Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/26Ywk71c3WmtkvXytPjcAT6CwXE.roa
File:                     26Ywk71c3WmtkvXytPjcAT6CwXE.roa (raw, json)
Hash identifier:          eLRPNbmMAU4EiJEPAWNjja0UuVYJqSMjmeEUwBT6SeI=
Subject key identifier:   DB:A6:30:93:BD:5C:DD:69:AD:92:F5:F2:B4:F8:DC:01:3E:82:C1:71
Certificate issuer:       /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial:       018CC8DFA746240AECC3E23153E49F9B0A5D
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/26Ywk71c3WmtkvXytPjcAT6CwXE.roa
Signing time:             Tue 02 Jan 2024 06:32:29 +0000
ROA not before:           Tue 02 Jan 2024 06:32:29 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     141759
IP address blocks:        45.134.145.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 01 Feb 2024 02:49:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:df:a7:46:24:0a:ec:c3:e2:31:53:e4:9f:9b:0a:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
        Validity
            Not Before: Jan  2 06:32:29 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=dba63093bd5cdd69ad92f5f2b4f8dc013e82c171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e1:f5:7a:38:dc:83:76:12:ea:13:5b:81:eb:
                    7a:27:b6:73:2b:72:71:4c:2b:f5:d2:cb:00:ed:03:
                    79:b5:06:c2:74:37:7e:a7:44:84:4c:01:6a:26:c7:
                    07:20:9b:78:2d:f7:a9:c0:9d:62:aa:92:43:8d:4c:
                    f2:c4:d2:18:58:b7:b4:b7:aa:18:fe:0e:ab:3f:d0:
                    6e:2a:3d:76:95:cc:d3:0a:cc:df:7d:14:8f:45:f1:
                    76:34:ec:b6:73:06:01:0f:1d:ca:a8:cc:01:a0:a9:
                    90:1b:79:d5:99:74:a8:de:ec:6f:ef:e3:20:ac:44:
                    dc:ed:91:02:83:46:1d:5f:35:6e:4b:77:f4:8a:a9:
                    b9:65:43:d3:e0:f9:38:ec:93:25:3d:42:ab:dc:f7:
                    a3:69:4f:f7:89:18:84:ee:6c:e2:10:a1:2d:6d:7e:
                    d3:e2:d5:4c:90:a8:a9:5d:70:1b:9e:69:05:fe:d8:
                    0b:02:51:7d:6c:85:3c:8a:fd:1e:58:31:ca:3c:83:
                    30:1d:5e:58:e8:89:2a:dc:9a:b7:65:74:4d:d4:e3:
                    ec:04:4e:8a:ec:05:fd:74:ef:2c:53:fb:b4:e6:7b:
                    bb:7e:51:ea:f3:9c:e8:27:48:fb:ec:82:59:99:04:
                    8b:c6:c6:bf:2d:87:68:1a:69:e2:c9:6d:56:9c:50:
                    f2:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A6:30:93:BD:5C:DD:69:AD:92:F5:F2:B4:F8:DC:01:3E:82:C1:71
            X509v3 Authority Key Identifier:
                keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/26Ywk71c3WmtkvXytPjcAT6CwXE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.134.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:d6:ef:96:6d:56:ee:06:58:ba:21:bf:bf:d2:15:ba:dd:e9:
         b8:d4:34:61:db:72:2e:c4:08:cf:ce:5b:f6:fa:2b:35:2b:20:
         3e:86:a9:43:eb:65:26:ca:47:2f:ac:00:cc:39:1c:74:81:79:
         1b:a3:c3:10:32:d0:2d:2a:cf:4a:b1:2f:08:94:15:5f:dd:e1:
         f3:7a:02:d8:1f:5a:89:c0:11:99:cf:dc:fd:44:8f:f5:a1:ce:
         53:cb:ea:2e:d4:92:3d:ad:17:3d:10:09:d2:e4:65:8e:cd:52:
         29:91:50:e7:3c:fc:63:2e:83:ee:d6:7c:39:66:34:d0:1d:6f:
         4e:c3:a0:35:7a:4f:77:f5:38:58:a2:7e:7a:c4:6e:24:2d:e9:
         39:aa:3d:e8:c1:c9:3e:6e:88:5a:58:00:2f:89:0c:14:de:b7:
         f7:68:1f:06:54:f2:dc:93:bb:53:ae:02:24:0d:66:1f:d2:d7:
         61:95:62:b7:b1:db:63:a2:62:5d:25:64:b1:4f:4f:57:ed:03:
         84:29:f1:a5:72:5f:25:fb:11:af:89:e5:bc:27:ae:48:e9:f0:
         29:5c:5d:ee:5a:f8:a2:19:15:58:5e:f4:a3:93:3b:53:cd:c3:
         19:42:9d:9c:94:11:e3:97:15:d7:27:c6:05:b4:9c:e0:05:07:
         86:a7:b0:a9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI36dGJArsw+IxU+SfmwpdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjQwMTAyMDYzMjI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYmE2MzA5M2JkNWNkZDY5YWQ5MmY1ZjJiNGY4ZGMwMTNlODJjMTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneH1ejjcg3YS6hNbget6J7ZzK3Jx
TCv10ssA7QN5tQbCdDd+p0SETAFqJscHIJt4LfepwJ1iqpJDjUzyxNIYWLe0t6oY
/g6rP9BuKj12lczTCszffRSPRfF2NOy2cwYBDx3KqMwBoKmQG3nVmXSo3uxv7+Mg
rETc7ZECg0YdXzVuS3f0iqm5ZUPT4Pk47JMlPUKr3PejaU/3iRiE7mziEKEtbX7T
4tVMkKipXXAbnmkF/tgLAlF9bIU8iv0eWDHKPIMwHV5Y6Ikq3Jq3ZXRN1OPsBE6K
7AX9dO8sU/u05nu7flHq85zoJ0j77IJZmQSLxsa/LYdoGmniyW1WnFDyQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNumMJO9XN1prZL18rT43AE+gsFxMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvMjZZd2s3MWMzV210a3ZYeXRQamNBVDZDd1hFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYaRMA0G
CSqGSIb3DQEBCwUAA4IBAQC/1u+WbVbuBli6Ib+/0hW63em41DRh23IuxAjPzlv2
+is1KyA+hqlD62UmykcvrADMORx0gXkbo8MQMtAtKs9KsS8IlBVf3eHzegLYH1qJ
wBGZz9z9RI/1oc5Ty+ou1JI9rRc9EAnS5GWOzVIpkVDnPPxjLoPu1nw5ZjTQHW9O
w6A1ek939ThYon56xG4kLek5qj3owck+bohaWAAviQwU3rf3aB8GVPLck7tTrgIk
DWYf0tdhlWK3sdtjomJdJWSxT09X7QOEKfGlcl8l+xGvieW8J65I6fApXF3uWvii
GRVYXvSjkztTzcMZQp2clBHjlxXXJ8YFtJzgBQeGp7Cp
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:50 2024 by rpki-client on console-fra.rpki-client.org