Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/G-udeHu63_75sQ5VZqohSWe3NeQ.roa
File:                     G-udeHu63_75sQ5VZqohSWe3NeQ.roa (raw, json)
Hash identifier:          N2BIeffFzQx1krOyteWnpRITKSsuT82IBizGHIsu/H0=
Subject key identifier:   1B:EB:9D:78:7B:BA:DF:FE:F9:B1:0E:55:66:AA:21:49:67:B7:35:E4
Certificate issuer:       /CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Certificate serial:       018BED877CE53666EB8858055D146139D6D8
Authority key identifier: A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/G-udeHu63_75sQ5VZqohSWe3NeQ.roa
Signing time:             Mon 20 Nov 2023 16:19:21 +0000
ROA not before:           Mon 20 Nov 2023 16:19:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6461
IP address blocks:        45.94.10.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 21 Nov 2023 14:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ed:87:7c:e5:36:66:eb:88:58:05:5d:14:61:39:d6:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
        Validity
            Not Before: Nov 20 16:19:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1beb9d787bbadffef9b10e5566aa214967b735e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:22:ff:21:8b:b1:5c:a9:ad:44:63:1d:6e:4a:
                    a8:d1:81:47:dc:a4:67:99:88:b0:de:30:77:7f:d8:
                    d7:c8:eb:97:84:78:05:b8:cc:1c:4e:e1:bd:0f:23:
                    1f:e8:aa:bd:62:b4:5f:cb:eb:7b:e3:f2:89:69:76:
                    60:67:e0:8b:44:01:85:78:a6:41:42:ea:66:3e:c4:
                    21:da:49:ab:4e:64:66:f5:98:e2:9e:10:8c:44:c8:
                    61:5c:0a:33:73:23:e8:06:bf:6b:2c:14:64:2f:a7:
                    e0:49:b8:aa:5c:e4:8d:9d:af:ec:37:27:2c:b1:88:
                    fe:23:22:63:af:79:c9:7a:af:d7:b8:86:30:9e:88:
                    1e:7c:e1:7b:ce:2d:6b:4f:d0:af:a0:a9:51:27:01:
                    a7:0d:fd:a6:cc:76:bd:6d:b3:34:e6:7c:71:1d:09:
                    6e:ec:5e:77:17:b2:b5:9d:06:81:3e:11:e1:19:bb:
                    65:15:b3:be:cb:b7:3f:7d:d7:54:65:31:f1:1c:49:
                    cb:9d:a0:b2:8e:d8:e7:1b:a3:84:b9:43:9a:2a:79:
                    3a:2f:b2:1b:1f:b9:85:e5:1c:7b:ea:94:30:6f:75:
                    98:b5:20:db:c9:c0:77:cf:e9:18:ab:52:1b:80:fb:
                    5f:71:d9:ba:97:c2:a0:e8:34:c1:42:8d:f0:50:b1:
                    63:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:EB:9D:78:7B:BA:DF:FE:F9:B1:0E:55:66:AA:21:49:67:B7:35:E4
            X509v3 Authority Key Identifier:
                keyid:A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/G-udeHu63_75sQ5VZqohSWe3NeQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.94.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:c7:f1:51:94:a8:a6:9f:9d:39:54:9b:67:23:22:6e:fb:02:
         4b:fa:3d:f9:c2:ad:ca:f2:1a:a6:e9:84:1d:a5:9a:92:67:b1:
         b2:18:13:3d:cf:4c:6a:b0:23:e1:5e:e9:5e:bb:b3:a2:e5:6a:
         24:81:48:d9:8b:f7:39:b8:8b:63:44:9b:5d:85:33:96:53:1a:
         ca:72:a0:da:86:05:70:8b:53:5b:19:35:ec:0e:ed:ff:d2:46:
         0a:36:c9:06:0d:ae:e5:c2:1c:60:f1:78:9f:e6:62:64:2d:ba:
         c9:05:fa:3f:b8:1d:e7:11:54:4d:7f:c1:ec:dd:09:c7:3d:07:
         4d:19:8e:66:c3:27:d4:1c:a8:06:c9:b6:39:38:18:c3:52:c5:
         87:5c:0e:35:42:d4:52:e4:28:0f:77:7b:48:ef:79:8d:d0:2a:
         2c:f6:80:ae:df:28:61:a7:da:1f:70:29:e7:5e:26:bd:6b:e5:
         2c:cb:5c:40:27:f3:41:44:d6:86:ef:04:09:d4:cf:e1:84:b0:
         7f:0c:ca:32:e6:78:33:4a:54:08:ab:9f:3c:fc:f7:90:46:56:
         07:48:06:fd:a1:8e:51:0a:c0:de:f8:72:a5:56:0f:1e:23:64:
         1f:85:48:69:13:d3:26:9c:18:fa:05:85:6f:1f:11:7f:20:44:
         3d:c3:37:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:21 2024 by rpki-client on console-ams.rpki-client.org