Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/6pl1JePNrkoMTCmn1qkt23yww5w.roa
File:                     6pl1JePNrkoMTCmn1qkt23yww5w.roa (raw, json)
Hash identifier:          M5hSyqisDezW7jmJP8nYF/lEA74aMJoKegWPI1glPDQ=
Subject key identifier:   EA:99:75:25:E3:CD:AE:4A:0C:4C:29:A7:D6:A9:2D:DB:7C:B0:C3:9C
Certificate issuer:       /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial:       018B011B3D16B7338B44C09D5169B829D91E
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/6pl1JePNrkoMTCmn1qkt23yww5w.roa
Signing time:             Thu 05 Oct 2023 18:30:44 +0000
ROA not before:           Thu 05 Oct 2023 18:30:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44477
IP address blocks:        45.155.63.0/24 maxlen: 24
                          45.155.62.0/24 maxlen: 24
                          45.133.216.0/24 maxlen: 24
                          194.156.98.0/24 maxlen: 24
                          45.145.0.0/24 maxlen: 24
                          194.156.99.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:01:1b:3d:16:b7:33:8b:44:c0:9d:51:69:b8:29:d9:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
        Validity
            Not Before: Oct  5 18:30:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ea997525e3cdae4a0c4c29a7d6a92ddb7cb0c39c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e7:1d:d1:4f:73:29:52:0c:7f:01:91:47:e5:
                    4f:78:42:b3:28:73:f1:94:1a:88:ba:7d:b1:cd:aa:
                    f6:b1:06:e6:fa:8e:5f:72:63:89:56:40:17:cd:b9:
                    f1:50:26:7e:a4:54:df:dc:39:db:2b:ce:cd:6e:87:
                    6f:c8:06:c4:8d:39:b0:3a:b1:72:dd:53:08:f0:8a:
                    ca:b7:1a:48:ce:85:22:ce:60:69:79:34:56:95:40:
                    ef:96:f7:41:6f:9d:ed:ee:65:f4:8b:14:e4:5f:ce:
                    1a:76:eb:bb:04:e2:a1:ad:47:37:d0:76:49:88:1d:
                    63:ae:75:d0:69:44:2c:31:40:36:a3:dd:00:0b:82:
                    af:a4:f0:53:8c:31:f6:43:03:45:d0:c3:cf:56:09:
                    bf:a9:93:31:fe:83:4c:18:a7:d8:62:44:87:46:d4:
                    82:22:22:25:ce:58:bb:37:0d:ea:c6:5d:13:d9:0e:
                    18:b2:d7:f4:3c:a1:7b:64:15:3f:de:39:c8:c7:22:
                    66:b2:04:88:09:df:d4:5d:ff:66:9f:38:66:37:12:
                    cf:da:e3:33:72:16:ff:bb:d4:e2:f1:0b:66:3b:4b:
                    cd:65:9c:46:f3:90:c0:24:db:da:06:97:0c:dc:1f:
                    e6:1e:59:c8:8a:8a:67:6a:c6:81:c2:f8:2a:ab:61:
                    15:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:99:75:25:E3:CD:AE:4A:0C:4C:29:A7:D6:A9:2D:DB:7C:B0:C3:9C
            X509v3 Authority Key Identifier:
                keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/6pl1JePNrkoMTCmn1qkt23yww5w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.133.216.0/24
                  45.145.0.0/24
                  45.155.62.0/23
                  194.156.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:b3:8d:45:66:af:ea:85:37:11:bb:ff:8c:b4:f1:00:9b:d9:
         13:0a:b8:33:89:fb:be:78:ab:29:b7:c3:a4:90:ea:f7:cb:61:
         8e:e1:9c:c4:d4:83:ae:ad:e5:83:d2:83:8f:af:e8:50:b2:c8:
         b1:16:9c:75:95:0c:8a:4c:74:a1:55:d4:58:c5:2f:1f:87:55:
         c7:b4:a2:86:b4:09:87:37:b7:2b:e3:57:b6:c5:39:ff:92:38:
         96:e0:31:b8:c4:b6:12:91:c3:e6:3f:ad:79:f2:f5:20:72:8d:
         2d:6d:c2:52:1c:38:f0:ab:5f:1b:36:69:a5:ae:19:b5:db:78:
         6c:e4:64:91:68:b1:3d:2f:50:08:53:2e:f5:89:08:5b:85:d8:
         62:80:49:55:22:f2:7f:6f:c2:98:2a:34:d1:43:d3:f4:50:2d:
         0d:79:c6:8e:52:73:30:72:29:e6:08:24:43:ab:9e:63:d8:8b:
         a4:8a:9d:ad:11:51:c3:88:fd:04:a3:95:46:f9:6e:1e:f4:1d:
         84:5b:6c:31:e0:7f:ea:e9:16:b5:84:c7:71:c0:1f:97:3f:69:
         f9:c3:68:6a:bd:04:8a:d8:60:e7:47:a9:ca:74:69:5f:82:a9:
         f5:bd:ff:29:2e:64:99:5b:67:db:be:31:a3:c1:aa:ec:ad:90:
         e7:68:75:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:00 2024 by rpki-client on console-fra.rpki-client.org