Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/8BxGagIdcrQGXjUdPntTIgNkuiM.roa
File:                     8BxGagIdcrQGXjUdPntTIgNkuiM.roa (raw, json)
Hash identifier:          ijZkeI9FKspqsCd4Ao6casYWajml28RRJoVl1d+rcwE=
Subject key identifier:   F0:1C:46:6A:02:1D:72:B4:06:5E:35:1D:3E:7B:53:22:03:64:BA:23
Certificate issuer:       /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial:       0187ED15DBC7D827597AA979E5858E33B1CB
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/8BxGagIdcrQGXjUdPntTIgNkuiM.roa
Signing time:             Fri 05 May 2023 18:04:05 +0000
ROA not before:           Fri 05 May 2023 18:04:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        45.141.196.0/24 maxlen: 24
                          213.139.228.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 08 May 2023 12:14:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:ed:15:db:c7:d8:27:59:7a:a9:79:e5:85:8e:33:b1:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
        Validity
            Not Before: May  5 18:04:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f01c466a021d72b4065e351d3e7b53220364ba23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:32:dc:8d:3c:82:c7:e2:88:d1:84:75:25:18:
                    59:82:5a:24:54:e7:45:bb:3d:f6:7f:2f:12:74:25:
                    c8:7d:b1:23:0e:50:6d:d2:8f:93:11:75:9d:2e:e4:
                    87:d4:f6:dd:5c:e2:37:a0:b6:fd:6a:da:d5:c9:0f:
                    65:a0:90:4b:bf:3c:55:0f:7a:0d:06:8f:da:ac:de:
                    6d:25:a3:88:a2:73:c9:78:05:fe:c9:d9:4d:fe:75:
                    99:44:dd:7e:48:98:86:72:df:87:62:38:11:14:c3:
                    5a:ca:3d:2e:ba:d8:3f:18:a0:c7:3b:a6:0e:c4:d9:
                    2c:58:de:60:ba:ce:23:4f:2d:f7:e5:8d:76:44:c2:
                    a6:ca:91:13:58:56:39:fd:ec:12:08:12:51:bd:25:
                    1f:7c:de:56:a4:0d:fa:8a:18:30:11:73:a9:df:64:
                    cd:8b:d0:2b:bf:30:5e:41:f2:21:48:2e:8f:1f:e0:
                    8e:08:f0:05:ec:a4:d2:9e:2c:30:e1:05:93:46:89:
                    ad:64:5a:72:8b:c6:41:03:98:08:dd:28:94:1d:56:
                    6f:d4:64:25:8a:36:58:f9:8d:45:fa:60:97:cc:c5:
                    9a:5c:71:96:36:51:fe:39:76:e1:ed:66:f0:bf:3d:
                    85:4c:3b:2f:a9:6d:99:4c:66:61:a3:a5:bb:16:90:
                    d5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1C:46:6A:02:1D:72:B4:06:5E:35:1D:3E:7B:53:22:03:64:BA:23
            X509v3 Authority Key Identifier:
                keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/8BxGagIdcrQGXjUdPntTIgNkuiM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.141.196.0/24
                  213.139.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:c8:8b:2d:eb:d8:a5:6f:42:19:52:1a:d3:a3:7c:df:fe:3b:
         57:2f:63:01:63:77:93:36:a1:91:4b:41:67:ce:97:a2:4a:70:
         bf:2b:0f:cb:f0:b1:74:24:34:81:dc:9d:44:43:e4:0c:42:e1:
         38:67:64:2e:9d:23:a4:b2:06:2d:36:ca:93:23:ed:77:4b:e4:
         96:95:7d:46:e7:dc:7d:69:88:5d:09:80:7b:87:e7:0b:0a:6a:
         c7:11:d7:f7:81:82:1b:97:f0:19:d5:c1:d2:58:94:2e:0a:62:
         b4:2d:21:19:0e:9f:06:43:bd:77:af:18:49:3c:a3:42:3e:42:
         5e:76:8b:fd:f6:07:03:d2:f5:d6:8f:b7:5b:28:bd:fc:97:6c:
         49:59:8d:13:77:2a:bd:97:fc:9f:42:9b:e9:ad:42:f7:1d:f9:
         0e:5c:65:65:0c:a2:69:27:6f:eb:ca:62:ce:0f:2b:16:56:dc:
         6d:2b:ca:c1:b9:5a:6e:0b:70:23:8d:5a:42:2f:dc:d0:31:d1:
         c8:57:cc:8e:f1:ea:f3:7a:7d:ee:c0:71:f2:25:d7:40:51:dc:
         98:df:62:ec:af:cb:ce:ef:8f:d3:0a:49:78:b5:51:ac:81:1d:
         d6:e7:9e:5f:dc:21:1e:d3:ee:0e:2b:74:fd:3c:05:23:f6:ed:
         7b:95:bc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:04 2024 by rpki-client on console-ams.rpki-client.org