Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/EYQ1ZlBtD4PSdklQD-6v7dTH-V0.roa
File:                     EYQ1ZlBtD4PSdklQD-6v7dTH-V0.roa (raw, json)
Hash identifier:          OFVK+MGBCy7q9VhU7GcgpmWgK+u04saxqjZWDiJ9XX0=
Subject key identifier:   11:84:35:66:50:6D:0F:83:D2:76:49:50:0F:EE:AF:ED:D4:C7:F9:5D
Certificate issuer:       /CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68
Certificate serial:       018C39B68FF3CCD3D8B161FA2EDECD8FDBD2
Authority key identifier: 84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/EYQ1ZlBtD4PSdklQD-6v7dTH-V0.roa
Signing time:             Tue 05 Dec 2023 11:21:54 +0000
ROA not before:           Tue 05 Dec 2023 11:21:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     215910
IP address blocks:        45.90.80.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:31:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:39:b6:8f:f3:cc:d3:d8:b1:61:fa:2e:de:cd:8f:db:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68
        Validity
            Not Before: Dec  5 11:21:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=11843566506d0f83d27649500feeafedd4c7f95d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:05:d8:2b:2a:05:0d:f8:9c:02:d8:07:fb:9c:
                    c1:6f:e3:c6:0e:a4:2e:70:7d:a0:b7:5f:d0:d9:25:
                    e8:5b:f7:5c:f6:c7:22:7d:f8:ac:fd:ef:8f:ad:4f:
                    bd:1b:e3:cf:36:8b:ad:b3:61:99:58:8c:f5:2b:6b:
                    ad:36:af:e9:ae:15:c1:76:d1:e8:57:ee:c2:b0:db:
                    b7:ba:e3:3d:75:e0:b4:fa:87:5c:e4:ba:85:86:8e:
                    b6:a9:68:e1:a7:ea:28:2c:76:ee:4b:4b:c0:49:ce:
                    e4:09:ae:a3:ac:9c:36:c8:17:9e:e6:d8:4f:4d:b8:
                    7c:3d:92:4f:b2:4e:d4:5b:92:bd:d3:18:21:db:ac:
                    c2:fe:87:05:45:9e:41:18:8b:5b:a9:d5:5e:45:c1:
                    df:72:a6:79:93:91:b1:ba:36:7f:7f:b6:1f:ea:b4:
                    f3:f0:d9:24:ba:44:48:75:83:d6:82:08:4c:77:87:
                    39:20:e6:cd:db:9a:56:eb:ee:83:c4:9b:e5:5d:52:
                    51:21:68:6b:5a:3f:72:1e:61:39:2f:6f:fd:ef:73:
                    42:30:50:4c:d3:86:c2:a3:a9:e8:3c:a2:da:2b:95:
                    45:83:68:db:02:7d:fb:24:11:ae:3f:98:db:46:8a:
                    da:c7:40:f0:40:06:e5:86:cb:55:9b:80:43:f6:75:
                    17:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:84:35:66:50:6D:0F:83:D2:76:49:50:0F:EE:AF:ED:D4:C7:F9:5D
            X509v3 Authority Key Identifier:
                keyid:84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/EYQ1ZlBtD4PSdklQD-6v7dTH-V0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.90.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:c8:83:82:9e:04:db:31:be:21:d2:f1:a3:ea:f1:3d:4d:d2:
         ca:05:f2:f2:41:b3:0e:1d:0f:82:c4:d8:6e:fe:5d:63:a0:16:
         48:1b:59:57:8a:c8:a5:13:bf:0b:6b:bf:73:a2:c3:7d:36:62:
         fb:21:02:d6:6b:8d:c5:db:0e:a0:31:a3:e3:74:b7:f8:13:f8:
         a9:9b:43:72:54:90:cd:bf:99:fb:9d:87:a4:dc:28:76:7f:ea:
         1c:9f:c1:d2:03:2e:f8:6d:d0:2d:8b:51:5e:d5:22:b2:0f:8d:
         ee:4c:07:0c:cf:9d:d7:4b:ac:23:36:98:cb:e2:a9:9b:9c:32:
         d1:f5:9c:6b:85:b4:a3:72:65:64:0c:0a:30:76:1b:f4:8b:83:
         5a:1c:83:85:59:2d:88:06:e0:4e:db:4f:c9:4e:fc:9b:27:63:
         4a:39:f6:8b:8c:e0:16:9e:08:09:cb:fc:78:4f:93:62:31:5b:
         77:54:be:40:6e:16:d9:5c:2c:9e:95:c4:3d:54:f0:43:8f:d4:
         fb:c6:6c:90:8c:b8:f1:32:9f:5c:f7:8f:75:06:cb:c0:ce:1d:
         05:98:6d:f1:62:01:cb:65:a1:15:05:84:35:32:6f:31:2d:a5:
         6a:16:6c:b3:3b:38:c8:0e:9a:91:86:e4:eb:05:30:2e:0b:a4:
         2f:84:9d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:55 2024 by rpki-client on console-ams.rpki-client.org