Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/E2_jelJiEZA6xGi8EaMMrhgtsyk.roa
File:                     E2_jelJiEZA6xGi8EaMMrhgtsyk.roa (raw, json)
Hash identifier:          F+YZvxjs0TjHrQG+3f9gd4weHUdPwCXukigmaKA3pVU=
Subject key identifier:   13:6F:E3:7A:52:62:11:90:3A:C4:68:BC:11:A3:0C:AE:18:2D:B3:29
Certificate issuer:       /CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
Certificate serial:       01857315BE83DA1F98F37D116BDE7C1E473B
Authority key identifier: 95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/E2_jelJiEZA6xGi8EaMMrhgtsyk.roa
Signing time:             Mon 02 Jan 2023 15:24:42 +0000
ROA not before:           Mon 02 Jan 2023 15:24:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34549
IP address blocks:        45.153.160.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Wed 22 Nov 2023 15:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:15:be:83:da:1f:98:f3:7d:11:6b:de:7c:1e:47:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9573c1a56ecc24a57d2b684e5482dab7b8d9d2cb
        Validity
            Not Before: Jan  2 15:24:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=136fe37a526211903ac468bc11a30cae182db329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cb:bc:33:6e:c0:10:89:67:81:4a:e2:4f:55:
                    f1:0b:df:86:60:f7:be:b9:8d:9c:7d:0f:27:fb:ef:
                    92:4f:e9:7b:f5:e8:4c:35:3e:5f:93:b1:39:f6:66:
                    f6:da:51:83:dd:af:60:86:1e:6c:03:b2:db:78:b5:
                    6d:ed:50:a1:19:86:a1:ca:5e:35:68:d4:55:82:ba:
                    18:c0:94:d3:df:56:a4:12:68:97:58:63:70:8e:b5:
                    6e:46:f9:91:61:a4:32:59:8f:8e:3a:9d:ba:e7:65:
                    5a:0d:8a:a8:92:1f:d1:d0:10:85:d4:4d:fb:08:ea:
                    d0:58:13:1f:e9:cc:83:a2:f1:c8:24:2c:78:9f:f4:
                    37:80:48:af:d3:c3:45:77:27:e2:53:db:40:7d:3c:
                    87:47:1b:7e:f6:23:d9:3e:e6:98:d0:2c:b3:e6:c1:
                    eb:2a:04:03:19:01:2a:b9:ca:60:f7:83:26:92:83:
                    e4:2e:b4:e5:e7:e4:bd:26:8e:d5:93:96:39:58:eb:
                    34:26:f8:96:1f:0c:ec:fe:89:53:45:7e:eb:9c:7d:
                    d8:02:0a:25:fa:a5:43:0d:33:b8:ce:30:c0:e7:9a:
                    cd:5c:c4:f9:0c:7e:aa:74:a6:e2:84:56:63:c4:47:
                    73:55:e9:d3:2c:92:f9:40:16:f9:bf:4e:cd:0a:f0:
                    cd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:6F:E3:7A:52:62:11:90:3A:C4:68:BC:11:A3:0C:AE:18:2D:B3:29
            X509v3 Authority Key Identifier:
                keyid:95:73:C1:A5:6E:CC:24:A5:7D:2B:68:4E:54:82:DA:B7:B8:D9:D2:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lXPBpW7MJKV9K2hOVILat7jZ0ss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/E2_jelJiEZA6xGi8EaMMrhgtsyk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/64284f-035c-4620-94db-4cb9ddf09d45/1/lXPBpW7MJKV9K2hOVILat7jZ0ss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.153.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:f2:e4:59:63:a5:4a:2e:3d:25:62:0d:52:fe:fc:2c:68:33:
         57:6e:c9:0b:98:6f:a0:08:ac:55:67:c8:f2:9b:79:c3:88:ed:
         dd:74:11:83:22:89:06:5f:11:24:2c:bd:16:20:35:91:7e:cd:
         67:00:f0:2c:12:52:0b:e4:a1:b2:1f:28:5f:bb:ac:74:9f:12:
         74:c8:c9:62:31:f4:ca:3f:de:e8:27:43:b0:a7:9b:43:23:02:
         69:d1:e1:66:1e:a7:0d:a6:91:80:cc:a2:ed:64:c9:90:ce:00:
         36:c3:6d:3d:6d:a0:19:6a:64:81:55:0f:eb:de:bb:12:26:32:
         ab:01:42:cf:91:a4:a3:16:b6:34:50:ab:7c:00:77:b7:10:1d:
         af:21:2b:5b:37:60:7f:1b:e8:67:26:a6:fd:86:4d:20:07:86:
         be:81:e5:e2:9a:7b:0e:8d:4b:c6:bb:74:1e:27:f5:28:29:12:
         32:93:48:5d:a1:c7:fb:ac:a4:23:41:56:60:b8:11:70:95:cd:
         0e:b7:4a:91:8c:53:1d:43:78:b6:90:5f:6a:70:d4:e0:f5:73:
         46:be:09:4f:a6:50:0c:3c:af:7f:d7:33:94:4e:c3:ec:e0:91:
         7d:75:bf:39:ae:4c:16:1d:ab:dc:36:f5:13:58:35:e5:98:2a:
         7a:d9:33:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:57 2024 by rpki-client on console-fra.rpki-client.org