Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Jlwg7oD_Ts1_8Eopv3wpaTdHUY0.roa
File:                     Jlwg7oD_Ts1_8Eopv3wpaTdHUY0.roa (raw, json)
Hash identifier:          L1XyuOx0mRNtuI7+XJnps1hwvI5W3nGcIIS+PMSswCw=
Subject key identifier:   26:5C:20:EE:80:FF:4E:CD:7F:F0:4A:29:BF:7C:29:69:37:47:51:8D
Certificate issuer:       /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial:       018C96B7D137356B30C29FF217D683702BC5
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Jlwg7oD_Ts1_8Eopv3wpaTdHUY0.roa
Signing time:             Sat 23 Dec 2023 12:47:58 +0000
ROA not before:           Sat 23 Dec 2023 12:47:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14315
IP address blocks:        45.155.226.0/24 maxlen: 24
                          45.155.224.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:32:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:96:b7:d1:37:35:6b:30:c2:9f:f2:17:d6:83:70:2b:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
        Validity
            Not Before: Dec 23 12:47:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=265c20ee80ff4ecd7ff04a29bf7c29693747518d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:83:34:3c:41:e1:c3:78:5e:6c:a2:2b:c9:1b:
                    c4:b2:84:11:98:39:be:94:54:2d:52:fb:c1:93:6a:
                    59:00:ea:dc:0e:a4:99:26:93:c9:0c:ec:cb:2e:fe:
                    10:56:b3:3b:39:3c:ad:1d:00:7d:7a:67:81:b7:b6:
                    f8:21:2e:f8:54:e3:4e:6c:2d:b2:4c:da:5d:f4:94:
                    c9:1b:b6:25:60:b4:6c:d2:5b:c4:02:99:9f:f9:ec:
                    35:1a:70:af:78:9d:80:56:1a:bd:74:f0:a0:07:69:
                    a2:e8:92:9c:a3:ef:6c:57:ee:31:06:8a:49:80:a4:
                    a6:e3:b5:52:2a:ec:97:af:02:d9:12:03:d9:96:38:
                    1d:2e:4d:b0:4a:1c:e1:2e:ce:c5:1b:0a:8f:e8:f3:
                    b2:4f:63:63:c0:91:09:49:81:9c:10:6d:8c:c3:b7:
                    ac:82:ca:3b:67:83:c1:27:09:ce:92:b8:6f:57:23:
                    89:16:25:60:f5:71:83:94:08:74:29:bb:73:49:4a:
                    93:0d:a8:1d:fb:a9:1e:26:25:3d:14:13:d9:70:97:
                    cb:5e:1e:0d:77:a0:bb:65:f6:c3:02:3d:2a:8c:04:
                    4b:e4:a8:03:93:76:87:66:24:76:e8:e9:40:18:d6:
                    c8:14:80:e8:56:c2:87:49:2b:d0:d4:e3:86:83:80:
                    82:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:5C:20:EE:80:FF:4E:CD:7F:F0:4A:29:BF:7C:29:69:37:47:51:8D
            X509v3 Authority Key Identifier:
                keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/Jlwg7oD_Ts1_8Eopv3wpaTdHUY0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.224.0/24
                  45.155.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:87:2d:55:2a:b3:21:2f:76:7b:22:43:1b:90:c1:18:66:ac:
         99:f3:93:ba:38:22:db:25:85:e6:37:ea:5c:ff:81:18:2a:b8:
         de:48:d4:41:1d:10:fe:32:fb:3d:f8:74:f5:a3:d4:ef:1d:90:
         ff:1e:65:1c:42:81:8a:6a:a8:6c:c1:bb:03:d6:3d:08:55:21:
         20:39:33:76:00:16:68:6c:cc:6c:a4:8d:fc:92:91:91:dc:0a:
         a3:22:0b:5c:e0:ee:c1:e3:92:6f:9d:2b:49:c8:61:58:e5:8e:
         a7:4d:30:6c:8e:c0:90:b3:3e:fb:e3:3b:41:4c:b5:7b:12:76:
         ea:e5:bb:1e:d2:d2:c1:5e:16:fa:f7:c0:b9:be:b6:c6:60:11:
         bd:f2:d9:24:19:a6:a8:a6:9c:e1:20:03:1b:48:ee:78:36:7d:
         b3:c8:29:88:16:20:e5:5a:6c:27:83:de:af:8e:58:87:c2:7f:
         1d:b2:d6:34:a4:9d:40:28:ab:f0:70:0c:5d:4e:15:ab:70:01:
         23:b8:2c:a1:ac:72:ee:23:9f:f7:35:1e:2a:eb:c6:d7:b5:89:
         e5:81:50:f1:92:ae:d8:c4:cd:11:50:fe:95:c4:2a:2c:60:32:
         55:19:73:ea:af:b7:35:36:16:e2:90:1a:07:eb:64:82:8b:e6:
         55:3a:36:46
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYyWt9E3NWswwp/yF9aDcCvFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjMxMjIzMTI0NzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjVjMjBlZTgwZmY0ZWNkN2ZmMDRhMjliZjdjMjk2OTM3NDc1MThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYM0PEHhw3hebKIryRvEsoQRmDm+
lFQtUvvBk2pZAOrcDqSZJpPJDOzLLv4QVrM7OTytHQB9emeBt7b4IS74VONObC2y
TNpd9JTJG7YlYLRs0lvEApmf+ew1GnCveJ2AVhq9dPCgB2mi6JKco+9sV+4xBopJ
gKSm47VSKuyXrwLZEgPZljgdLk2wShzhLs7FGwqP6POyT2NjwJEJSYGcEG2Mw7es
gso7Z4PBJwnOkrhvVyOJFiVg9XGDlAh0KbtzSUqTDagd+6keJiU9FBPZcJfLXh4N
d6C7ZfbDAj0qjARL5KgDk3aHZiR26OlAGNbIFIDoVsKHSSvQ1OOGg4CCVQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCZcIO6A/07Nf/BKKb98KWk3R1GNMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvSmx3ZzdvRF9UczFfOEVvcHYzd3BhVGRIVVkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZvgAwQA
LZviMA0GCSqGSIb3DQEBCwUAA4IBAQCVhy1VKrMhL3Z7IkMbkMEYZqyZ85O6OCLb
JYXmN+pc/4EYKrjeSNRBHRD+Mvs9+HT1o9TvHZD/HmUcQoGKaqhswbsD1j0IVSEg
OTN2ABZobMxspI38kpGR3AqjIgtc4O7B45JvnStJyGFY5Y6nTTBsjsCQsz774ztB
TLV7Enbq5bse0tLBXhb698C5vrbGYBG98tkkGaaoppzhIAMbSO54Nn2zyCmIFiDl
Wmwng96vjliHwn8dstY0pJ1AKKvwcAxdThWrcAEjuCyhrHLuI5/3NR4q68bXtYnl
gVDxkq7YxM0RUP6VxCosYDJVGXPqr7c1NhbikBoH62SCi+ZVOjZG
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:04 2024 by rpki-client on console-ams.rpki-client.org