Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/Tx7vxGANuutzShWm7-SvtUgd_5o.roa
File:                     Tx7vxGANuutzShWm7-SvtUgd_5o.roa (raw, json)
Hash identifier:          eV777Un33lC7JlU310mnGmWx5d4qsnyMyQC8KFXhGqg=
Subject key identifier:   4F:1E:EF:C4:60:0D:BA:EB:73:4A:15:A6:EF:E4:AF:B5:48:1D:FF:9A
Certificate issuer:       /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial:       01896553B7B5F3D59EB3835068A23A8C352F
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/Tx7vxGANuutzShWm7-SvtUgd_5o.roa
Signing time:             Mon 17 Jul 2023 19:28:52 +0000
ROA not before:           Mon 17 Jul 2023 19:28:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     395092
IP address blocks:        45.140.174.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:29:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:65:53:b7:b5:f3:d5:9e:b3:83:50:68:a2:3a:8c:35:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
        Validity
            Not Before: Jul 17 19:28:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4f1eefc4600dbaeb734a15a6efe4afb5481dff9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6d:ea:31:a7:53:ad:70:ae:de:d3:b8:8f:b8:
                    d4:ee:57:81:9c:0e:f6:39:66:fa:d1:6c:7e:27:81:
                    57:61:0a:fb:f4:4b:98:0a:c5:9e:9b:03:d3:9a:52:
                    d7:84:bf:01:ed:de:1d:09:06:e7:d9:70:e5:b8:74:
                    9a:78:80:b2:93:40:0a:51:ee:88:71:17:0d:41:2a:
                    4a:01:9c:cb:f4:f5:c0:db:d2:c7:63:6b:91:9e:16:
                    94:87:55:93:81:41:68:bc:a6:ce:d6:8d:80:ef:e0:
                    de:6c:0d:d1:5a:fd:fb:e8:90:5b:2b:af:13:97:13:
                    34:34:0a:89:dc:ac:ed:7c:8b:4b:d7:e6:14:e5:5a:
                    ab:83:e6:14:32:16:d1:6e:fa:b7:4b:b6:84:94:fd:
                    bc:1e:13:23:09:6a:27:31:07:40:17:3f:88:12:a3:
                    35:a2:88:53:3a:78:af:e6:cb:ad:ba:16:2c:b5:4c:
                    32:08:0b:9a:8f:6a:92:16:d2:23:ca:25:93:ca:54:
                    31:6d:de:59:a1:02:0c:fc:ea:1b:d3:37:33:62:8c:
                    0d:22:fb:ab:56:8b:b2:33:bb:45:f4:61:e9:98:c5:
                    d7:6d:ec:06:57:79:c5:9a:e7:a6:11:ad:54:3e:7d:
                    c7:69:79:12:d1:38:95:30:c8:17:a0:fa:c7:cb:3f:
                    91:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:1E:EF:C4:60:0D:BA:EB:73:4A:15:A6:EF:E4:AF:B5:48:1D:FF:9A
            X509v3 Authority Key Identifier:
                keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/Tx7vxGANuutzShWm7-SvtUgd_5o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.140.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:49:63:4f:32:46:67:23:ea:56:04:38:b4:0f:aa:ae:b1:9f:
         09:03:d1:fe:09:2c:40:93:b0:78:ea:1e:1d:c0:04:46:54:78:
         1f:12:ac:b9:42:61:7c:46:3b:aa:e5:27:86:23:64:98:44:97:
         52:59:d2:fc:82:03:f0:06:38:4d:f7:08:19:fa:8f:3e:d4:94:
         e7:78:63:16:80:e4:26:04:bf:52:21:e8:bd:85:1a:5d:ac:cd:
         0f:34:e0:a6:43:31:33:91:2b:f5:34:9d:c6:f8:a8:94:e5:4e:
         8b:af:c9:b0:41:84:88:40:b2:e1:32:64:7c:ee:34:50:cf:34:
         7d:48:40:72:c5:89:c3:e3:95:f8:ca:50:a1:17:a8:3b:f7:c7:
         2c:09:37:84:9c:de:6f:a5:df:32:98:6c:66:c5:ad:f1:44:26:
         e4:46:c3:2d:2e:e3:d4:47:e8:63:82:a6:cb:90:75:c9:9b:c2:
         91:9a:ac:7c:79:01:9a:08:41:90:14:10:e0:d1:3d:a6:c8:9a:
         97:35:13:8b:a1:a7:e3:2b:1d:0a:3b:37:bd:a9:59:a6:87:3f:
         5f:6d:d5:64:62:c5:5c:83:4e:64:6d:d7:98:f3:d3:20:3c:35:
         60:66:cb:43:a6:65:aa:7d:f4:fa:fe:00:1d:28:79:90:eb:25:
         59:c7:f1:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYllU7e189Wes4NQaKI6jDUvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0
ODBiOWMwHhcNMjMwNzE3MTkyODUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjFlZWZjNDYwMGRiYWViNzM0YTE1YTZlZmU0YWZiNTQ4MWRmZjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkm3qMadTrXCu3tO4j7jU7leBnA72
OWb60Wx+J4FXYQr79EuYCsWemwPTmlLXhL8B7d4dCQbn2XDluHSaeICyk0AKUe6I
cRcNQSpKAZzL9PXA29LHY2uRnhaUh1WTgUFovKbO1o2A7+DebA3RWv376JBbK68T
lxM0NAqJ3KztfItL1+YU5Vqrg+YUMhbRbvq3S7aElP28HhMjCWonMQdAFz+IEqM1
oohTOniv5sutuhYstUwyCAuaj2qSFtIjyiWTylQxbd5ZoQIM/Oob0zczYowNIvur
VouyM7tF9GHpmMXXbewGV3nFmuemEa1UPn3HaXkS0TiVMMgXoPrHyz+R/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE8e78RgDbrrc0oVpu/kr7VIHf+aMB8GA1UdIwQY
MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt
NTczNzAxYzg0ODMzLzEvVHg3dnhHQU51dXR6U2hXbTctU3Z0VWdkXzVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz
LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYyuMA0G
CSqGSIb3DQEBCwUAA4IBAQB6SWNPMkZnI+pWBDi0D6qusZ8JA9H+CSxAk7B46h4d
wARGVHgfEqy5QmF8Rjuq5SeGI2SYRJdSWdL8ggPwBjhN9wgZ+o8+1JTneGMWgOQm
BL9SIei9hRpdrM0PNOCmQzEzkSv1NJ3G+KiU5U6Lr8mwQYSIQLLhMmR87jRQzzR9
SEByxYnD45X4ylChF6g798csCTeEnN5vpd8ymGxmxa3xRCbkRsMtLuPUR+hjgqbL
kHXJm8KRmqx8eQGaCEGQFBDg0T2myJqXNROLoafjKx0KOze9qVmmhz9fbdVkYsVc
g05kbdeY89MgPDVgZstDpmWqffT6/gAdKHmQ6yVZx/FA
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:04 2024 by rpki-client on console-ams.rpki-client.org