Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/V9q-VFleynIPK5vpefC_vUaWlHc.roa
File:                     V9q-VFleynIPK5vpefC_vUaWlHc.roa (raw, json)
Hash identifier:          aj4++Bzp7FejvtNx3b7b9JqQuuW0ViVpaK+LivGnDNY=
Subject key identifier:   57:DA:BE:54:59:5E:CA:72:0F:2B:9B:E9:79:F0:BF:BD:46:96:94:77
Certificate issuer:       /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial:       018964895A4B8AE684C4F0882555E5BBB768
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/V9q-VFleynIPK5vpefC_vUaWlHc.roa
Signing time:             Mon 17 Jul 2023 15:47:50 +0000
ROA not before:           Mon 17 Jul 2023 15:47:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34665
IP address blocks:        45.145.163.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 17 Jul 2023 16:04:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:64:89:5a:4b:8a:e6:84:c4:f0:88:25:55:e5:bb:b7:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
        Validity
            Not Before: Jul 17 15:47:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=57dabe54595eca720f2b9be979f0bfbd46969477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:34:ac:ba:5c:44:ff:29:d0:4d:9a:3f:74:44:
                    65:b4:90:d6:59:da:99:37:7b:fe:ed:d6:4b:e7:2f:
                    5b:2a:27:9d:20:dc:5e:e8:6e:71:c8:2f:62:5a:55:
                    62:19:7f:98:5a:91:5e:8e:cb:c0:0e:11:e0:e1:6b:
                    02:1b:ab:48:5f:b6:29:a9:35:ee:96:04:dd:3d:62:
                    d3:72:b0:e0:8d:3b:99:d1:11:83:fa:8a:2b:bd:63:
                    56:5a:91:7b:16:74:cb:40:3e:d5:36:a1:78:4e:61:
                    4d:f3:0e:8f:61:09:43:7a:21:07:38:fb:38:08:5f:
                    8b:38:01:fe:6b:35:e7:5a:f5:9f:b9:c3:7a:ea:53:
                    3c:98:2c:ed:49:4c:e4:b2:4f:08:05:1d:da:8c:4b:
                    a8:50:a1:61:3f:7a:77:0b:67:20:c7:e0:a4:97:dc:
                    b1:f7:7d:43:97:06:67:8f:ac:67:a0:51:d4:a3:de:
                    0a:cb:fb:93:c2:37:d9:2b:de:40:7c:e9:ba:a9:66:
                    50:17:21:c1:9d:30:3c:4a:2e:82:8b:cd:80:7f:5a:
                    60:89:64:c0:09:30:d4:fc:a2:b8:71:d4:85:41:41:
                    03:d1:01:cf:25:0e:b6:c4:6e:73:06:48:0f:87:cf:
                    63:73:50:67:bb:32:b4:6a:bf:f8:fc:f2:82:cd:28:
                    e7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:DA:BE:54:59:5E:CA:72:0F:2B:9B:E9:79:F0:BF:BD:46:96:94:77
            X509v3 Authority Key Identifier:
                keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/V9q-VFleynIPK5vpefC_vUaWlHc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.145.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:7d:a7:bb:2f:42:6e:cc:29:15:0a:48:b0:af:3f:e0:b4:07:
         41:8c:c2:c8:cd:2f:22:47:4a:11:03:2c:00:62:e0:d6:f6:73:
         48:2f:15:e1:41:99:76:e9:43:90:fb:ae:b4:51:b4:67:96:c6:
         f0:13:da:de:05:57:c8:a1:58:52:2d:d4:27:9e:0f:1f:f8:df:
         3e:d3:c9:69:81:2b:74:c8:b2:c9:70:cf:05:c5:6a:64:3a:8f:
         03:8e:e3:1f:de:13:63:84:1f:af:68:eb:de:ae:71:55:48:3e:
         5b:2a:ba:26:04:d8:80:6a:1c:1e:d2:3e:b9:89:df:3c:55:da:
         b9:d1:d1:c4:66:09:5a:b6:d1:16:17:12:42:6b:bf:31:d2:01:
         9a:2a:6d:ee:90:e7:36:bd:13:68:fa:87:bf:ef:f5:ac:b3:ee:
         cd:99:40:2b:0e:41:bf:93:65:ce:dd:6d:b4:fe:79:fd:ab:b0:
         0a:e0:6a:30:c2:73:79:74:ea:ce:27:1a:89:b0:7b:c0:1e:06:
         0b:2e:ac:c6:a4:7f:06:55:8f:e1:71:78:dc:fd:a1:80:cd:3c:
         28:c8:02:16:1b:bf:80:a5:b8:5f:46:c8:32:ab:5b:12:15:cb:
         a9:8d:3e:95:9e:ba:9c:cd:d5:22:8b:5c:98:2b:ea:97:8f:ed:
         0a:26:92:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:00 2024 by rpki-client on console-fra.rpki-client.org