Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/8dDkylj164cwdXeCLFDN1bGX224.roa
File:                     8dDkylj164cwdXeCLFDN1bGX224.roa (raw, json)
Hash identifier:          Oeh3D0CZSJSnm3tgK9WQIo46gpO5jyAsGrWIPU6bWao=
Subject key identifier:   F1:D0:E4:CA:58:F5:EB:87:30:75:77:82:2C:50:CD:D5:B1:97:DB:6E
Certificate issuer:       /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial:       018CC425773CC247D8BE217A4E78C4502D30
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/8dDkylj164cwdXeCLFDN1bGX224.roa
Signing time:             Mon 01 Jan 2024 08:30:38 +0000
ROA not before:           Mon 01 Jan 2024 08:30:38 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     216456
IP address blocks:        45.81.20.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 04 Mar 2024 15:38:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:25:77:3c:c2:47:d8:be:21:7a:4e:78:c4:50:2d:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
        Validity
            Not Before: Jan  1 08:30:38 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f1d0e4ca58f5eb87307577822c50cdd5b197db6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:40:d8:a5:b1:d7:ed:7f:79:2c:f5:0c:d1:31:
                    de:c4:c0:a8:dd:9c:aa:82:27:70:a8:76:86:6a:82:
                    6c:88:88:fb:b8:d3:b7:f2:43:a6:cf:28:e9:f8:13:
                    56:01:5c:29:54:58:bc:14:2a:48:13:04:de:bf:71:
                    54:cc:7e:8b:bf:ae:2c:0f:d4:e7:46:14:5b:53:ef:
                    4b:2a:24:d7:20:3f:f0:fd:2a:13:15:06:52:29:bd:
                    49:dd:d8:25:41:de:5a:c8:10:79:9f:df:97:13:5c:
                    c7:1f:bb:29:62:42:a5:ac:ca:2f:7e:a3:12:eb:4d:
                    77:0f:ad:21:da:5f:f5:18:dc:68:56:45:47:ef:32:
                    b9:ec:5d:93:7c:08:39:f9:39:8f:fb:b9:89:cc:d0:
                    21:9a:21:c1:61:84:bc:71:ab:df:b4:b2:46:22:dd:
                    0b:b3:15:a9:f1:14:d7:d5:f4:6b:6b:90:d7:03:91:
                    d4:b1:5d:49:28:c7:a3:eb:43:75:78:3b:55:cf:5f:
                    e3:b2:76:38:c9:9b:92:28:78:17:ec:c5:47:f6:55:
                    69:e7:e4:3e:38:95:76:94:69:87:8c:51:f9:6b:b4:
                    9b:46:2a:77:3c:0d:47:2c:53:15:c1:c2:63:f9:fe:
                    dd:00:df:49:57:25:91:9a:78:d8:33:af:3b:24:7d:
                    fe:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D0:E4:CA:58:F5:EB:87:30:75:77:82:2C:50:CD:D5:B1:97:DB:6E
            X509v3 Authority Key Identifier:
                keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/8dDkylj164cwdXeCLFDN1bGX224.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.81.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:ed:c0:1e:26:29:67:7a:9a:db:91:4a:af:6c:9e:dd:c8:55:
         62:5d:68:98:ac:23:7d:ea:ce:8b:ce:b1:68:9a:61:87:1f:cf:
         38:99:1a:23:8a:22:22:df:6f:31:d9:3a:41:93:13:76:fb:b1:
         d0:3d:05:66:03:71:58:85:e6:cf:c7:cf:c6:fd:50:cd:0c:d7:
         12:b8:d0:79:96:ba:9f:49:a9:a2:f2:72:e1:52:0e:f0:c9:46:
         6c:74:1b:84:10:75:d1:07:cb:70:26:a6:d9:25:af:4b:41:25:
         44:d0:4b:1b:35:7e:72:7f:5f:a8:d9:a4:61:e5:22:96:42:be:
         08:c6:57:d0:0d:e0:31:a2:eb:f3:43:4e:a7:50:39:da:59:84:
         9b:5b:d6:49:3a:e6:f3:71:cb:42:0b:64:86:06:e2:23:c6:87:
         ce:3a:77:5c:0c:92:70:fc:f4:c6:cf:13:9c:c9:ff:90:31:48:
         8d:9a:ca:c7:b0:40:ec:0b:c3:da:66:c6:37:d2:11:7b:01:fb:
         ba:2f:f7:cb:36:d6:51:e7:d7:de:ec:93:91:e4:ca:c5:97:18:
         fe:cc:e5:7f:be:6f:ba:17:93:61:a8:73:d1:eb:15:7f:88:9a:
         bf:1b:02:23:67:8e:5d:e7:38:e2:07:98:88:82:1a:e6:c1:96:
         30:b2:69:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:39 2024 by rpki-client on console-ams.rpki-client.org