Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/u9mtVxAVWV9rjRmeAWbiUzm2fGo.roa
File:                     u9mtVxAVWV9rjRmeAWbiUzm2fGo.roa (raw, json)
Hash identifier:          q9kvIca8BkYnpOs4Q0iSdZGqpK8ZKgEaDloy/gS6StU=
Subject key identifier:   BB:D9:AD:57:10:15:59:5F:6B:8D:19:9E:01:66:E2:53:39:B6:7C:6A
Certificate issuer:       /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial:       01918B210674052F3C2311FE9215A5CB9DCC
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/u9mtVxAVWV9rjRmeAWbiUzm2fGo.roa
Signing time:             Sun 25 Aug 2024 20:01:22 +0000
ROA not before:           Sun 25 Aug 2024 20:01:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     21859
IP address blocks:        45.140.208.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 27 Sep 2024 00:49:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:8b:21:06:74:05:2f:3c:23:11:fe:92:15:a5:cb:9d:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
        Validity
            Not Before: Aug 25 20:01:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=bbd9ad571015595f6b8d199e0166e25339b67c6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6f:3d:56:3b:99:9a:ba:cc:ed:bf:0e:93:3a:
                    ef:fe:60:fc:12:f8:f3:48:75:30:ad:5d:b7:cb:aa:
                    81:2b:5f:cf:df:b9:64:7d:4c:78:ca:76:21:e6:7a:
                    db:f8:02:f0:ae:e3:55:eb:58:21:f3:f1:18:a8:d7:
                    79:67:2b:ff:07:6e:aa:d6:a3:7f:55:0e:3a:dd:87:
                    45:fb:c3:72:dd:e3:16:93:06:cb:bc:b8:19:b8:05:
                    a0:0d:6a:70:d1:83:9e:1d:d8:4f:59:e4:2f:89:6b:
                    6b:d8:8c:5e:a0:58:a3:86:12:a3:7b:83:32:3c:ef:
                    46:3f:3c:81:93:d9:21:8a:58:c8:3b:6e:8d:d0:b5:
                    23:f3:75:70:34:9b:85:3f:71:27:9e:de:99:9f:0c:
                    94:87:17:3b:21:26:8f:9a:64:6a:d8:ae:ad:d5:5f:
                    c2:7c:e5:6e:24:16:9b:fc:50:be:76:81:12:42:d0:
                    f0:44:17:fd:4e:ec:69:cf:44:f6:fd:0c:b8:c1:f2:
                    8a:49:64:50:7b:9d:95:ad:35:d7:20:5b:7a:68:b9:
                    2c:9a:8f:41:a1:74:e0:f9:ab:bb:ec:22:bd:73:3f:
                    ed:3d:99:ac:2d:f4:57:38:60:64:50:61:3d:e0:0a:
                    fe:d2:9d:a3:22:11:c9:df:91:fb:ba:cc:24:a1:98:
                    dd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:D9:AD:57:10:15:59:5F:6B:8D:19:9E:01:66:E2:53:39:B6:7C:6A
            X509v3 Authority Key Identifier:
                keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/u9mtVxAVWV9rjRmeAWbiUzm2fGo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.140.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:40:47:26:b0:de:5d:31:42:10:70:a6:4e:3c:81:7c:b2:1f:
         1b:f0:7c:13:28:8c:cc:07:e3:67:c6:e6:7e:a1:0e:72:99:7f:
         29:62:9d:4d:37:cd:db:22:51:6d:8c:e7:47:d3:58:5f:df:71:
         9e:be:61:96:63:c3:60:c9:9b:c2:47:22:12:c3:77:12:4e:c3:
         89:b9:dd:fa:e2:54:41:91:93:bf:98:9b:6c:1a:fb:6d:58:ef:
         5f:ef:7a:10:32:a3:fe:16:67:86:8a:31:e1:9d:7c:43:f5:f9:
         2d:7c:46:cc:51:2b:0d:17:e9:0f:1f:22:3b:39:a8:d1:30:e9:
         71:1d:37:de:02:35:04:60:1a:6c:e9:58:30:03:22:5f:6e:3d:
         2b:d0:46:72:33:f7:c8:e7:b5:53:70:39:7a:cc:11:5e:91:cb:
         92:c8:4b:f4:3c:35:44:f3:5c:01:f8:42:1b:9f:0b:e6:54:20:
         81:fa:27:87:9e:1d:ea:18:a6:73:cb:43:65:4e:fa:bb:fb:e5:
         5a:c2:88:35:0f:74:90:3b:05:00:99:dc:62:0c:9e:2e:97:62:
         50:88:d7:ef:e3:30:e6:15:59:5e:b6:5e:44:92:bd:9a:7d:3d:
         d5:fe:05:ab:50:ba:33:74:63:2f:88:3f:f6:27:40:dc:c2:fe:
         63:8b:00:e2
-----BEGIN CERTIFICATE-----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Generated at Fri Sep 27 02:13:32 2024 by rpki-client on console-fra.rpki-client.org