb:55:3b:0a:6e:34:0a:fc:d6:81:7f:7b:6a:
                    20:7a:0a:74:32:10:fe:d9:f7:4d:89:ed:82:3b:dc:
                    28:86:90:45:e8:1b:04:ff:a9:cd:9b:d0:9c:30:d3:
                    73:41:eb:ff:82:14:6c:ac:f6:59:ad:90:f1:73:21:
                    0c:cd:48:92:28:59:ed:a2:87:5b:e2:d1:6a:9f:a2:
                    f6:fd:90:6a:6a:86:74:98:52:a5:51:39:0f:30:c6:
                    16:94:32:db:57:11:6a:4a:f7:c6:d6:60:27:df:6d:
                    a8:5d:35:64:67:f5:f9:a2:b6:a9:a3:0b:e6:ef:0d:
                    66:ec:0d:ef:7d:18:10:37:09:40:51:f2:d4:9c:00:
                    44:d6:85:0c:ae:fe:fa:c1:6c:6c:b8:00:82:19:89:
                    67:28:bc:45:58:aa:35:67:ea:cc:87:5d:ea:63:f8:
                    b9:84:2d:a3:c4:fa:8f:75:4a:d0:ce:ab:be:f9:20:
                    a6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C3:1D:BD:D2:D5:71:24:D4:69:82:52:DB:D1:C7:50:08:C3:BF:30
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gMMdvdLVcSTUaYJS29HHUAjDvzA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:c8:d6:46:c3:5a:31:62:c2:16:3e:c5:89:78:08:3a:cc:52:
         29:ef:01:47:1a:bc:a9:7f:74:59:f6:67:6a:07:af:41:fa:92:
         4c:24:36:57:1a:60:43:72:54:73:17:5e:80:3a:aa:5a:1d:20:
         7f:66:4b:97:5c:91:da:3c:59:a4:cf:8e:16:a6:ea:5a:ed:63:
         4c:ad:c4:c5:25:5e:52:ea:8e:7d:ec:3e:a2:57:49:ab:af:fd:
         e0:ca:01:a2:d8:ee:c9:c5:61:b5:a8:bc:01:69:6c:5e:d2:1e:
         dc:8a:53:f0:34:40:cf:a6:45:cd:68:26:a1:6b:88:50:c1:b5:
         e9:74:e2:a7:5f:ef:2c:6c:a0:f2:14:04:17:87:9a:43:73:2e:
         e3:7d:5b:28:69:32:fb:37:d6:5e:1b:cb:26:4c:fd:d3:8d:9c:
         d8:46:44:1e:61:9c:ee:1e:c1:e7:a9:fc:36:90:b0:18:7a:a9:
         6b:ae:c2:94:58:3b:73:3a:89:6e:0a:75:c9:6e:cc:3e:4f:0e:
         62:e1:1b:9d:f0:41:0a:f1:e8:a6:29:4d:10:39:b9:d5:30:86:
         22:f3:9f:5c:17:53:74:0c:15:b4:fe:d8:3d:dd:ed:89:19:3f:
         97:72:91:4f:63:88:0d:83:33:87:c5:a2:e1:e9:7b:75:3a:ff:
         9f:81:6d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:39 2024 by rpki-client on console-ams.rpki-client.org