Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/GBUweWuuoz6Xzn3Iw3BXsilPtEs.roa
File:                     GBUweWuuoz6Xzn3Iw3BXsilPtEs.roa (raw, json)
Hash identifier:          R5O3SBJb2JKVqYld5XJFIbb0f0qIjJcPak1ca7VUoM0=
Subject key identifier:   18:15:30:79:6B:AE:A3:3E:97:CE:7D:C8:C3:70:57:B2:29:4F:B4:4B
Certificate issuer:       /CN=27484956736549eab3b06e23aab89ca5993a8076
Certificate serial:       01880A9704F16986B5DB9B2F25BCEF46BEC5
Authority key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/GBUweWuuoz6Xzn3Iw3BXsilPtEs.roa
Signing time:             Thu 11 May 2023 11:34:09 +0000
ROA not before:           Thu 11 May 2023 11:34:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     64286
IP address blocks:        45.84.100.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 24 May 2023 12:22:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:0a:97:04:f1:69:86:b5:db:9b:2f:25:bc:ef:46:be:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27484956736549eab3b06e23aab89ca5993a8076
        Validity
            Not Before: May 11 11:34:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=181530796baea33e97ce7dc8c37057b2294fb44b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a5:84:13:e0:e0:e1:45:3a:0c:a4:6e:09:87:
                    b5:46:cb:7d:7b:e9:bb:ca:02:50:7f:66:6b:56:7f:
                    07:47:06:1e:3a:63:fc:87:46:7e:80:7d:f0:a9:f6:
                    b5:ba:99:72:5e:88:ef:27:c1:60:4c:75:96:34:f4:
                    b7:98:2d:20:6d:19:73:3f:4d:2e:89:de:2a:58:8a:
                    24:40:6a:6f:8e:54:83:48:c4:1c:53:b9:39:17:f6:
                    73:62:5e:b2:2b:c6:f7:3f:04:99:c8:1a:2e:19:55:
                    a1:66:7e:bf:2b:ff:25:45:6e:25:41:ac:72:0d:72:
                    63:0d:83:8b:5f:70:f3:17:57:6a:92:15:cc:c3:7c:
                    04:7d:96:19:b9:93:73:b2:9f:00:2d:bc:2e:2a:d9:
                    bc:28:d9:5f:24:8a:27:f4:b3:b9:56:37:a5:7f:01:
                    4f:7f:b5:82:54:16:b9:35:e1:4b:07:11:85:aa:79:
                    42:b5:00:42:59:4a:12:d1:46:7b:5e:31:a3:c8:fd:
                    92:57:69:15:b4:9b:ab:28:d6:a0:5b:4e:b8:95:5a:
                    62:f9:aa:3c:e4:ae:1a:63:ff:df:28:a3:33:9b:e0:
                    85:9e:c3:62:56:e6:a2:4d:f8:c9:5d:14:d2:de:c9:
                    1b:45:0c:12:2f:e7:37:c1:72:2a:14:ce:68:f5:74:
                    98:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:15:30:79:6B:AE:A3:3E:97:CE:7D:C8:C3:70:57:B2:29:4F:B4:4B
            X509v3 Authority Key Identifier:
                keyid:27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/GBUweWuuoz6Xzn3Iw3BXsilPtEs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.84.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:09:a2:0d:20:79:63:3b:d3:52:17:95:da:70:f3:84:99:5c:
         89:e4:e0:53:04:1c:19:64:12:0c:67:e5:bf:6c:85:21:ee:bd:
         27:5a:ab:7d:e1:42:b2:52:00:4e:64:73:90:26:de:e5:78:38:
         9a:43:41:be:62:27:2f:95:76:04:4b:56:25:7c:f4:31:cc:61:
         d2:8b:9c:d9:cf:7f:4f:37:19:41:f4:af:e7:a0:61:de:20:38:
         2b:9d:c8:c0:60:2e:29:04:f6:fa:1a:bb:8d:0f:62:d9:ff:2c:
         99:f1:a8:9d:41:6d:3f:ec:a9:c3:6e:ff:6a:26:b5:ed:f1:f0:
         b8:77:f7:3c:a8:87:a9:9f:27:97:7a:6c:97:a4:c4:48:95:fe:
         48:69:fe:c2:75:f2:c8:ed:08:ef:d7:c8:3b:0e:45:f9:9e:cf:
         8c:1c:c4:b7:7f:13:19:9e:3a:b8:5d:bb:7a:33:20:a2:39:1f:
         16:7b:8e:50:14:69:12:d1:e3:fa:d8:78:0e:5d:12:24:a4:d7:
         5a:93:34:e2:27:c4:c2:49:50:b2:e7:95:34:59:5d:c8:a8:62:
         ff:06:22:d9:e8:e4:4b:5b:47:f6:e8:78:cd:73:a3:d7:ed:8a:
         5d:39:1d:86:91:05:8b:9f:9b:c2:63:fc:e5:68:17:84:6d:c4:
         af:c4:c6:a7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgKlwTxaYa125svJbzvRr7FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NDg0OTU2NzM2NTQ5ZWFiM2IwNmUyM2FhYjg5Y2E1OTkz
YTgwNzYwHhcNMjMwNTExMTEzNDA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODE1MzA3OTZiYWVhMzNlOTdjZTdkYzhjMzcwNTdiMjI5NGZiNDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqWEE+Dg4UU6DKRuCYe1Rst9e+m7
ygJQf2ZrVn8HRwYeOmP8h0Z+gH3wqfa1uplyXojvJ8FgTHWWNPS3mC0gbRlzP00u
id4qWIokQGpvjlSDSMQcU7k5F/ZzYl6yK8b3PwSZyBouGVWhZn6/K/8lRW4lQaxy
DXJjDYOLX3DzF1dqkhXMw3wEfZYZuZNzsp8ALbwuKtm8KNlfJIon9LO5VjelfwFP
f7WCVBa5NeFLBxGFqnlCtQBCWUoS0UZ7XjGjyP2SV2kVtJurKNagW064lVpi+ao8
5K4aY//fKKMzm+CFnsNiVuaiTfjJXRTS3skbRQwSL+c3wXIqFM5o9XSY3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBgVMHlrrqM+l859yMNwV7IpT7RLMB8GA1UdIwQY
MBaAFCdISVZzZUnqs7BuI6q4nKWZOoB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjBoSlZuTmxTZXF6c0c0anFyaWNwWms2Z0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kZWU1NzgtZjJjNi00MWMwLWI3Mjgt
YWQxNjNhYjM1NGM4LzEvR0JVd2VXdXVvejZYem4zSXczQlhzaWxQdEVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9kZWU1NzgtZjJjNi00MWMwLWI3MjgtYWQxNjNhYjM1NGM4
LzEvSjBoSlZuTmxTZXF6c0c0anFyaWNwWms2Z0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVRkMA0G
CSqGSIb3DQEBCwUAA4IBAQAmCaINIHljO9NSF5XacPOEmVyJ5OBTBBwZZBIMZ+W/
bIUh7r0nWqt94UKyUgBOZHOQJt7leDiaQ0G+YicvlXYES1YlfPQxzGHSi5zZz39P
NxlB9K/noGHeIDgrncjAYC4pBPb6GruND2LZ/yyZ8aidQW0/7KnDbv9qJrXt8fC4
d/c8qIepnyeXemyXpMRIlf5Iaf7CdfLI7Qjv18g7DkX5ns+MHMS3fxMZnjq4Xbt6
MyCiOR8We45QFGkS0eP62HgOXRIkpNdakzTiJ8TCSVCy55U0WV3IqGL/BiLZ6ORL
W0f26HjNc6PX7YpdOR2GkQWLn5vCY/zlaBeEbcSvxMan
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:13:59 2024 by rpki-client on console-ams.rpki-client.org