Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/99IwxzmrgoZmHRze6h3l2P65oS0.roa
File:                     99IwxzmrgoZmHRze6h3l2P65oS0.roa (raw, json)
Hash identifier:          pi/MkuoXNMIkixoKwu6CIV3+a1gDuosNawzxuTMrbnk=
Subject key identifier:   F7:D2:30:C7:39:AB:82:86:66:1D:1C:DE:EA:1D:E5:D8:FE:B9:A1:2D
Certificate issuer:       /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial:       0187FEC0A09DF98431E32540FCBB05D46723
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/99IwxzmrgoZmHRze6h3l2P65oS0.roa
Signing time:             Tue 09 May 2023 04:24:09 +0000
ROA not before:           Tue 09 May 2023 04:24:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44812
IP address blocks:        45.155.165.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 19 May 2023 18:23:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:fe:c0:a0:9d:f9:84:31:e3:25:40:fc:bb:05:d4:67:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
        Validity
            Not Before: May  9 04:24:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f7d230c739ab8286661d1cdeea1de5d8feb9a12d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:73:d9:cd:91:f9:c0:9f:2f:8d:9b:64:15:d9:
                    6e:7f:77:b6:36:31:3e:42:a3:ac:fc:a9:7e:97:f0:
                    51:12:32:7e:c8:f3:9d:3e:3c:c1:64:83:59:50:94:
                    23:24:3f:90:ac:78:9c:d9:1f:d3:33:c9:55:d2:0b:
                    a6:04:d0:3e:55:48:5c:42:81:06:d5:d0:27:79:1f:
                    78:86:86:ec:81:d3:70:ee:8e:40:c3:31:fa:ba:39:
                    cd:f1:8d:09:5c:5f:36:67:ab:94:f1:dd:01:0c:df:
                    ba:39:3a:b4:27:6f:12:55:f3:0e:bd:cb:9f:9d:3b:
                    ec:f9:c2:56:58:64:93:b0:aa:32:1e:85:b3:a4:08:
                    f3:c4:b4:20:5d:2a:54:c0:48:a4:5a:42:27:94:68:
                    de:72:96:ba:44:12:f8:c7:ce:ea:2a:90:54:b4:99:
                    9a:71:14:2a:c5:35:d1:80:df:7e:7a:9e:3c:10:68:
                    04:d7:f1:1b:4d:30:f2:9e:7c:7a:8e:3d:be:5e:01:
                    18:1b:9d:35:b7:9e:42:bc:50:9b:16:3e:37:ba:fb:
                    9f:6a:48:98:4c:95:ec:81:82:df:2c:2c:57:e1:bd:
                    0d:72:15:5c:07:d5:51:ec:6d:85:3b:79:1d:a9:cf:
                    ba:68:07:6c:f7:92:99:f6:83:7b:4d:0a:40:31:70:
                    7f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D2:30:C7:39:AB:82:86:66:1D:1C:DE:EA:1D:E5:D8:FE:B9:A1:2D
            X509v3 Authority Key Identifier:
                keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/99IwxzmrgoZmHRze6h3l2P65oS0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:b8:cd:63:17:1e:1e:63:86:61:85:c5:73:69:7e:d6:60:72:
         9b:ea:c7:64:7e:ef:97:b9:dd:e7:e8:c6:5c:05:ff:c8:ab:9f:
         8f:c1:9c:28:ac:7a:2b:3a:5c:a9:c8:a8:7c:c2:86:f4:3e:90:
         3a:e8:6b:29:35:08:fa:3b:0a:b9:e6:9d:f6:9e:64:fd:3d:82:
         1e:ca:86:a0:3c:da:3f:b3:a8:98:c4:7b:01:75:c7:db:d0:01:
         8e:a2:25:26:60:17:36:56:d8:ab:c8:f7:b2:00:9b:00:67:68:
         b7:45:7d:2d:2b:ad:b0:70:a2:ff:16:eb:0a:6d:2f:fd:cd:09:
         8a:29:00:36:d9:0d:7a:f0:d7:d0:1f:e3:aa:f7:6b:af:23:a4:
         e8:9f:78:c8:b6:52:70:8a:3d:41:1b:aa:4c:88:6b:ac:86:1a:
         b7:cb:76:c2:ca:90:93:a2:ae:40:c9:62:25:62:39:15:48:54:
         bd:5a:6d:f6:97:64:3e:10:a1:48:74:b1:09:69:42:30:05:7e:
         82:02:cb:10:1d:c2:9c:4c:fd:7c:94:46:52:12:3d:7b:9c:ba:
         9c:78:41:d3:c2:c3:65:19:9f:6f:0f:39:ef:ce:21:90:b8:d3:
         90:56:e7:32:3c:84:14:b6:d3:39:5b:8f:af:69:fe:ee:e1:7c:
         3b:1f:8f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:14 2024 by rpki-client on console-ams.rpki-client.org