Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/kEtexJAttVKOPoLSUdDxqOAbL6c.roa
File:                     kEtexJAttVKOPoLSUdDxqOAbL6c.roa (raw, json)
Hash identifier:          uAxq/KuD+AxQpuOlnc8uUF7hwtalaBOU9DzB6HDxgA8=
Subject key identifier:   90:4B:5E:C4:90:2D:B5:52:8E:3E:82:D2:51:D0:F1:A8:E0:1B:2F:A7
Certificate issuer:       /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial:       0185E5114809E27640DCE17C0DAE57BD08FA
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/kEtexJAttVKOPoLSUdDxqOAbL6c.roa
Signing time:             Tue 24 Jan 2023 18:36:33 +0000
ROA not before:           Tue 24 Jan 2023 18:36:33 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        45.150.174.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 18 Apr 2023 17:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:e5:11:48:09:e2:76:40:dc:e1:7c:0d:ae:57:bd:08:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
        Validity
            Not Before: Jan 24 18:36:33 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=904b5ec4902db5528e3e82d251d0f1a8e01b2fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:93:ed:a7:a1:24:85:32:b5:84:9c:62:34:7c:
                    11:ab:93:b8:ad:35:6d:df:29:9d:11:44:ac:03:8f:
                    b4:b4:2a:3c:44:62:4a:1a:fa:9b:d2:35:a8:bb:58:
                    e0:78:da:c6:b7:03:aa:1e:d0:7c:9a:30:9a:a5:ac:
                    b0:bc:b1:6e:58:3e:7c:52:06:15:e4:84:40:98:c6:
                    03:87:26:7e:df:f6:22:ba:4f:74:43:c3:8c:e5:e3:
                    e9:4e:e8:f1:bc:e2:0e:5d:6f:3a:80:40:4e:a4:08:
                    9f:58:1c:07:fc:c1:d1:53:39:be:9f:b9:e8:3f:a2:
                    32:c1:28:fe:5d:94:dc:e1:06:b7:29:91:21:59:03:
                    15:70:f0:68:2a:83:d6:0f:e2:b5:4c:e7:d0:09:c1:
                    4a:ff:60:2f:2b:ba:af:11:e0:74:d8:a1:5c:05:58:
                    15:ff:c1:b0:fa:7f:f2:34:37:bd:91:39:bb:4a:cf:
                    2d:da:d9:d4:95:e5:24:15:d3:73:29:6c:7f:a8:0d:
                    bb:73:ea:1c:4d:39:f0:5d:44:6f:88:43:77:7a:74:
                    ee:ac:5a:4a:8b:89:c5:56:b0:b0:2f:1a:1c:ff:5a:
                    13:e5:17:4d:bb:e4:3b:5e:99:8a:9d:26:21:a9:45:
                    8e:2f:75:7b:05:a2:29:9b:04:48:9b:ec:ed:83:f9:
                    96:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:4B:5E:C4:90:2D:B5:52:8E:3E:82:D2:51:D0:F1:A8:E0:1B:2F:A7
            X509v3 Authority Key Identifier:
                keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/kEtexJAttVKOPoLSUdDxqOAbL6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:b8:21:38:cc:88:2c:ab:2f:be:f8:f6:48:8b:32:fa:4e:55:
         79:0d:07:d2:57:be:9a:f8:aa:02:fb:ed:fc:61:c0:b1:72:5e:
         8a:07:df:3e:a1:90:df:6a:24:12:6f:c8:53:f3:3a:46:4a:91:
         67:52:16:0d:10:56:79:90:1f:fa:d2:d9:9e:a7:dc:70:ca:48:
         9e:9a:74:bb:98:35:5a:31:ce:9b:b5:d2:c5:c9:04:b1:a0:ae:
         0e:5c:af:10:a9:ee:b5:33:04:2d:de:92:90:40:69:f1:e6:5c:
         07:40:ac:f6:ba:f6:d8:fd:8c:00:e1:4b:91:c0:65:16:83:8f:
         5f:e6:4f:50:05:eb:55:d2:fc:59:63:53:75:66:78:93:e1:8f:
         b8:7d:65:16:77:e6:ea:54:da:1d:a9:4a:74:30:cf:42:62:59:
         6d:ef:8c:a9:45:d5:ac:ad:5b:6e:97:7d:9d:57:5f:8d:6c:e0:
         7c:1e:51:28:b0:27:02:db:68:3c:ed:5e:87:dd:0a:80:16:40:
         1e:6f:51:69:9c:5e:39:9d:6b:88:57:5f:50:ed:33:cc:4c:32:
         56:7e:69:4d:7c:dc:8c:e9:a8:2e:98:74:99:47:f6:3e:1d:2a:
         4e:29:ab:6b:ff:4e:fe:2a:22:27:bd:35:b4:91:8e:56:0c:d7:
         f3:06:82:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:47 2024 by rpki-client on console-fra.rpki-client.org