Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/8JunAtGNoluxikoiALKEUZR8rFQ.roa
File:                     8JunAtGNoluxikoiALKEUZR8rFQ.roa (raw, json)
Hash identifier:          g5w1jGUxKpVx+fCdoQWWGpzhXvMrPovNOeK6lL3stXQ=
Subject key identifier:   F0:9B:A7:02:D1:8D:A2:5B:B1:8A:4A:22:00:B2:84:51:94:7C:AC:54
Certificate issuer:       /CN=454fd1c04bf7ec1dabbd2d21fda0085e251ec735
Certificate serial:       018572D5BDFB29765419E951853B5049DD0D
Authority key identifier: 45:4F:D1:C0:4B:F7:EC:1D:AB:BD:2D:21:FD:A0:08:5E:25:1E:C7:35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RU_RwEv37B2rvS0h_aAIXiUexzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/8JunAtGNoluxikoiALKEUZR8rFQ.roa
Signing time:             Mon 02 Jan 2023 14:14:48 +0000
ROA not before:           Mon 02 Jan 2023 14:14:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44352
IP address blocks:        91.241.176.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 02:29:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:d5:bd:fb:29:76:54:19:e9:51:85:3b:50:49:dd:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=454fd1c04bf7ec1dabbd2d21fda0085e251ec735
        Validity
            Not Before: Jan  2 14:14:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f09ba702d18da25bb18a4a2200b28451947cac54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:82:0d:97:5e:27:63:49:0e:65:ef:e3:7a:52:
                    bf:8b:16:43:06:11:90:35:87:2c:9e:07:08:b5:ce:
                    d2:bf:6e:89:1a:9b:03:30:e7:f0:5f:fb:ed:19:c7:
                    80:26:36:a3:a3:14:3b:b7:be:09:79:5d:83:8f:5a:
                    24:ab:3c:12:89:bd:05:bc:6b:17:b0:56:31:60:d3:
                    cd:d1:b2:e4:ec:44:45:6b:b0:17:06:ea:36:c7:a4:
                    6a:fb:15:f2:61:f9:ef:b5:f2:41:50:c5:51:cb:65:
                    0f:63:16:0b:a6:96:3d:6c:82:2d:ae:47:2f:4b:fa:
                    fc:e0:33:6d:d5:56:47:cd:67:5f:53:19:38:e1:40:
                    eb:28:34:43:bf:1d:7b:6b:94:29:3a:26:59:c7:22:
                    0a:b4:ab:2a:d5:b3:75:6d:e2:cb:17:b3:5e:81:aa:
                    fa:e0:67:1f:bf:ce:35:4d:76:77:4d:69:6d:b6:1b:
                    d0:a8:8f:d2:09:97:7e:0a:33:94:6f:a1:6f:6e:64:
                    73:ee:60:0f:83:99:db:b8:23:8d:ed:40:af:eb:cf:
                    9f:25:d2:75:29:f3:70:51:9f:04:86:92:0a:38:74:
                    93:07:59:6e:cc:ec:c0:e0:97:56:d7:cb:85:81:b1:
                    d6:6d:60:50:8f:66:b5:95:d2:6a:6b:ee:0c:13:32:
                    34:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:9B:A7:02:D1:8D:A2:5B:B1:8A:4A:22:00:B2:84:51:94:7C:AC:54
            X509v3 Authority Key Identifier:
                keyid:45:4F:D1:C0:4B:F7:EC:1D:AB:BD:2D:21:FD:A0:08:5E:25:1E:C7:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RU_RwEv37B2rvS0h_aAIXiUexzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/8JunAtGNoluxikoiALKEUZR8rFQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/RU_RwEv37B2rvS0h_aAIXiUexzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.241.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         e9:48:e7:70:f4:d4:dd:cd:0a:3d:7a:90:7b:28:15:11:d8:df:
         35:df:82:da:ee:01:0e:65:c4:45:00:c8:b6:ba:b3:48:37:32:
         8f:45:11:cc:be:42:d1:e8:93:b6:33:25:6d:47:40:12:db:95:
         8c:12:0e:cc:4e:68:04:21:59:b6:22:06:fa:7b:c6:e6:6a:b8:
         7e:aa:55:b4:3b:ae:60:27:28:80:86:9d:20:0a:a8:0f:44:ea:
         0a:d6:30:dd:f9:4a:3a:ba:f7:23:ec:af:20:a9:c3:09:e4:42:
         9d:bd:3b:d5:44:4e:2c:bb:bf:56:ec:fe:fb:0f:37:6b:10:84:
         87:e1:e5:f5:d8:e6:a5:ee:9f:1c:ff:02:78:2f:db:ef:25:62:
         59:97:b7:de:da:1a:52:33:01:d9:f3:25:99:63:d0:70:ba:3e:
         59:53:ca:71:23:6c:6e:27:0d:03:91:07:44:67:07:b4:39:4a:
         d6:f0:5f:02:d0:ef:e8:4f:66:b3:7a:c6:79:1d:b2:9f:39:51:
         e2:1c:80:89:97:11:e4:4e:7a:9e:b1:94:c2:82:f1:24:d2:b1:
         c6:47:8b:b8:61:38:d6:ff:3a:91:4c:64:b7:f7:20:85:37:61:
         fe:64:c8:ce:7c:50:c2:0c:fa:a1:8a:d6:78:49:05:82:81:b5:
         f4:e6:5a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:59 2024 by rpki-client on console-fra.rpki-client.org