Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/eJpOgUhSuhHksQ0RAnpd35QcyDo.roa
File:                     eJpOgUhSuhHksQ0RAnpd35QcyDo.roa (raw, json)
Hash identifier:          i0tkKBTVTH4dWUCYY+qi/gq7O1+AZ5zdLiiPreQYNMs=
Subject key identifier:   78:9A:4E:81:48:52:BA:11:E4:B1:0D:11:02:7A:5D:DF:94:1C:C8:3A
Certificate issuer:       /CN=27484956736549eab3b06e23aab89ca5993a8076
Certificate serial:       0188E0526547B78686352D63E00595B92D93
Authority key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/eJpOgUhSuhHksQ0RAnpd35QcyDo.roa
Signing time:             Wed 21 Jun 2023 23:37:56 +0000
ROA not before:           Wed 21 Jun 2023 23:37:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     64286
IP address blocks:        45.84.102.0/23 maxlen: 23
                          45.84.101.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 10 Jul 2023 15:56:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e0:52:65:47:b7:86:86:35:2d:63:e0:05:95:b9:2d:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27484956736549eab3b06e23aab89ca5993a8076
        Validity
            Not Before: Jun 21 23:37:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=789a4e814852ba11e4b10d11027a5ddf941cc83a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0c:07:c4:ac:56:d3:ba:c3:12:ae:7a:5c:53:
                    ec:d7:ff:e7:49:4c:b1:ba:9a:d6:e9:e6:64:14:1e:
                    1d:81:c4:05:4a:a4:a0:ec:b8:2d:01:03:19:49:22:
                    0a:8c:dc:75:07:40:32:40:6a:50:ad:0b:c6:9d:bd:
                    64:81:d6:23:b7:8c:cb:77:90:02:d8:76:28:6f:64:
                    6a:0c:56:22:86:4b:d8:f9:e8:dc:f0:39:4f:25:6e:
                    cb:86:33:66:32:08:31:e0:e4:e9:30:1d:6e:7b:97:
                    fb:e9:bf:1d:97:72:24:61:72:fa:f6:6a:2c:ad:04:
                    b6:c4:da:dc:e9:3d:3f:9e:d5:68:a6:1c:1d:2c:32:
                    4b:fd:97:a3:f3:28:0a:cb:21:bd:99:9d:bf:39:32:
                    0c:bd:90:5e:81:e3:6b:1f:bf:7b:1a:a1:32:61:25:
                    d8:8c:f2:38:b8:da:06:1b:3d:a7:a0:fe:87:c7:87:
                    1d:4e:46:19:7d:73:a9:e1:a3:9a:a1:c6:3e:74:93:
                    b5:5c:28:80:c7:ef:97:9f:89:43:36:74:c9:8f:f0:
                    12:1e:ae:34:ec:ad:25:e0:de:31:ba:74:56:f4:57:
                    e5:f3:61:a0:7c:fb:88:7a:aa:e4:77:19:65:62:23:
                    e2:05:50:f9:1a:ab:ba:83:c2:a4:c1:37:a8:98:31:
                    59:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9A:4E:81:48:52:BA:11:E4:B1:0D:11:02:7A:5D:DF:94:1C:C8:3A
            X509v3 Authority Key Identifier:
                keyid:27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/eJpOgUhSuhHksQ0RAnpd35QcyDo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.84.101.0-45.84.103.255

    Signature Algorithm: sha256WithRSAEncryption
         5f:eb:d1:d8:af:c8:77:05:89:09:a1:5a:96:b4:30:0b:2f:32:
         92:b1:ca:ba:34:18:39:3f:58:b9:f8:95:ce:12:5d:aa:92:a7:
         85:26:df:98:f0:db:f2:bb:e3:a1:f3:b9:26:2e:e6:a5:29:d5:
         9a:27:1b:fa:41:3b:57:62:d9:f1:9c:1d:9f:80:64:a3:db:7a:
         3f:5c:44:6c:44:60:43:19:13:ef:d5:9d:24:88:ca:85:1e:de:
         53:b2:0d:d6:89:2b:7b:c3:aa:e3:d2:64:f7:af:8b:ff:25:ba:
         80:21:c5:18:32:7e:67:9b:77:b1:e0:da:bc:f7:49:9a:3e:51:
         77:88:49:7f:ba:ac:8c:9e:bc:f0:2b:7e:d5:9f:9d:f3:e8:58:
         8f:bd:b6:63:fb:ed:89:eb:5e:a9:43:c9:19:cf:71:73:08:ea:
         b9:4e:29:f4:d7:01:32:6d:54:08:7d:f8:31:01:8b:bc:d1:86:
         c3:02:9f:4a:54:13:93:4b:21:25:d6:9f:d2:e5:b9:e2:f4:9d:
         7d:01:25:6c:0b:d6:58:c9:fa:81:3d:18:c4:c6:20:f2:dc:31:
         31:19:20:30:10:0a:77:94:8a:51:96:0b:6e:7c:d7:ae:cc:60:
         21:6d:a1:9e:7e:e8:6a:7d:f9:eb:13:82:21:f5:4a:9e:86:05:
         ab:d8:34:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:19 2024 by rpki-client on console-fra.rpki-client.org