Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/wSqChtdaV-2ri43DUGQbOzH_lyc.roa
File:                     wSqChtdaV-2ri43DUGQbOzH_lyc.roa (raw, json)
Hash identifier:          8JFQLaVps3NZMq8wNn1byvQ0KABRT14JUDrWaOWpqpA=
Subject key identifier:   C1:2A:82:86:D7:5A:57:ED:AB:8B:8D:C3:50:64:1B:3B:31:FF:97:27
Certificate issuer:       /CN=27516d20ebefd12f072d413c4d2606bdb258691a
Certificate serial:       01856E01D2FE6F8B70F412FCBB7D4EEDA2C5
Authority key identifier: 27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/wSqChtdaV-2ri43DUGQbOzH_lyc.roa
Signing time:             Sun 01 Jan 2023 15:44:51 +0000
ROA not before:           Sun 01 Jan 2023 15:44:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     17447
IP address blocks:        185.190.45.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 18 Feb 2023 12:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:01:d2:fe:6f:8b:70:f4:12:fc:bb:7d:4e:ed:a2:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27516d20ebefd12f072d413c4d2606bdb258691a
        Validity
            Not Before: Jan  1 15:44:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c12a8286d75a57edab8b8dc350641b3b31ff9727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ef:0c:24:64:4e:2f:a3:51:a4:db:57:6f:4d:
                    af:e7:50:b2:83:2e:52:5b:cb:0f:7d:1c:49:5b:bc:
                    c7:d0:a3:bd:ed:ed:53:83:52:36:4c:1a:7f:64:ad:
                    db:ce:5e:4a:65:01:99:1a:4f:74:24:f4:88:58:a5:
                    d8:63:25:6f:a6:ba:79:61:e3:76:54:8f:4e:bd:a1:
                    e8:b2:a3:82:8a:8b:82:7e:76:2f:e1:35:76:46:56:
                    81:70:f9:1c:00:8c:fe:c9:ea:ba:b8:62:cf:6b:7d:
                    66:5c:f3:97:3b:23:92:bb:02:e7:35:43:81:23:43:
                    00:27:15:14:55:e8:77:ba:8f:4e:51:dd:c5:4f:04:
                    07:7f:36:9f:e8:7b:4a:1f:46:1f:fb:fa:ff:80:2c:
                    b2:68:97:ca:14:9e:0e:a2:b8:e3:2a:ac:ac:c1:f9:
                    39:8a:f8:1c:f4:58:dc:98:13:65:2a:ea:72:40:26:
                    78:2c:6e:e7:b2:52:6b:11:58:9e:e3:61:7e:05:63:
                    33:cd:6a:a7:4f:cc:bb:fb:8f:f1:75:0c:69:b2:3b:
                    d4:8b:8d:7d:a7:2b:ea:f4:15:08:e1:df:57:b0:35:
                    56:ff:76:9e:bf:51:ea:05:7d:60:dd:90:0c:61:d7:
                    f6:ed:48:51:e2:33:b2:21:4a:71:eb:6c:3c:96:c0:
                    dc:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:2A:82:86:D7:5A:57:ED:AB:8B:8D:C3:50:64:1B:3B:31:FF:97:27
            X509v3 Authority Key Identifier:
                keyid:27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/wSqChtdaV-2ri43DUGQbOzH_lyc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.190.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:bf:6a:7b:99:05:b6:9c:95:e8:0f:50:c3:b7:48:fc:44:29:
         02:5a:00:07:ac:fd:54:b1:19:e0:bb:c2:ae:b5:57:72:0a:55:
         86:ca:3f:5e:5b:96:a0:4b:ba:37:55:8f:1e:d1:de:ae:4e:26:
         f5:10:ad:19:04:a4:bf:8e:9a:e7:88:60:ad:18:d6:5f:81:2f:
         97:52:aa:79:80:39:31:30:19:a4:7f:e0:15:63:5f:48:f0:bc:
         cb:5f:49:65:a6:c1:9f:fc:ba:72:f0:60:9e:e6:26:cd:5d:95:
         8e:ef:a2:c7:0b:af:6b:d8:cd:9e:cb:fb:ed:1b:b4:32:97:06:
         33:2f:e6:35:23:ef:e7:56:9b:bc:1f:4c:3f:cd:e9:7b:e7:e0:
         1b:fc:46:dd:86:5d:31:20:fe:44:6b:3f:c1:4d:03:57:d5:42:
         ba:fc:f5:95:79:12:12:7f:77:de:54:18:ba:68:98:cf:94:aa:
         1b:f5:66:48:c0:01:3b:5c:ad:7b:99:ae:da:b3:43:a1:97:71:
         13:c2:08:d1:47:da:0d:b4:ef:1f:9f:95:92:18:03:c7:db:81:
         36:38:c2:3b:fa:87:8f:a9:85:84:48:0d:cd:a1:26:fe:ea:e7:
         4c:d4:b3:a9:c2:62:35:e8:2b:97:54:ff:7b:7b:ee:71:6e:be:
         c1:25:b6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:31 2024 by rpki-client on console-fra.rpki-client.org