Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VyoGhp1ItZFPhePRKEF7tAKKvKc.roa
File:                     VyoGhp1ItZFPhePRKEF7tAKKvKc.roa (raw, json)
Hash identifier:          xWSeGjEv3IrJAZhyRLKtEWoxkgTZtUrZKTQEx/vsTiY=
Subject key identifier:   57:2A:06:86:9D:48:B5:91:4F:85:E3:D1:28:41:7B:B4:02:8A:BC:A7
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018FA3AB4CDA024FC03CD99D4033FDD61E69
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VyoGhp1ItZFPhePRKEF7tAKKvKc.roa
Signing time:             Thu 23 May 2024 04:17:43 +0000
ROA not before:           Thu 23 May 2024 04:17:43 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     20473
IP address blocks:        45.148.116.0/22 maxlen: 24
                          185.238.188.0/22 maxlen: 24
                          2a0c:3b87:ff00::/40 maxlen: 48
                          2a0c:3b87:ffff::/48 maxlen: 48
                          2a0e:97c0:750::/48 maxlen: 48
                          2a0e:97c0:791::/48 maxlen: 48
                          2a0e:97c0:792::/48 maxlen: 48
                          2a0e:97c1:8a2f::/48 maxlen: 48
                          2a0e:97c4:ac00::/38 maxlen: 48
                          2a0e:b107:9f4::/48 maxlen: 48
                          2a0e:b107:9f6::/48 maxlen: 48
                          2a0e:b107:df2::/48 maxlen: 48
                          2a0e:b107:1870::/48 maxlen: 48
                          2a0e:b107:1b9e::/48 maxlen: 48
                          2a0e:b107:278b::/48 maxlen: 48
                          2a10:ccc3:ccca::/48 maxlen: 48
                          2a10:ccc3:cccc::/48 maxlen: 48
                          2a10:ccc3:ccce::/47 maxlen: 48
                          2a10:ccc6:6660::/44 maxlen: 48
                          2a10:ccc7:9000::/38 maxlen: 48

Validation:               Failed, certificate revoked on Thu 30 May 2024 13:46:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:a3:ab:4c:da:02:4f:c0:3c:d9:9d:40:33:fd:d6:1e:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: May 23 04:17:43 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=572a06869d48b5914f85e3d128417bb4028abca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c4:73:4d:15:ea:ce:d5:fe:29:95:31:05:10:
                    98:de:ff:a2:43:29:ee:db:06:af:2a:8f:ba:36:c0:
                    2e:61:aa:dd:21:08:09:76:ce:0b:1e:5d:ae:7b:bd:
                    ed:1a:ef:58:be:67:c8:ea:2f:e2:12:ef:e0:b6:29:
                    27:66:05:6f:3c:dc:d9:71:33:10:97:5b:1e:1d:f9:
                    66:f8:14:4d:5d:d8:d4:b4:9c:95:ae:3b:30:5a:89:
                    a9:73:b7:87:6f:7d:b3:fa:d0:27:54:50:7e:bf:dc:
                    c3:12:05:0e:5c:35:6c:e2:00:65:2c:ed:51:72:09:
                    fe:cc:4c:e9:3b:e3:60:79:99:01:e8:11:06:e5:7a:
                    fb:3d:37:8d:4d:81:ef:18:6b:d7:8c:04:81:30:18:
                    cf:86:e9:89:f1:25:71:70:79:9b:d0:1f:21:f9:d9:
                    5c:37:55:37:af:28:b0:9a:e9:19:51:fd:12:b1:df:
                    63:5f:04:21:1c:59:47:81:e7:b4:67:10:66:81:fe:
                    ab:ad:25:44:61:96:26:84:fc:3f:7c:00:e6:68:ad:
                    20:c9:a0:da:56:5b:c1:5b:cd:07:85:37:4d:3e:95:
                    88:3b:94:99:c4:c6:4f:51:d1:24:aa:7c:a6:a7:0e:
                    d7:77:d9:44:35:f2:f2:15:37:32:f4:c8:13:3f:31:
                    76:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:2A:06:86:9D:48:B5:91:4F:85:E3:D1:28:41:7B:B4:02:8A:BC:A7
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/VyoGhp1ItZFPhePRKEF7tAKKvKc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.148.116.0/22
                  185.238.188.0/22
                IPv6:
                  2a0c:3b87:ff00::/40
                  2a0e:97c0:750::/48
                  2a0e:97c0:791::-2a0e:97c0:792:ffff:ffff:ffff:ffff:ffff
                  2a0e:97c1:8a2f::/48
                  2a0e:97c4:ac00::/38
                  2a0e:b107:9f4::/48
                  2a0e:b107:9f6::/48
                  2a0e:b107:df2::/48
                  2a0e:b107:1870::/48
                  2a0e:b107:1b9e::/48
                  2a0e:b107:278b::/48
                  2a10:ccc3:ccca::/48
                  2a10:ccc3:cccc::/48
                  2a10:ccc3:ccce::/47
                  2a10:ccc6:6660::/44
                  2a10:ccc7:9000::/38

    Signature Algorithm: sha256WithRSAEncryption
         14:0a:97:d9:80:5f:be:7b:b1:d8:90:8f:ff:0a:d2:e9:00:d6:
         34:18:d6:6d:78:2f:51:7a:d3:e7:b7:dd:1f:e1:ad:01:4f:b6:
         72:29:e5:6d:38:b8:7e:a9:e8:4c:c5:ef:f8:ac:34:e6:a7:cc:
         c5:5a:47:98:dd:35:9a:03:f2:8a:cf:5b:2f:7a:01:10:cb:f3:
         4b:9f:55:66:57:99:82:17:3e:52:1d:58:c2:8e:47:95:ea:41:
         52:1a:87:bc:d9:07:8a:bd:1f:c5:70:ec:85:ab:40:c8:66:46:
         a9:77:af:bc:34:9a:9e:46:d8:4e:6e:4a:04:d2:c5:88:08:8c:
         3f:9e:a0:41:8b:97:c9:72:86:e8:db:73:40:fb:d5:56:5a:ab:
         ed:96:0b:23:74:ba:50:67:1d:17:ae:a3:cf:84:f8:fe:c2:d1:
         f6:25:2c:34:a6:9d:d0:b7:5e:39:39:88:81:56:7a:1e:c9:a6:
         0a:84:2d:1a:5d:d7:d3:ad:b4:e2:1d:3e:6e:80:dd:30:4f:44:
         7b:79:52:df:4a:c3:7a:98:48:0b:1b:43:6d:18:1b:36:71:86:
         aa:df:e9:47:0d:3c:15:59:1f:06:bf:d8:1e:77:d2:2f:aa:97:
         f1:19:b5:e0:d8:4d:57:ea:d8:31:77:ac:a1:9b:33:51:bf:92:
         22:9b:9d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:04 2024 by rpki-client on console-ams.rpki-client.org