Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/44JmbNWI_D4TouXPbkus23iGsXQ.roa
File:                     44JmbNWI_D4TouXPbkus23iGsXQ.roa (raw, json)
Hash identifier:          8IWAoSqJmTBopYWYNNGc5TSbBj41lCR35jGd6KOfn5U=
Subject key identifier:   E3:82:66:6C:D5:88:FC:3E:13:A2:E5:CF:6E:4B:AC:DB:78:86:B1:74
Certificate issuer:       /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial:       018A07C54C1592518C19ECA7B56881E1CD3C
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/44JmbNWI_D4TouXPbkus23iGsXQ.roa
Signing time:             Fri 18 Aug 2023 08:31:25 +0000
ROA not before:           Fri 18 Aug 2023 08:31:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62240
IP address blocks:        45.149.80.0/24 maxlen: 24
                          45.149.82.0/24 maxlen: 24
                          45.149.81.0/24 maxlen: 24
                          195.245.111.0/24 maxlen: 24
                          185.179.198.0/24 maxlen: 24
                          45.140.171.0/24 maxlen: 24
                          45.11.25.0/24 maxlen: 24
                          45.139.29.0/24 maxlen: 24
                          45.139.28.0/24 maxlen: 24
                          45.139.31.0/24 maxlen: 24
                          213.139.192.0/24 maxlen: 24
                          213.139.195.0/24 maxlen: 24
                          213.139.193.0/24 maxlen: 24
                          45.149.134.0/24 maxlen: 24
                          45.152.227.0/24 maxlen: 24
                          45.137.188.0/24 maxlen: 24
                          45.137.191.0/24 maxlen: 24
                          194.156.95.0/24 maxlen: 24
                          45.150.63.0/24 maxlen: 24
                          45.150.62.0/24 maxlen: 24
                          45.145.2.0/24 maxlen: 24
                          45.145.161.0/24 maxlen: 24
                          45.133.219.0/24 maxlen: 24
                          45.137.52.0/24 maxlen: 24
                          45.137.55.0/24 maxlen: 24
                          77.83.4.0/24 maxlen: 24
                          77.83.7.0/24 maxlen: 24
                          77.83.6.0/24 maxlen: 24
                          77.83.5.0/24 maxlen: 24
                          45.145.90.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:07:c5:4c:15:92:51:8c:19:ec:a7:b5:68:81:e1:cd:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
        Validity
            Not Before: Aug 18 08:31:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e382666cd588fc3e13a2e5cf6e4bacdb7886b174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:80:15:2c:f9:9e:72:f1:e8:69:d1:75:85:cc:
                    43:23:c8:9f:cb:1c:ae:95:e6:9d:70:e7:f0:91:8b:
                    d8:8d:7b:61:46:3d:12:49:51:92:24:54:cf:92:97:
                    29:12:d6:ce:61:25:3d:61:f3:3a:39:5f:fe:ec:30:
                    9c:0c:3f:34:2e:a7:9a:af:51:b1:05:87:64:37:f0:
                    de:4b:14:26:8e:8d:34:8e:c0:26:46:35:ce:af:b6:
                    f6:f5:4b:bc:b4:b9:0a:c5:ef:12:f4:af:c1:1e:66:
                    57:6b:59:65:ee:72:03:40:f8:05:3a:c1:35:86:50:
                    62:f3:c7:7f:cf:be:65:de:d7:54:98:82:b6:ce:a7:
                    4d:72:bb:b1:6a:c7:ab:7f:b4:aa:46:7f:b7:1b:ce:
                    43:3a:06:85:92:d4:c0:db:16:dc:5c:62:2e:8a:6c:
                    ad:ed:e7:bf:96:cd:b4:5e:cf:a9:86:d8:d3:e5:7b:
                    47:d5:d1:e1:19:17:9a:eb:56:61:a7:83:f4:c0:ec:
                    ae:73:ed:c8:4f:1b:8a:28:a7:43:67:18:ed:c9:16:
                    bd:cc:1e:7b:f7:8c:7b:41:2f:78:9d:73:0b:e8:52:
                    c7:9b:5d:9d:9f:06:03:26:41:5d:10:41:ec:60:df:
                    a8:36:6e:14:7e:da:e5:8b:62:73:84:85:18:14:8a:
                    40:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:82:66:6C:D5:88:FC:3E:13:A2:E5:CF:6E:4B:AC:DB:78:86:B1:74
            X509v3 Authority Key Identifier:
                keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/44JmbNWI_D4TouXPbkus23iGsXQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.25.0/24
                  45.133.219.0/24
                  45.137.52.0/24
                  45.137.55.0/24
                  45.137.188.0/24
                  45.137.191.0/24
                  45.139.28.0/23
                  45.139.31.0/24
                  45.140.171.0/24
                  45.145.2.0/24
                  45.145.90.0/24
                  45.145.161.0/24
                  45.149.80.0-45.149.82.255
                  45.149.134.0/24
                  45.150.62.0/23
                  45.152.227.0/24
                  77.83.4.0/22
                  185.179.198.0/24
                  194.156.95.0/24
                  195.245.111.0/24
                  213.139.192.0/23
                  213.139.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:b4:39:20:21:78:32:30:7c:c2:ba:f5:4d:c1:6a:9a:19:33:
         75:88:d6:53:c6:35:4d:d5:59:96:f4:bf:18:0f:88:4a:aa:0d:
         d2:79:9c:82:65:7d:a3:8e:2c:ef:87:af:80:07:e3:ec:01:f8:
         4a:85:bc:06:7d:ac:bf:ef:a0:33:1e:4a:8d:d7:f3:b9:e6:b7:
         e1:22:a8:07:db:43:a3:2d:d9:d7:b6:9e:eb:68:9f:97:d0:f1:
         26:96:43:c3:95:99:eb:48:9a:64:c0:1b:c7:33:f0:16:f8:ee:
         b5:7e:68:4b:77:66:44:f0:68:3e:a8:e7:6e:c4:be:01:72:30:
         45:42:e8:15:80:49:86:87:55:0c:ef:70:5e:61:08:97:8b:fd:
         5d:67:d0:f5:b4:2c:e0:0d:2e:22:65:27:01:71:e4:a2:07:ad:
         20:d9:73:61:13:ba:40:f8:c5:5f:a9:d3:99:1b:30:ab:93:69:
         d4:c6:1f:b4:5d:cf:35:2b:ea:b9:a5:32:70:62:9f:4a:d3:43:
         de:d9:2c:25:f6:ea:3e:05:2a:aa:fb:53:af:ee:56:4d:97:de:
         50:57:19:15:4b:f3:e5:4b:01:f0:70:62:c6:4f:e1:6a:dc:8d:
         4b:bc:25:37:13:3c:11:78:05:54:9f:b0:ed:b4:2e:1e:54:86:
         f0:7d:07:cf
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgISAYoHxUwVklGMGeyntWiB4c08MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0
ODBiOWMwHhcNMjMwODE4MDgzMTI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzgyNjY2Y2Q1ODhmYzNlMTNhMmU1Y2Y2ZTRiYWNkYjc4ODZiMTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4AVLPmecvHoadF1hcxDI8ifyxyu
leadcOfwkYvYjXthRj0SSVGSJFTPkpcpEtbOYSU9YfM6OV/+7DCcDD80Lqear1Gx
BYdkN/DeSxQmjo00jsAmRjXOr7b29Uu8tLkKxe8S9K/BHmZXa1ll7nIDQPgFOsE1
hlBi88d/z75l3tdUmIK2zqdNcruxaserf7SqRn+3G85DOgaFktTA2xbcXGIuimyt
7ee/ls20Xs+phtjT5XtH1dHhGRea61Zhp4P0wOyuc+3ITxuKKKdDZxjtyRa9zB57
94x7QS94nXML6FLHm12dnwYDJkFdEEHsYN+oNm4Uftrli2JzhIUYFIpAAQIDAQAB
o4IClDCCApAwHQYDVR0OBBYEFOOCZmzViPw+E6Llz25LrNt4hrF0MB8GA1UdIwQY
MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt
NTczNzAxYzg0ODMzLzEvNDRKbWJOV0lfRDRUb3VYUGJrdXMyM2lHc1hRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz
LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGpBggrBgEFBQcBBwEB/wSBmTCBljCBkwQCAAEwgYwDBAAt
CxkDBAAthdsDBAAtiTQDBAAtiTcDBAAtibwDBAAtib8DBAEtixwDBAAtix8DBAAt
jKsDBAAtkQIDBAAtkVoDBAAtkaEwDAMEBC2VUAMEAC2VUgMEAC2VhgMEAS2WPgME
AC2Y4wMEAk1TBAMEALmzxgMEAMKcXwMEAMP1bwMEAdWLwAMEANWLwzANBgkqhkiG
9w0BAQsFAAOCAQEAfbQ5ICF4MjB8wrr1TcFqmhkzdYjWU8Y1TdVZlvS/GA+ISqoN
0nmcgmV9o44s74evgAfj7AH4SoW8Bn2sv++gMx5Kjdfzuea34SKoB9tDoy3Z17ae
62ifl9DxJpZDw5WZ60iaZMAbxzPwFvjutX5oS3dmRPBoPqjnbsS+AXIwRULoFYBJ
hodVDO9wXmEIl4v9XWfQ9bQs4A0uImUnAXHkogetINlzYRO6QPjFX6nTmRswq5Np
1MYftF3PNSvquaUycGKfStND3tksJfbqPgUqqvtTr+5WTZfeUFcZFUvz5UsB8HBi
xk/hatyNS7wlNxM8EXgFVJ+w7bQuHlSG8H0Hzw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:04 2024 by rpki-client on console-ams.rpki-client.org