Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iqiKsRPTXUwPj0_xV8tzeKrPy2s.roa
File:                     iqiKsRPTXUwPj0_xV8tzeKrPy2s.roa (raw, json)
Hash identifier:          uAN1A4UGiPl7AcHAHkK/f84lsfSo+rFIk6ec7FZQKqs=
Subject key identifier:   8A:A8:8A:B1:13:D3:5D:4C:0F:8F:4F:F1:57:CB:73:78:AA:CF:CB:6B
Certificate issuer:       /CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012
Certificate serial:       018D1CBB946EBC5DB39CE9EB00F3538079E5
Authority key identifier: 8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iqiKsRPTXUwPj0_xV8tzeKrPy2s.roa
Signing time:             Thu 18 Jan 2024 13:21:11 +0000
ROA not before:           Thu 18 Jan 2024 13:21:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     204995
IP address blocks:        45.13.220.0/22 maxlen: 24
                          45.13.220.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 18 Mar 2024 12:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:1c:bb:94:6e:bc:5d:b3:9c:e9:eb:00:f3:53:80:79:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b0d81f3e0f2d18f3b590dcc536d5e94cfe07012
        Validity
            Not Before: Jan 18 13:21:11 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8aa88ab113d35d4c0f8f4ff157cb7378aacfcb6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1b:ce:6f:0b:f2:5f:3e:d7:f0:87:e2:48:0e:
                    87:d6:71:e5:51:ff:91:01:dd:a0:6b:b1:f8:c0:f1:
                    4d:a0:91:17:3b:e4:6f:fe:8d:5a:b0:e0:59:c8:53:
                    e5:57:1a:82:f5:aa:a8:66:27:ee:71:e2:56:1f:eb:
                    ae:f4:54:a1:87:1d:50:6a:4c:94:29:06:bd:b4:98:
                    d6:f1:2b:5f:ea:c1:72:37:df:34:f6:68:e4:42:df:
                    b6:ba:a1:6d:b2:30:dc:72:c2:a0:d3:0a:64:4d:ef:
                    55:58:82:5e:35:2d:e9:5f:95:c3:46:82:b6:d2:31:
                    40:58:e5:75:10:6a:86:21:74:8b:10:fe:30:3c:db:
                    e4:da:e5:98:ec:7c:29:d0:1a:70:6a:f4:59:fb:15:
                    8e:b5:bb:de:b9:55:d8:59:04:80:17:97:6c:98:0a:
                    25:e4:fb:06:ca:e1:c4:73:e1:3c:e7:4a:b5:34:98:
                    d9:c2:f9:63:c5:80:5e:fc:95:04:06:f2:a6:60:b8:
                    ce:22:9d:2e:0f:7c:99:95:85:84:a2:e4:87:61:b8:
                    34:01:51:a6:8f:41:57:44:3d:34:15:b1:42:14:ac:
                    a3:f2:96:59:99:82:ab:b4:54:c4:c2:0b:24:b0:ce:
                    e7:3a:7e:fc:58:25:4f:2a:19:38:41:71:e4:81:66:
                    f2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A8:8A:B1:13:D3:5D:4C:0F:8F:4F:F1:57:CB:73:78:AA:CF:CB:6B
            X509v3 Authority Key Identifier:
                keyid:8B:0D:81:F3:E0:F2:D1:8F:3B:59:0D:CC:53:6D:5E:94:CF:E0:70:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iw2B8-Dy0Y87WQ3MU21elM_gcBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iqiKsRPTXUwPj0_xV8tzeKrPy2s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0517f9-9a1e-4600-b043-f6541f778585/1/iw2B8-Dy0Y87WQ3MU21elM_gcBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.13.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         92:c1:94:ca:98:ed:d4:54:96:a2:20:e6:f7:7d:b6:9c:62:35:
         7a:b4:db:e3:ee:3c:cc:ea:4a:c6:41:34:60:1d:ea:16:03:26:
         4b:23:5a:ff:93:cc:44:e5:91:ca:61:11:c1:be:08:84:62:9b:
         88:b4:24:38:92:24:15:bc:9f:87:7f:85:74:f5:60:62:f9:fd:
         1a:8e:ff:4f:73:a3:99:3e:24:a0:a2:02:3d:c8:a8:a4:89:17:
         56:b2:28:87:1e:fd:a7:85:10:1b:63:80:38:52:40:8e:24:7f:
         d0:b1:26:c2:fd:71:94:13:44:de:62:56:f4:e4:a4:04:47:29:
         92:3c:d2:be:75:d5:d3:b4:6e:c9:26:f0:f7:46:ca:98:1b:15:
         4d:be:38:be:af:78:d3:ad:90:bf:67:a0:f3:07:39:46:a5:c8:
         60:a7:44:63:13:b6:ee:f8:23:11:9a:96:d8:d3:26:b9:87:14:
         89:57:42:e6:84:30:a9:36:73:af:36:9f:7b:a0:d4:b5:82:88:
         b9:ee:ce:df:10:af:4b:3b:89:ca:b1:ad:7d:9d:f0:8d:8f:8d:
         a8:83:42:d8:5b:c8:11:f7:76:31:c6:4a:fc:88:35:20:15:28:
         04:99:b3:95:7f:52:74:c0:6e:d1:ba:63:02:bc:3e:c1:90:d8:
         f4:42:80:42
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY0cu5RuvF2znOnrAPNTgHnlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMGQ4MWYzZTBmMmQxOGYzYjU5MGRjYzUzNmQ1ZTk0Y2Zl
MDcwMTIwHhcNMjQwMTE4MTMyMTExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWE4OGFiMTEzZDM1ZDRjMGY4ZjRmZjE1N2NiNzM3OGFhY2ZjYjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRvObwvyXz7X8IfiSA6H1nHlUf+R
Ad2ga7H4wPFNoJEXO+Rv/o1asOBZyFPlVxqC9aqoZifuceJWH+uu9FShhx1QakyU
KQa9tJjW8Stf6sFyN9809mjkQt+2uqFtsjDccsKg0wpkTe9VWIJeNS3pX5XDRoK2
0jFAWOV1EGqGIXSLEP4wPNvk2uWY7Hwp0BpwavRZ+xWOtbveuVXYWQSAF5dsmAol
5PsGyuHEc+E850q1NJjZwvljxYBe/JUEBvKmYLjOIp0uD3yZlYWEouSHYbg0AVGm
j0FXRD00FbFCFKyj8pZZmYKrtFTEwgsksM7nOn78WCVPKhk4QXHkgWbyuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIqoirET011MD49P8VfLc3iqz8trMB8GA1UdIwQY
MBaAFIsNgfPg8tGPO1kNzFNtXpTP4HASMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXcyQjgtRHkwWTg3V1EzTVUyMWVsTV9nY0JJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8wNTE3ZjktOWExZS00NjAwLWIwNDMt
ZjY1NDFmNzc4NTg1LzEvaXFpS3NSUFRYVXdQajBfeFY4dHplS3JQeTJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8wNTE3ZjktOWExZS00NjAwLWIwNDMtZjY1NDFmNzc4NTg1
LzEvaXcyQjgtRHkwWTg3V1EzTVUyMWVsTV9nY0JJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQ3cMA0G
CSqGSIb3DQEBCwUAA4IBAQCSwZTKmO3UVJaiIOb3fbacYjV6tNvj7jzM6krGQTRg
HeoWAyZLI1r/k8xE5ZHKYRHBvgiEYpuItCQ4kiQVvJ+Hf4V09WBi+f0ajv9Pc6OZ
PiSgogI9yKikiRdWsiiHHv2nhRAbY4A4UkCOJH/QsSbC/XGUE0TeYlb05KQERymS
PNK+ddXTtG7JJvD3RsqYGxVNvji+r3jTrZC/Z6DzBzlGpchgp0RjE7bu+CMRmpbY
0ya5hxSJV0LmhDCpNnOvNp97oNS1goi57s7fEK9LO4nKsa19nfCNj42og0LYW8gR
93Yxxkr8iDUgFSgEmbOVf1J0wG7RumMCvD7BkNj0QoBC
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:43 2024 by rpki-client on console-ams.rpki-client.org