Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/wtQ_c3e3no-as777V9DaTMyTmqw.roa
File:                     wtQ_c3e3no-as777V9DaTMyTmqw.roa (raw, json)
Hash identifier:          jNo/yhT4rJC87/0WIEir8HLAe52SRPpJaFS/GXjpIyc=
Subject key identifier:   C2:D4:3F:73:77:B7:9E:8F:9A:B3:BE:FB:57:D0:DA:4C:CC:93:9A:AC
Certificate issuer:       /CN=27484956736549eab3b06e23aab89ca5993a8076
Certificate serial:       0189408516D3661E42AA33C903A0E6161AC5
Authority key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/wtQ_c3e3no-as777V9DaTMyTmqw.roa
Signing time:             Mon 10 Jul 2023 15:56:51 +0000
ROA not before:           Mon 10 Jul 2023 15:56:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     64286
IP address blocks:        45.84.102.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Wed 27 Sep 2023 02:13:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:40:85:16:d3:66:1e:42:aa:33:c9:03:a0:e6:16:1a:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27484956736549eab3b06e23aab89ca5993a8076
        Validity
            Not Before: Jul 10 15:56:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c2d43f7377b79e8f9ab3befb57d0da4ccc939aac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:67:91:67:36:ab:e7:61:64:b9:13:4b:78:11:
                    c7:bc:fb:37:91:2d:e3:0d:08:5d:ce:ac:26:ce:6a:
                    fe:8b:ac:a0:f3:8d:1c:72:a6:a6:6d:ad:f6:cc:c2:
                    52:25:55:0a:36:47:78:ed:11:bb:2d:9e:00:7f:95:
                    74:4a:2e:b4:49:b5:4f:48:8f:46:17:1f:43:cc:24:
                    d8:48:2b:09:73:f7:8f:22:a3:5a:71:62:6d:bd:3e:
                    17:d4:3d:14:1c:23:cd:98:65:68:26:66:6f:fb:42:
                    25:34:95:76:ec:29:3a:ea:d2:b8:d6:c0:a3:ca:81:
                    b3:80:3a:a8:a1:17:d0:e8:32:ea:d6:81:1f:21:91:
                    31:3a:8c:e2:d1:ad:0a:e0:6f:04:9c:8e:41:b6:37:
                    63:03:07:4e:99:ba:99:60:a6:c7:9b:14:7f:5e:64:
                    13:8d:7c:7d:c3:05:23:20:56:91:d2:43:ce:d5:c2:
                    06:1b:04:c7:7d:34:0a:ab:eb:56:61:4f:5a:f1:94:
                    82:57:16:73:fb:91:d3:1d:17:d3:41:ba:1f:d4:2b:
                    21:19:2e:56:b7:ff:62:89:ae:12:d8:f2:d6:f4:8f:
                    e9:46:1c:00:91:08:88:78:e1:b1:fb:cc:34:42:86:
                    7d:16:f8:67:6c:45:a1:e8:41:31:dd:d7:b4:8b:75:
                    ea:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D4:3F:73:77:B7:9E:8F:9A:B3:BE:FB:57:D0:DA:4C:CC:93:9A:AC
            X509v3 Authority Key Identifier:
                keyid:27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/wtQ_c3e3no-as777V9DaTMyTmqw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.84.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:07:d7:49:11:73:db:da:d9:3d:32:c2:78:33:94:b8:29:61:
         98:3f:99:6e:df:d1:42:12:e8:e7:66:ce:de:81:6b:ea:d6:3b:
         8e:fc:8d:5d:01:09:29:e9:92:d6:17:11:30:bd:f2:39:97:8f:
         59:8b:6f:90:ac:2a:9c:42:4c:2a:78:e0:6a:e0:af:dc:2d:0f:
         58:88:11:08:65:35:b2:4f:d6:ec:d8:94:5c:43:f5:b6:b1:a4:
         01:c3:39:f0:b7:e6:44:8b:61:70:03:fe:b2:28:bc:1b:ea:c3:
         7b:93:7c:ab:c9:d7:8a:ba:37:87:66:cf:d8:1b:4e:0d:38:e3:
         0a:ef:b7:ea:1d:9d:b0:9e:70:02:bd:95:fe:a8:40:ea:38:eb:
         c8:06:0d:ad:82:04:8b:01:d9:b9:d4:9a:04:85:f7:54:14:77:
         b4:f9:01:00:f4:ee:e4:71:2a:6d:13:21:20:a4:f0:85:6b:56:
         c4:f0:9d:f6:db:73:62:52:02:d3:72:8d:cd:ed:c4:55:82:bb:
         13:a1:be:0a:1d:d6:93:b9:e7:87:db:11:fa:a3:b5:e4:71:dd:
         ea:15:52:9a:d5:c3:2a:2d:a8:cf:6a:0f:59:12:33:fd:bb:84:
         c9:2e:85:34:44:02:5f:c1:a2:c6:60:ab:5b:5b:8a:12:db:9d:
         f8:c3:c4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:19 2024 by rpki-client on console-fra.rpki-client.org