Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/jNZCsv44lK47pMaZxcFgHYlzSP4.roa
File:                     jNZCsv44lK47pMaZxcFgHYlzSP4.roa (raw, json)
Hash identifier:          +DEn7cT2lnHzGggz4xKZVbt00ADHzGe9rZagwRUYsew=
Subject key identifier:   8C:D6:42:B2:FE:38:94:AE:3B:A4:C6:99:C5:C1:60:1D:89:73:48:FE
Certificate issuer:       /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Certificate serial:       018EC4E170FF16EB05D604B83010DE834207
Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/jNZCsv44lK47pMaZxcFgHYlzSP4.roa
Signing time:             Tue 09 Apr 2024 22:01:32 +0000
ROA not before:           Tue 09 Apr 2024 22:01:32 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     16276
IP address blocks:        45.82.82.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 25 Oct 2024 21:21:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:c4:e1:70:ff:16:eb:05:d6:04:b8:30:10:de:83:42:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
        Validity
            Not Before: Apr  9 22:01:32 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8cd642b2fe3894ae3ba4c699c5c1601d897348fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a1:3a:b7:2c:15:2b:dd:b0:74:d8:ee:00:87:
                    41:33:66:ff:21:f0:8a:82:d6:0b:85:8d:c5:c5:a8:
                    8d:30:b6:2f:c7:d9:72:85:b0:99:f0:e2:e9:78:d0:
                    d4:e4:cc:db:d2:e0:2a:ba:48:d8:e6:e7:7b:7c:aa:
                    9e:b8:5d:15:e8:92:02:44:30:66:8c:0b:07:93:1d:
                    74:5e:7c:66:eb:e8:d8:14:f6:1f:aa:af:55:b6:1b:
                    61:5e:b2:97:94:46:75:25:4c:68:1d:89:3b:b0:7e:
                    b1:81:1f:23:06:2c:30:6a:a9:9f:d7:84:e4:8e:7e:
                    fb:ff:88:9e:d2:44:a5:4b:f6:e8:72:91:91:91:be:
                    4c:6f:10:9c:57:66:f2:c1:f5:1d:3c:2d:d0:2a:ed:
                    23:c5:14:f4:3b:5d:80:2c:e8:d9:8c:c2:93:82:5c:
                    9c:dd:f4:14:66:06:ca:36:16:ae:e3:c9:2f:94:de:
                    ca:77:a7:55:3d:37:8a:4b:80:68:10:f6:f2:ad:c0:
                    4c:2d:89:f8:18:12:98:fd:30:c2:cc:e4:5a:41:86:
                    c6:b1:63:2b:25:8e:95:e8:2e:ff:2d:fa:3b:41:62:
                    ab:b9:64:33:29:1e:e0:29:9a:d4:6c:cf:5f:73:bf:
                    40:22:6c:0d:af:85:a2:d7:f7:b2:7b:d5:c1:b4:e3:
                    1d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D6:42:B2:FE:38:94:AE:3B:A4:C6:99:C5:C1:60:1D:89:73:48:FE
            X509v3 Authority Key Identifier:
                keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/jNZCsv44lK47pMaZxcFgHYlzSP4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.82.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:3f:2f:af:83:81:de:99:31:f1:28:0e:0e:85:8a:75:3b:c1:
         00:c7:91:d6:37:c5:2a:00:94:af:df:22:2a:e2:3f:85:d0:cf:
         ac:46:b3:83:f3:77:1e:6b:80:34:d1:25:c9:0b:cd:da:3c:bf:
         8f:2b:94:59:d3:81:8f:05:92:28:8f:5f:c3:9f:9e:b0:1d:b2:
         6a:2c:8f:c3:f3:6c:36:98:01:61:33:29:4f:3e:fb:3c:bc:90:
         1e:95:8f:3b:93:0e:3f:04:11:d0:92:23:cc:e4:a2:ed:ff:29:
         a3:57:32:48:7b:21:be:d0:42:63:96:84:9e:5c:7f:92:13:30:
         39:07:97:75:f6:16:90:45:3a:76:bf:52:e4:c3:07:9c:60:d5:
         99:7e:a6:ff:fc:6c:b2:55:cc:d7:c5:25:37:7e:f6:3a:10:73:
         d0:96:2f:ee:7b:47:bf:94:b4:cb:ac:e3:46:ed:68:1b:02:2e:
         d3:d0:63:f0:6c:da:2f:a3:7c:f6:38:20:28:6d:0f:07:1e:36:
         31:c0:20:f3:7b:99:b0:10:85:ef:43:b6:1e:90:39:19:d1:15:
         9c:62:84:47:25:eb:97:88:12:d5:15:ae:4c:f8:19:4f:29:9a:
         b7:75:07:89:56:f4:a7:1d:38:ae:bf:63:bb:91:5d:7a:3d:a5:
         63:72:79:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 23:58:37 2024 by rpki-client on console-ams.rpki-client.org