Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/29clu0EwdBX2RoriCQ093S1Zc38.roa
File:                     29clu0EwdBX2RoriCQ093S1Zc38.roa (raw, json)
Hash identifier:          FHodYYdIYGB/LxvGaDghYq2L+0h7IGMUyG0d0le/7cs=
Subject key identifier:   DB:D7:25:BB:41:30:74:15:F6:46:8A:E2:09:0D:3D:DD:2D:59:73:7F
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       01856CE60F00F6EE5CF337A3AC75D331A828
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/29clu0EwdBX2RoriCQ093S1Zc38.roa
Signing time:             Sun 01 Jan 2023 10:34:54 +0000
ROA not before:           Sun 01 Jan 2023 10:34:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     24961
IP address blocks:        45.145.226.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 11 Feb 2023 10:16:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:e6:0f:00:f6:ee:5c:f3:37:a3:ac:75:d3:31:a8:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Jan  1 10:34:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=dbd725bb41307415f6468ae2090d3ddd2d59737f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3d:65:68:11:5d:3e:ac:7f:34:a9:1d:c6:b7:
                    58:02:39:00:c9:ec:ee:1f:be:73:8d:03:23:91:ec:
                    b5:ec:f1:c3:cd:42:2f:8b:66:6f:50:f7:42:e3:df:
                    f1:a9:c8:58:bf:16:45:8e:d9:f1:98:eb:c3:f4:39:
                    3f:47:69:85:45:7c:19:b6:17:bb:45:b2:8f:48:34:
                    0d:2d:3d:67:36:16:46:af:b2:a4:09:2d:4a:90:f3:
                    27:17:29:61:0e:ec:66:7b:03:52:bd:e4:93:3c:f0:
                    c1:e4:b2:b8:3d:85:a8:88:e4:09:3d:53:36:cf:05:
                    50:ea:f8:a4:1a:ab:5e:b9:8d:d0:55:44:ca:a6:b0:
                    ab:24:a4:18:a7:e6:31:8c:b1:75:a1:19:47:a1:97:
                    a8:70:e4:1e:5b:44:be:23:85:77:e9:83:f5:ae:8d:
                    3e:5f:cd:98:90:c1:42:4f:32:43:21:76:94:dd:59:
                    3e:1b:55:c5:78:1f:8a:e1:4c:be:26:84:2e:c0:c8:
                    a8:46:c8:d0:cd:e9:21:1e:93:fd:b0:7a:87:0b:a0:
                    18:fa:b7:f2:6b:e9:f6:7d:90:a3:6d:be:4f:e9:19:
                    b7:93:a6:7b:e7:43:2e:e9:aa:8d:0c:06:02:04:b1:
                    bf:43:2c:b3:3a:8d:f8:a8:c0:70:ba:f6:14:b7:e3:
                    d9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D7:25:BB:41:30:74:15:F6:46:8A:E2:09:0D:3D:DD:2D:59:73:7F
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/29clu0EwdBX2RoriCQ093S1Zc38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.145.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:c9:85:fe:c4:b8:a2:f6:7a:c2:61:e1:fc:7c:1b:86:98:f7:
         b0:c7:9e:ac:9a:f6:fc:d7:ee:3d:96:45:4e:59:2d:c8:38:d5:
         45:30:89:79:e9:77:fd:56:e0:4b:c1:49:60:17:eb:cb:c6:b7:
         da:2d:3c:97:be:42:15:10:44:32:4a:68:f2:02:55:bc:0f:3a:
         15:93:a5:73:86:de:0d:d4:fa:fb:a0:a5:f4:f2:81:4b:44:36:
         db:5d:46:dc:0f:4a:0d:a9:dc:d1:36:90:4c:2b:1d:3a:b1:eb:
         3c:d2:9c:81:41:61:0f:ec:30:b1:10:79:22:bd:58:2e:40:d5:
         f3:45:6d:fe:cd:28:fa:ee:f8:8c:cb:24:8a:6e:a0:37:49:dc:
         5f:a2:6d:59:d9:26:d0:59:13:77:2f:23:4f:2e:dd:9e:4e:f1:
         cf:ad:a2:2b:fd:55:a7:a8:3b:06:66:83:77:70:5b:3b:75:f0:
         08:47:2a:c2:28:55:9b:ee:29:7d:89:0b:a1:d4:e3:cd:81:28:
         2d:f7:70:3d:65:ef:fb:0f:60:7d:07:26:4a:4e:21:24:82:57:
         13:58:9f:44:f2:58:5e:58:df:47:72:54:af:34:1f:d5:7d:49:
         4e:8f:f1:9b:8b:c8:62:9f:cb:cc:04:f1:85:49:13:aa:4f:e6:
         01:61:30:e6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVs5g8A9u5c8zejrHXTMagoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjMwMTAxMTAzNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYmQ3MjViYjQxMzA3NDE1ZjY0NjhhZTIwOTBkM2RkZDJkNTk3MzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApD1laBFdPqx/NKkdxrdYAjkAyezu
H75zjQMjkey17PHDzUIvi2ZvUPdC49/xqchYvxZFjtnxmOvD9Dk/R2mFRXwZthe7
RbKPSDQNLT1nNhZGr7KkCS1KkPMnFylhDuxmewNSveSTPPDB5LK4PYWoiOQJPVM2
zwVQ6vikGqteuY3QVUTKprCrJKQYp+YxjLF1oRlHoZeocOQeW0S+I4V36YP1ro0+
X82YkMFCTzJDIXaU3Vk+G1XFeB+K4Uy+JoQuwMioRsjQzekhHpP9sHqHC6AY+rfy
a+n2fZCjbb5P6Rm3k6Z750Mu6aqNDAYCBLG/QyyzOo34qMBwuvYUt+PZuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNvXJbtBMHQV9kaK4gkNPd0tWXN/MB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEvMjljbHUwRXdkQlgyUm9yaUNRMDkzUzFaYzM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZHiMA0G
CSqGSIb3DQEBCwUAA4IBAQByyYX+xLii9nrCYeH8fBuGmPewx56smvb81+49lkVO
WS3IONVFMIl56Xf9VuBLwUlgF+vLxrfaLTyXvkIVEEQySmjyAlW8DzoVk6Vzht4N
1Pr7oKX08oFLRDbbXUbcD0oNqdzRNpBMKx06ses80pyBQWEP7DCxEHkivVguQNXz
RW3+zSj67viMyySKbqA3Sdxfom1Z2SbQWRN3LyNPLt2eTvHPraIr/VWnqDsGZoN3
cFs7dfAIRyrCKFWb7il9iQuh1OPNgSgt93A9Ze/7D2B9ByZKTiEkglcTWJ9E8lhe
WN9HclSvNB/VfUlOj/Gbi8hin8vMBPGFSROqT+YBYTDm
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:27 2024 by rpki-client on console-fra.rpki-client.org