Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/TxtUGeK3BD61VMaSA18WC-HUiYc.roa
File:                     TxtUGeK3BD61VMaSA18WC-HUiYc.roa (raw, json)
Hash identifier:          RkNOABjfEO11lXFOD5tIplzyUWlwESElSC6HxDHCUGM=
Subject key identifier:   4F:1B:54:19:E2:B7:04:3E:B5:54:C6:92:03:5F:16:0B:E1:D4:89:87
Certificate issuer:       /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial:       018DADBE8B47A19CE5BF5E5F8DF5590E191C
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/TxtUGeK3BD61VMaSA18WC-HUiYc.roa
Signing time:             Thu 15 Feb 2024 17:09:22 +0000
ROA not before:           Thu 15 Feb 2024 17:09:22 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     62240
IP address blocks:        45.84.178.0/24 maxlen: 24
                          45.129.1.0/24 maxlen: 24
                          45.129.129.0/24 maxlen: 24
                          45.129.130.0/24 maxlen: 24
                          45.129.131.0/24 maxlen: 24
                          45.132.51.0/24 maxlen: 24
                          45.138.4.0/24 maxlen: 24
                          45.138.5.0/24 maxlen: 24
                          45.138.6.0/24 maxlen: 24
                          45.142.37.0/24 maxlen: 24
                          45.146.26.0/24 maxlen: 24
                          45.159.85.0/24 maxlen: 24
                          80.68.150.0/24 maxlen: 24
                          91.247.78.0/24 maxlen: 24
                          92.119.192.0/24 maxlen: 24
                          94.103.179.0/24 maxlen: 24
                          176.222.58.0/24 maxlen: 24
                          185.222.41.0/24 maxlen: 24
                          193.32.164.0/24 maxlen: 24
                          193.32.165.0/24 maxlen: 24
                          193.32.166.0/24 maxlen: 24
                          193.32.167.0/24 maxlen: 24
                          193.36.231.0/24 maxlen: 24
                          193.53.169.0/24 maxlen: 24
                          193.58.176.0/24 maxlen: 24
                          193.58.177.0/24 maxlen: 24
                          193.163.16.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 19 Feb 2024 17:53:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:ad:be:8b:47:a1:9c:e5:bf:5e:5f:8d:f5:59:0e:19:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
        Validity
            Not Before: Feb 15 17:09:22 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4f1b5419e2b7043eb554c692035f160be1d48987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ea:16:2a:f6:d9:b5:75:21:34:07:b3:f9:9f:
                    73:a3:8d:ea:9d:ea:7e:f5:93:dc:18:40:0a:9b:2b:
                    e8:59:26:10:03:d6:7f:5b:ed:a5:3b:cb:b5:73:3f:
                    8f:44:b4:fa:ba:80:3b:ca:a8:54:5f:26:e2:2d:0e:
                    be:cf:0e:c3:4e:d7:3c:d0:99:1c:55:e5:d5:38:74:
                    d1:b3:59:14:a3:c5:26:4b:46:36:72:e5:f4:20:a2:
                    01:95:a4:f3:71:b3:a5:ea:f5:6c:f6:62:f1:3b:bd:
                    8a:20:bc:34:bc:4f:f0:8f:47:8c:83:5d:da:a3:f4:
                    b6:11:8b:2d:b3:20:b8:3d:03:eb:c4:c3:82:5e:96:
                    6e:12:02:01:14:d4:8d:85:9d:e9:8a:df:c3:4e:a0:
                    c0:00:62:c5:c8:38:fe:55:49:87:e9:49:66:80:c4:
                    9f:b1:16:9a:9b:aa:d4:fa:80:40:27:4a:5c:4e:96:
                    fa:a7:6e:be:33:6e:a1:99:e5:8a:97:53:13:6e:b5:
                    68:7a:fc:ba:9e:37:78:e2:a9:3c:08:14:40:9f:d6:
                    f5:d0:b7:79:c4:e3:ce:7e:2a:38:25:32:e8:fa:7f:
                    88:f7:47:6d:de:6a:1c:2c:b0:6d:ed:81:4c:a8:63:
                    a5:36:a2:80:b2:22:68:98:e2:b5:d1:0d:74:41:19:
                    97:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:1B:54:19:E2:B7:04:3E:B5:54:C6:92:03:5F:16:0B:E1:D4:89:87
            X509v3 Authority Key Identifier:
                keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/TxtUGeK3BD61VMaSA18WC-HUiYc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.84.178.0/24
                  45.129.1.0/24
                  45.129.129.0-45.129.131.255
                  45.132.51.0/24
                  45.138.4.0-45.138.6.255
                  45.142.37.0/24
                  45.146.26.0/24
                  45.159.85.0/24
                  80.68.150.0/24
                  91.247.78.0/24
                  92.119.192.0/24
                  94.103.179.0/24
                  176.222.58.0/24
                  185.222.41.0/24
                  193.32.164.0/22
                  193.36.231.0/24
                  193.53.169.0/24
                  193.58.176.0/23
                  193.163.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:86:b5:36:4f:ce:a4:0b:d4:17:b9:18:03:39:89:c7:77:af:
         73:0a:f4:7b:83:f1:ce:cd:2d:ad:e7:92:13:3e:b1:32:a9:f3:
         d2:9e:83:5e:13:7b:be:24:94:c1:20:0c:a9:c2:77:ee:9e:2b:
         04:90:63:39:c7:8a:19:74:71:93:b8:b7:ed:49:ea:9e:cc:a7:
         c4:59:22:cf:f1:d8:6c:63:91:06:34:8e:83:8a:5a:53:0f:84:
         03:85:6c:64:02:4f:f4:14:e1:68:e7:bb:6d:cd:1c:4c:b2:c0:
         18:68:56:5d:e0:ad:5b:f1:71:fc:28:95:63:6b:a4:7d:ac:f4:
         f2:f4:69:c1:77:64:75:8c:1c:cf:0c:a1:9f:86:37:ce:ab:a9:
         05:04:a0:02:ba:f7:24:9d:41:e1:c6:7c:15:a3:4a:b2:87:a0:
         78:5a:6e:f1:59:59:8f:83:10:f8:af:74:c7:fc:a0:5e:8d:22:
         6a:ff:17:a9:8b:31:42:7e:aa:f8:d2:5b:e4:7d:f5:e9:22:66:
         74:b1:60:14:dc:5f:a0:d9:6c:03:3d:1d:c0:0e:bc:24:00:cd:
         c2:a2:c9:19:27:57:fa:23:74:4f:80:f3:25:90:8d:2e:21:cb:
         72:4e:8f:b8:86:f0:36:0e:57:83:62:4e:21:cb:32:ba:71:c6:
         74:41:45:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:48 2024 by rpki-client on console-ams.rpki-client.org