Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/5Buvu8eIOhcSPQiNIrvLcypWVYw.roa
File:                     5Buvu8eIOhcSPQiNIrvLcypWVYw.roa (raw, json)
Hash identifier:          AQ6bTobf2WR9b4aF7l4MKTRj+i/SiQH6bOsMQMb+hUM=
Subject key identifier:   E4:1B:AF:BB:C7:88:3A:17:12:3D:08:8D:22:BB:CB:73:2A:56:55:8C
Certificate issuer:       /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial:       018571DE7857921B4BC0FF996B447BD92C72
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/5Buvu8eIOhcSPQiNIrvLcypWVYw.roa
Signing time:             Mon 02 Jan 2023 09:44:43 +0000
ROA not before:           Mon 02 Jan 2023 09:44:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     134963
IP address blocks:        45.134.146.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Sun 22 Oct 2023 02:53:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:de:78:57:92:1b:4b:c0:ff:99:6b:44:7b:d9:2c:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
        Validity
            Not Before: Jan  2 09:44:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e41bafbbc7883a17123d088d22bbcb732a56558c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5d:6f:b5:72:3b:b3:fd:10:c7:56:a3:e1:28:
                    a8:b5:b3:cd:15:60:1f:ff:ce:c7:89:e4:47:37:08:
                    08:c9:dd:0d:c0:c8:e9:c9:65:7a:65:fe:8f:a4:2e:
                    16:29:52:74:c8:98:da:a4:2c:c4:03:24:e1:bd:85:
                    6f:04:ca:cc:23:1c:e6:09:e0:89:c1:0b:26:bf:ca:
                    3d:fe:e6:02:4d:0d:20:ec:cc:b7:43:bf:0f:c1:a0:
                    f0:ed:82:a3:6f:cd:e7:b4:2a:9b:82:c1:2f:e8:64:
                    19:69:30:86:33:59:7e:98:fd:e0:ac:3d:93:a5:73:
                    62:af:8b:8a:c0:10:09:68:4a:4f:81:3d:23:a4:c2:
                    17:cf:62:5b:95:7d:46:b1:13:0b:8b:b7:44:8b:39:
                    02:71:89:da:9f:1c:50:14:15:95:78:44:04:e5:e4:
                    84:e0:9b:1c:c2:72:46:53:8a:99:6c:96:61:2c:3c:
                    a6:31:79:30:b0:48:fa:ba:be:2f:81:27:54:8c:69:
                    b2:10:77:eb:59:46:82:42:08:05:4a:f5:59:12:ec:
                    e0:6c:0c:cc:65:34:96:23:dc:82:ee:fa:6c:2b:22:
                    87:29:67:ed:0a:c4:69:13:0b:96:2f:65:7a:9b:52:
                    d1:f9:cb:0c:c6:c2:5a:93:bc:6f:94:59:de:8d:03:
                    67:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:1B:AF:BB:C7:88:3A:17:12:3D:08:8D:22:BB:CB:73:2A:56:55:8C
            X509v3 Authority Key Identifier:
                keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/5Buvu8eIOhcSPQiNIrvLcypWVYw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.134.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:76:70:cf:8b:7c:26:ff:26:65:78:1c:ff:45:74:a6:e5:2d:
         92:62:e1:6d:5a:73:a1:65:9c:67:83:c8:c3:c6:1e:87:a3:3c:
         f6:b2:2c:39:40:37:25:90:5a:49:3a:77:83:4f:69:3e:ba:f9:
         ad:b7:28:89:8f:b6:53:9d:33:24:e1:00:8b:77:bd:8e:a0:c9:
         02:69:be:cc:d6:77:a8:02:bb:f6:4c:bc:c1:22:9c:f2:94:d2:
         ba:b5:2a:15:77:26:47:09:16:76:38:ff:5a:0a:c2:a0:9b:e6:
         01:9c:e2:70:dd:62:9a:c7:78:10:b1:11:c7:4c:53:72:85:49:
         c4:7a:b1:1e:5a:73:7a:12:50:18:c3:b7:0d:55:c1:b6:72:2c:
         45:71:c1:e9:a7:c5:0c:f2:16:a5:1a:ad:03:a9:52:51:d4:15:
         14:55:da:9b:6b:b9:91:1b:e9:e2:9c:ec:a4:70:8f:f2:66:6e:
         5f:05:ce:08:77:9e:12:60:a7:b8:7d:d6:d5:95:d2:2a:d4:cb:
         8c:43:d9:e2:1c:0e:84:44:80:42:6d:3d:17:28:ae:bd:81:95:
         18:23:d0:32:a1:09:8a:9c:fc:61:31:4f:49:e6:a4:06:7f:fe:
         a8:a4:7c:1e:63:18:d0:ba:fe:ee:2b:7e:89:6b:25:ee:4d:97:
         0c:fd:8c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:50 2024 by rpki-client on console-fra.rpki-client.org