Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/VV6_VWJptIUTyGLUTdTW39HHy9A.roa
File:                     VV6_VWJptIUTyGLUTdTW39HHy9A.roa (raw, json)
Hash identifier:          VbMMIY4DraWNHlL3gCl6wD4BCHSPcvZBWKh8IgTeqXU=
Subject key identifier:   55:5E:BF:55:62:69:B4:85:13:C8:62:D4:4D:D4:D6:DF:D1:C7:CB:D0
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       0189B57C7192AEFB90F7F925FF070A52B7F8
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/VV6_VWJptIUTyGLUTdTW39HHy9A.roa
Signing time:             Wed 02 Aug 2023 09:02:58 +0000
ROA not before:           Wed 02 Aug 2023 09:02:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34549
IP address blocks:        45.13.236.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 08:33:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:b5:7c:71:92:ae:fb:90:f7:f9:25:ff:07:0a:52:b7:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Aug  2 09:02:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=555ebf556269b48513c862d44dd4d6dfd1c7cbd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:16:a9:c0:b7:51:25:05:d3:ae:24:14:a3:0b:
                    51:05:c4:72:08:23:61:65:6d:90:be:b8:c7:1b:12:
                    34:f7:07:6b:cc:a2:30:27:e5:db:d1:74:37:d0:3d:
                    7d:66:ea:9d:73:f4:44:1e:ec:be:9a:7f:29:a3:19:
                    2a:28:70:e2:f5:bd:fb:20:54:c9:72:74:28:c6:44:
                    b6:9c:b4:fd:8e:a8:84:b8:89:a2:29:5e:52:9a:15:
                    fa:00:01:5a:70:fb:6b:f6:4d:ce:f6:aa:c2:0a:d5:
                    d3:ee:d3:0c:f4:da:4c:aa:06:41:bf:b7:6b:01:fb:
                    11:7f:47:cc:b3:45:6a:2a:29:2e:15:aa:77:16:51:
                    2a:f3:c7:1a:46:f8:ed:ae:91:f9:f8:12:fd:b9:f9:
                    99:d9:76:d0:4b:7e:15:6f:03:28:e1:51:93:e0:98:
                    dd:05:a8:09:61:fe:8f:66:eb:af:c3:22:62:2d:db:
                    79:d3:2f:0a:60:dc:b5:4b:f8:7e:d0:d3:64:55:72:
                    16:e9:33:42:2d:87:dd:52:e7:56:d4:9a:4c:85:79:
                    0b:85:47:12:3f:52:6e:fe:df:94:fd:52:f9:05:69:
                    3a:2b:8a:81:64:34:7f:0b:9d:54:5c:6b:1e:f6:d4:
                    27:17:77:45:cc:30:73:5a:dc:53:3b:25:98:56:01:
                    6c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:5E:BF:55:62:69:B4:85:13:C8:62:D4:4D:D4:D6:DF:D1:C7:CB:D0
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/VV6_VWJptIUTyGLUTdTW39HHy9A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:6e:c8:f2:a5:0b:2e:e3:7d:f2:8d:4c:0a:83:25:81:2a:ae:
         29:a9:0b:ed:8e:96:e2:12:ac:41:ec:4f:d9:82:22:13:c1:7c:
         61:3b:20:3d:f9:a5:80:29:b5:e0:a2:41:ba:79:ce:91:07:58:
         62:da:c6:b4:10:53:c0:4b:e3:78:23:3f:07:e2:2d:44:dc:7b:
         2f:43:42:17:84:9e:cc:c1:4b:a7:60:1b:96:ce:9b:fd:24:a4:
         37:a1:cb:a1:cf:63:ba:29:77:d8:9e:1c:ec:70:6f:f9:7e:c5:
         a3:df:b0:74:d8:7c:b9:09:10:66:a5:b5:7b:65:f8:8d:17:2a:
         f1:e0:ee:0e:ab:33:a4:5c:5e:f5:98:8b:25:8a:24:61:17:1c:
         f2:c9:59:21:ae:8f:d6:55:75:b8:34:2a:1e:7e:79:18:55:84:
         3b:6b:17:ef:96:bf:7f:d1:ac:15:3b:d2:9b:f4:2c:43:32:a8:
         5b:67:e2:11:90:74:52:90:2e:b5:c8:67:e3:ab:5d:b9:d7:24:
         a9:47:29:4c:d2:b9:ec:01:95:15:53:23:83:e0:3d:91:36:17:
         f7:d6:f7:0f:a6:7e:47:65:7c:13:c5:8e:14:1b:5d:81:90:05:
         8d:b5:f1:50:9f:17:82:30:23:31:48:c9:91:42:81:5d:54:af:
         78:12:e0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:13 2024 by rpki-client on console-ams.rpki-client.org