Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/gE1mmXXk5lgCh3HcArYJTZEjGWo.roa
File:                     gE1mmXXk5lgCh3HcArYJTZEjGWo.roa (raw, json)
Hash identifier:          GCLY3JNuaFr2gKvhU2Mh5fkmK+0m2lKM8Uc8z8L/jH0=
Subject key identifier:   80:4D:66:99:75:E4:E6:58:02:87:71:DC:02:B6:09:4D:91:23:19:6A
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       018C63D2282DEB523828208B4872A544EB12
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/gE1mmXXk5lgCh3HcArYJTZEjGWo.roa
Signing time:             Wed 13 Dec 2023 15:36:06 +0000
ROA not before:           Wed 13 Dec 2023 15:36:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     24940
IP address blocks:        45.145.227.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 08:33:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:63:d2:28:2d:eb:52:38:28:20:8b:48:72:a5:44:eb:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Dec 13 15:36:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=804d669975e4e658028771dc02b6094d9123196a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:00:6a:50:f0:4b:4b:d8:11:8f:bb:c4:12:7f:
                    d9:f6:d2:a4:93:91:33:d1:eb:23:16:84:c0:7a:65:
                    d2:a1:42:b3:1e:ad:40:11:db:74:1c:b2:81:7d:0e:
                    cf:c1:38:c9:31:99:af:97:10:59:26:b0:aa:75:36:
                    d7:07:66:47:a9:0c:85:6f:eb:68:19:31:8a:98:89:
                    e6:48:a1:f0:b8:83:e0:60:55:b7:05:96:c1:3e:86:
                    81:a0:c6:73:18:bf:bf:17:06:c4:23:8b:42:6a:09:
                    6f:59:4e:0e:c2:25:a7:d9:f9:13:e5:9d:a3:1c:45:
                    e2:fa:15:fb:45:cd:32:5c:c7:90:a9:6b:a8:53:42:
                    95:57:2d:a1:87:d4:5b:36:f7:94:b9:b1:57:2d:0c:
                    e2:b4:84:05:d6:2e:20:d7:7d:8d:f8:fb:ad:0c:ae:
                    67:d9:12:94:90:e1:8e:38:5d:17:fe:97:b0:e6:38:
                    06:c1:6e:eb:d4:a6:5e:89:4b:8f:e3:3d:4b:c0:bc:
                    d8:73:b9:d6:f5:35:8b:ba:94:e9:b3:df:59:32:b0:
                    9a:e5:a3:d9:ed:b2:4e:f4:16:bf:80:0e:b0:14:12:
                    50:c3:1c:3b:54:cf:30:b0:24:05:e6:9b:d2:27:54:
                    8f:e4:19:8f:c5:0b:76:af:b4:b3:cd:c2:75:1c:8a:
                    61:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:4D:66:99:75:E4:E6:58:02:87:71:DC:02:B6:09:4D:91:23:19:6A
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/gE1mmXXk5lgCh3HcArYJTZEjGWo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.145.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:4a:78:cf:b8:27:2c:7c:b5:18:61:6f:a6:63:2a:03:e5:2b:
         6b:d5:b3:5c:dd:d4:8c:36:fa:92:31:90:65:91:3a:7c:7b:bf:
         f9:a9:b5:14:0e:7f:3e:fe:57:9b:9e:74:e0:dd:50:9a:23:d1:
         94:27:74:b2:61:d8:b6:68:1c:3c:1c:de:6c:8c:e7:0f:b9:50:
         52:43:c0:70:47:cd:6f:fd:4f:c1:9c:2f:e2:66:e2:c9:5a:51:
         21:fa:a2:e4:15:77:d9:90:03:a9:4b:e0:9f:5f:97:72:9e:d5:
         8c:55:c5:3a:3c:82:cd:44:23:e9:50:61:6a:a8:12:b7:c0:67:
         98:11:cf:c0:5a:43:75:4e:18:81:31:b4:82:78:11:c1:0b:20:
         c6:04:d2:34:ce:0f:4e:5b:52:51:3d:1f:32:85:e8:48:5e:67:
         76:8b:64:f2:7e:00:b1:a4:05:41:ff:b2:1d:79:c0:78:29:67:
         99:32:ec:5f:f8:bd:2b:4a:c4:c9:b3:a4:af:f3:56:80:90:2d:
         e9:01:68:89:97:7f:ba:82:cd:88:2c:3b:8b:67:f0:d6:c5:cd:
         ba:b1:05:c9:54:40:fa:59:f1:7f:2d:02:a8:0f:13:17:29:84:
         88:c7:1b:b6:4e:b7:57:9c:f7:b5:28:c3:d8:fd:5d:be:f1:7e:
         15:e6:a2:04
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYxj0igt61I4KCCLSHKlROsSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjMxMjEzMTUzNjA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDRkNjY5OTc1ZTRlNjU4MDI4NzcxZGMwMmI2MDk0ZDkxMjMxOTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQBqUPBLS9gRj7vEEn/Z9tKkk5Ez
0esjFoTAemXSoUKzHq1AEdt0HLKBfQ7PwTjJMZmvlxBZJrCqdTbXB2ZHqQyFb+to
GTGKmInmSKHwuIPgYFW3BZbBPoaBoMZzGL+/FwbEI4tCaglvWU4OwiWn2fkT5Z2j
HEXi+hX7Rc0yXMeQqWuoU0KVVy2hh9RbNveUubFXLQzitIQF1i4g132N+PutDK5n
2RKUkOGOOF0X/pew5jgGwW7r1KZeiUuP4z1LwLzYc7nW9TWLupTps99ZMrCa5aPZ
7bJO9Ba/gA6wFBJQwxw7VM8wsCQF5pvSJ1SP5BmPxQt2r7SzzcJ1HIphyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIBNZpl15OZYAodx3AK2CU2RIxlqMB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEvZ0UxbW1YWGs1bGdDaDNIY0FyWUpUWkVqR1dvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZHjMA0G
CSqGSIb3DQEBCwUAA4IBAQAdSnjPuCcsfLUYYW+mYyoD5Str1bNc3dSMNvqSMZBl
kTp8e7/5qbUUDn8+/lebnnTg3VCaI9GUJ3SyYdi2aBw8HN5sjOcPuVBSQ8BwR81v
/U/BnC/iZuLJWlEh+qLkFXfZkAOpS+CfX5dyntWMVcU6PILNRCPpUGFqqBK3wGeY
Ec/AWkN1ThiBMbSCeBHBCyDGBNI0zg9OW1JRPR8yhehIXmd2i2TyfgCxpAVB/7Id
ecB4KWeZMuxf+L0rSsTJs6Sv81aAkC3pAWiJl3+6gs2ILDuLZ/DWxc26sQXJVED6
WfF/LQKoDxMXKYSIxxu2TrdXnPe1KMPY/V2+8X4V5qIE
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:13 2024 by rpki-client on console-ams.rpki-client.org