Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/lsIivhM9NqwWjhJY0b4jeUf4aJs.roa
File:                     lsIivhM9NqwWjhJY0b4jeUf4aJs.roa (raw, json)
Hash identifier:          cssaEMryInnQJ9d1pPDnFDp0ic8gfT9sBvSGJxI0SDw=
Subject key identifier:   96:C2:22:BE:13:3D:36:AC:16:8E:12:58:D1:BE:23:79:47:F8:68:9B
Certificate issuer:       /CN=7094a425595e923c4b53b9c000aa8f19ad923f20
Certificate serial:       01856CEF3C1BC149CCA2E01B760C3C9D8BBD
Authority key identifier: 70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/lsIivhM9NqwWjhJY0b4jeUf4aJs.roa
Signing time:             Sun 01 Jan 2023 10:44:55 +0000
ROA not before:           Sun 01 Jan 2023 10:44:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205981
IP address blocks:        45.9.132.0/22 maxlen: 22
                          212.63.104.0/22 maxlen: 22
                          185.194.108.0/22 maxlen: 22
                          45.137.72.0/22 maxlen: 22
                          185.248.124.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 08:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:ef:3c:1b:c1:49:cc:a2:e0:1b:76:0c:3c:9d:8b:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7094a425595e923c4b53b9c000aa8f19ad923f20
        Validity
            Not Before: Jan  1 10:44:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=96c222be133d36ac168e1258d1be237947f8689b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:39:9d:ab:00:21:a0:ec:99:cd:77:22:7c:e5:
                    79:2f:a4:86:d1:9b:27:b4:4f:ea:44:78:a8:22:19:
                    9e:b3:1d:e7:f8:30:8f:87:b3:3f:f3:98:f1:90:23:
                    8e:1a:77:3a:d1:52:5e:58:e4:fe:8f:68:ba:8e:4a:
                    f5:f5:37:8e:15:55:84:c7:cd:2a:cb:b4:51:ca:71:
                    20:d7:7d:63:c4:71:8e:fb:9f:e9:37:0c:84:77:cd:
                    53:e4:2a:e1:a9:b6:20:31:63:31:07:45:c7:0f:9a:
                    21:7a:69:d9:5a:68:45:8a:fc:bc:57:0a:07:a2:a4:
                    3a:fa:81:7a:3c:3b:72:05:f2:8b:e4:27:0d:2c:3b:
                    9c:d6:c9:40:63:a5:0b:40:21:61:34:25:d3:0d:ff:
                    15:8c:6b:16:77:a4:5d:ea:ff:cf:12:f7:32:1c:f2:
                    e4:d3:29:95:79:ed:31:ff:5c:91:3e:34:0f:40:3f:
                    0b:1e:d8:f1:27:5c:09:d5:60:37:c1:ea:ac:92:ff:
                    00:1e:f6:41:51:a1:79:17:83:2d:39:24:61:6a:3b:
                    88:18:2c:c2:36:56:1e:b6:53:f1:19:d7:04:36:f1:
                    05:08:82:ec:d5:94:3a:85:cb:48:4f:c6:fa:3a:55:
                    0d:94:58:27:fe:a2:4e:bf:fb:64:16:67:3e:f6:98:
                    6c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C2:22:BE:13:3D:36:AC:16:8E:12:58:D1:BE:23:79:47:F8:68:9B
            X509v3 Authority Key Identifier:
                keyid:70:94:A4:25:59:5E:92:3C:4B:53:B9:C0:00:AA:8F:19:AD:92:3F:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJSkJVlekjxLU7nAAKqPGa2SPyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/lsIivhM9NqwWjhJY0b4jeUf4aJs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/963170-58be-46bb-a5de-777373e6055e/1/cJSkJVlekjxLU7nAAKqPGa2SPyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.9.132.0/22
                  45.137.72.0/22
                  185.194.108.0/22
                  185.248.124.0/22
                  212.63.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:88:5e:f5:88:fa:7c:81:af:98:2e:e1:07:36:bf:53:e3:02:
         ee:c5:bc:d9:6e:b6:f5:51:e4:01:a6:62:be:e6:b2:6b:61:29:
         c7:a0:24:ba:9b:a1:ac:ac:fc:7e:e9:a4:05:bd:7b:f5:4e:99:
         88:81:bd:a8:2c:ae:5a:5e:30:d9:e6:12:7a:90:9c:b2:fc:71:
         51:98:ea:83:b7:86:18:27:f2:08:92:76:7a:03:58:89:fb:a3:
         e0:35:56:22:ef:c7:ce:63:d0:aa:4e:a1:ce:d7:23:b2:d8:62:
         2c:18:cc:93:bd:0f:e7:6a:52:c4:88:43:a3:81:7b:54:df:36:
         07:3b:62:f5:45:97:4a:a2:78:84:16:59:19:0b:9c:de:a3:f2:
         31:f1:80:a9:16:33:02:04:01:53:e5:2a:d0:6c:36:01:89:7e:
         ba:16:d8:68:d0:a1:48:4d:ef:25:c2:75:f2:8d:41:7c:93:1a:
         49:36:64:46:92:86:97:b3:68:8c:6d:33:cc:1f:7e:f2:bc:39:
         d2:eb:4d:7e:fa:7d:5a:05:06:13:2b:61:41:33:27:ad:34:85:
         3c:8f:d7:da:c7:29:69:f1:a4:78:0b:30:95:32:28:bb:1d:3c:
         4e:05:2e:05:ae:48:80:c0:46:82:9f:5f:27:ae:af:6b:51:8b:
         aa:22:37:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:34 2024 by rpki-client on console-fra.rpki-client.org