Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/i15CUbKxeYse_ut2Qlj75HbzANA.roa
File:                     i15CUbKxeYse_ut2Qlj75HbzANA.roa (raw, json)
Hash identifier:          Ced2+wciteChoT9Ln9Ib8GSbeRbLrUB3gqfRXy4dBiM=
Subject key identifier:   8B:5E:42:51:B2:B1:79:8B:1E:FE:EB:76:42:58:FB:E4:76:F3:00:D0
Certificate issuer:       /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial:       018C96B7D27522232A5EF0453DC4BE311A9C
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/i15CUbKxeYse_ut2Qlj75HbzANA.roa
Signing time:             Sat 23 Dec 2023 12:47:58 +0000
ROA not before:           Sat 23 Dec 2023 12:47:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     150179
IP address blocks:        45.155.227.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:32:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:96:b7:d2:75:22:23:2a:5e:f0:45:3d:c4:be:31:1a:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
        Validity
            Not Before: Dec 23 12:47:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8b5e4251b2b1798b1efeeb764258fbe476f300d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c5:5d:2f:c0:e9:d8:fa:a4:ce:40:e7:71:0a:
                    fe:23:c4:3a:61:a2:14:64:cc:64:c2:e4:a9:28:da:
                    b2:34:d8:dd:a7:aa:d5:f7:48:1b:e6:cd:b0:ed:6c:
                    13:b6:76:af:4b:0e:46:82:10:a0:06:6c:13:d5:a4:
                    c2:9b:2b:71:09:41:a6:d2:44:2f:da:2b:11:39:cd:
                    87:91:91:85:d0:07:e6:c2:d4:da:c4:e2:2f:45:56:
                    ff:23:cb:72:3f:8e:1c:bf:46:87:79:3d:a7:f8:bb:
                    e6:db:90:3c:a9:e1:c0:11:0a:af:33:ef:e4:9c:8f:
                    bc:5f:c2:2b:be:a4:d7:da:4b:29:4c:dc:fb:82:26:
                    a8:6c:d8:73:1a:ed:85:6a:27:90:d2:3f:54:92:df:
                    a6:93:3d:24:64:aa:cf:a0:a7:f9:7a:21:7d:e8:c3:
                    45:81:0e:61:1f:64:71:da:30:63:d6:f7:07:63:3c:
                    46:3c:01:c7:86:0d:3b:5b:83:6f:8c:f7:89:01:8f:
                    f1:50:f1:84:c1:4f:99:bb:a1:e1:92:08:91:81:9c:
                    bc:55:99:33:6d:e3:a1:ef:4f:9b:9a:e6:44:14:13:
                    ee:18:12:29:d3:8a:e7:0a:d5:83:e5:ff:8b:eb:44:
                    7f:11:6b:c6:b2:02:ed:77:39:c7:da:8b:ae:3b:67:
                    18:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:5E:42:51:B2:B1:79:8B:1E:FE:EB:76:42:58:FB:E4:76:F3:00:D0
            X509v3 Authority Key Identifier:
                keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/i15CUbKxeYse_ut2Qlj75HbzANA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:6b:e0:49:02:12:7b:a2:83:24:c1:c1:11:20:5e:be:60:fc:
         3c:00:64:a7:36:4c:b2:7a:b6:a3:45:77:33:d9:93:92:09:9f:
         01:aa:18:bd:ea:9b:6a:7b:93:e1:bc:ae:3e:4a:79:b6:df:83:
         8c:a0:46:44:d8:a5:bb:c8:cc:2d:6c:68:de:79:b2:6b:fb:38:
         5a:cd:a4:05:9b:fd:c2:62:95:d3:fc:3d:3a:aa:9f:79:1a:73:
         60:77:e4:9c:fd:a8:3b:72:d3:86:4e:9f:8f:0f:f6:e8:35:ff:
         95:1e:5a:4a:8f:ed:b0:b2:0a:a8:9b:85:33:71:e3:8e:73:20:
         16:2c:19:8e:fc:97:ed:96:6f:b8:31:00:75:db:f2:aa:21:79:
         7e:88:7c:c5:ec:40:5e:19:67:57:95:3a:32:ce:94:f4:60:90:
         eb:c2:d1:a8:d4:f2:6f:54:e9:a4:cc:15:a9:29:f3:d6:93:c3:
         71:1a:16:04:e2:3e:ce:05:00:84:a9:bb:ed:5f:d3:02:45:50:
         d6:b3:7f:13:42:02:95:98:14:68:41:16:73:2a:56:65:f9:e1:
         76:c3:1a:c3:ba:9b:39:14:d4:7e:1e:20:4b:31:ff:74:f7:be:
         95:0b:8c:51:02:53:cb:1e:fa:36:6e:4f:9e:04:79:eb:73:b8:
         41:11:0f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:50 2024 by rpki-client on console-fra.rpki-client.org