Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/B1Zt58VKuLyfFdABRPJuGZ_jB48.roa
File:                     B1Zt58VKuLyfFdABRPJuGZ_jB48.roa (raw, json)
Hash identifier:          PyHeJ5FG7zsioyJqlN9YKxtPgOzyJKVLxNtekwjHca0=
Subject key identifier:   07:56:6D:E7:C5:4A:B8:BC:9F:15:D0:01:44:F2:6E:19:9F:E3:07:8F
Certificate issuer:       /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial:       018CC794E9248E8EF70523D75BFF347DC45A
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/B1Zt58VKuLyfFdABRPJuGZ_jB48.roa
Signing time:             Tue 02 Jan 2024 00:31:14 +0000
ROA not before:           Tue 02 Jan 2024 00:31:14 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     7106
IP address blocks:        45.141.15.0/24 maxlen: 24
                          93.177.109.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 05 Oct 2024 20:20:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:94:e9:24:8e:8e:f7:05:23:d7:5b:ff:34:7d:c4:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
        Validity
            Not Before: Jan  2 00:31:14 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=07566de7c54ab8bc9f15d00144f26e199fe3078f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0d:08:aa:eb:0b:19:7e:11:56:f7:70:6d:de:
                    09:19:8b:9a:b6:c9:b9:d2:b9:fe:3f:56:65:c9:ba:
                    0b:8c:20:d2:3e:4f:5f:1f:9d:91:d4:e9:52:1a:ae:
                    5b:49:da:96:fa:76:e5:58:2c:1a:45:2f:fd:72:aa:
                    ff:4c:70:6c:0e:b9:9e:23:67:04:f3:37:3f:2f:05:
                    0e:e2:4c:7a:f9:a7:f9:3d:aa:05:b0:63:a8:d5:79:
                    8d:11:fc:59:fb:7f:b1:c7:9f:01:05:e8:a3:88:15:
                    ef:f3:1d:10:1a:a7:c0:ff:80:7c:38:54:82:6e:80:
                    b2:50:4f:88:0a:9d:c5:79:8b:a0:18:88:e5:2e:a5:
                    5f:da:5b:f7:4f:e9:2f:32:69:36:15:ae:bd:f6:25:
                    16:c6:2f:3d:67:31:49:3b:4f:ff:44:51:fa:de:10:
                    b3:89:96:00:55:93:d1:20:74:00:57:fc:5a:34:51:
                    39:0c:6f:62:9a:79:f0:5d:b5:08:c6:8f:35:8e:62:
                    b8:53:97:a7:46:4a:f8:8a:29:b1:ce:f4:45:96:a9:
                    62:9e:28:e6:37:27:05:b4:a1:84:7b:d4:59:e6:fe:
                    ae:99:01:cb:11:fc:97:f3:8d:ca:8f:63:e5:0a:12:
                    21:bc:d5:63:56:39:94:2e:2d:6f:67:f9:fc:2b:52:
                    6a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:56:6D:E7:C5:4A:B8:BC:9F:15:D0:01:44:F2:6E:19:9F:E3:07:8F
            X509v3 Authority Key Identifier:
                keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/B1Zt58VKuLyfFdABRPJuGZ_jB48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.141.15.0/24
                  93.177.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:a1:04:b2:08:90:9c:86:8c:03:51:16:08:72:90:4b:3e:85:
         d3:91:be:f1:ea:bd:d4:27:e9:2d:b1:71:f8:ab:03:0f:b6:88:
         60:0a:5d:73:6f:65:f3:23:25:e2:17:c7:7f:83:83:89:e1:a7:
         6a:06:d1:53:92:33:6b:58:f1:94:ed:7c:2a:e1:fe:8b:ba:3c:
         d3:e0:d1:dc:a7:66:0e:a0:0a:fd:1c:f4:3c:30:5a:74:f4:2f:
         83:4d:d8:7c:4c:ec:83:7c:87:c1:73:85:d2:05:dc:30:9c:48:
         0b:55:03:fe:d8:d2:78:82:ef:9d:7a:54:04:85:88:37:cb:2f:
         d3:5c:95:14:90:86:f0:9b:75:d5:d3:7c:47:29:a9:91:36:d2:
         eb:81:4a:71:0b:6e:e2:d3:c5:39:3f:7b:31:2b:bb:4f:99:21:
         c7:d6:ac:40:a3:b5:0c:21:a8:23:ed:92:ad:73:34:d5:c0:5b:
         36:25:42:5b:80:51:c3:70:20:f3:cd:21:bd:46:d1:f3:af:b4:
         99:9f:98:08:84:ae:f6:ea:f7:be:29:82:32:2a:d4:17:0a:84:
         90:78:6f:b7:eb:e4:f9:35:c4:40:83:96:4f:69:27:e5:b4:7d:
         0b:33:48:d2:b5:60:16:dc:c3:ec:49:3b:af:9a:63:a3:f8:cb:
         e8:ae:56:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 5 23:23:34 2024 by rpki-client on console-fra.rpki-client.org