Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/rKs5CW2oxZSjxAUapTyCHnhtsc4.roa
File:                     rKs5CW2oxZSjxAUapTyCHnhtsc4.roa (raw, json)
Hash identifier:          I1erzWZToZD89y8fMSasjTVc9FDpPYhjLPaQ/NyiRw0=
Subject key identifier:   AC:AB:39:09:6D:A8:C5:94:A3:C4:05:1A:A5:3C:82:1E:78:6D:B1:CE
Certificate issuer:       /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial:       0187248C2393ED59372541C30095225406BF
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/rKs5CW2oxZSjxAUapTyCHnhtsc4.roa
Signing time:             Mon 27 Mar 2023 19:29:36 +0000
ROA not before:           Mon 27 Mar 2023 19:29:36 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42375
IP address blocks:        45.147.2.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Thu 06 Apr 2023 16:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:24:8c:23:93:ed:59:37:25:41:c3:00:95:22:54:06:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
        Validity
            Not Before: Mar 27 19:29:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=acab39096da8c594a3c4051aa53c821e786db1ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:49:d8:47:a9:55:99:6e:13:a7:58:ea:96:a6:
                    43:e9:c9:65:cc:55:59:7b:f8:b2:53:4f:8e:1e:fd:
                    87:b0:46:dd:c4:37:57:6a:6e:a4:6c:fc:7a:dc:3a:
                    41:64:f6:da:e6:97:ae:dc:e5:2d:e0:93:95:e1:a4:
                    80:b0:84:c2:6b:4a:1b:21:d8:b6:f1:57:05:bc:a7:
                    93:21:a2:fc:9d:eb:12:e4:18:e9:57:32:2c:49:3b:
                    06:1a:71:a2:1c:d2:d7:32:5b:65:2e:f7:c3:5c:58:
                    7a:e2:d8:fe:b0:4b:0b:85:8f:0e:6b:68:64:cc:ea:
                    87:f2:cb:47:0e:59:d6:ac:5a:0e:1d:c9:22:95:9d:
                    36:6c:7b:90:9d:f3:f3:d9:31:e5:de:06:5e:70:84:
                    71:d8:8a:db:bd:23:38:60:c9:3a:d3:dc:10:fe:50:
                    5b:54:2e:72:10:2f:9e:58:d7:49:88:a9:d8:f9:1d:
                    fc:5d:0e:a4:bd:ab:10:87:45:91:f1:d0:55:bb:dd:
                    23:35:fc:29:2a:38:97:f1:82:b6:3e:c5:bb:7f:19:
                    3d:78:d1:65:b8:bd:e3:73:9d:07:7b:c8:2d:57:77:
                    2a:f6:a6:6c:82:5e:57:c5:30:bb:ff:90:2c:92:27:
                    f7:84:35:a8:4c:cb:cb:fa:21:a9:8c:31:c1:7b:e3:
                    7d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:AB:39:09:6D:A8:C5:94:A3:C4:05:1A:A5:3C:82:1E:78:6D:B1:CE
            X509v3 Authority Key Identifier:
                keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/rKs5CW2oxZSjxAUapTyCHnhtsc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.147.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:ca:27:3a:3a:2b:78:e5:49:bc:b6:c8:35:db:3e:f5:3f:fa:
         8a:3c:47:25:a8:aa:0b:e8:5e:62:69:12:c0:97:00:5a:ac:25:
         ed:57:1b:60:3f:d5:5b:8f:d5:3a:25:47:4b:e3:76:76:4f:33:
         f6:09:82:49:ae:b4:17:60:3b:b3:05:4f:ed:2d:f7:ed:59:a4:
         a1:d5:a1:73:dc:da:98:d8:53:e1:56:8e:fd:99:ac:cb:3e:48:
         86:95:cf:b9:49:4b:76:a6:17:ee:36:e0:ea:16:46:c3:3a:2c:
         9e:29:a1:6f:66:25:43:2d:f7:b1:8a:fb:16:c4:2e:bc:0c:7c:
         e1:6f:14:8e:3a:ec:23:a9:fb:03:1b:d9:03:57:52:7a:cc:9e:
         bd:2a:ff:50:79:32:46:67:bf:56:9f:99:74:2c:17:db:cf:fb:
         58:e6:d6:f8:0b:0d:94:dd:6c:89:4b:c0:f5:0e:d5:5d:6c:3b:
         82:12:f1:c2:a4:65:b1:d6:60:b9:28:6b:21:5f:49:f6:50:85:
         01:4f:47:45:24:41:59:56:a4:c9:7f:08:13:3a:9b:c0:34:d0:
         af:1e:7b:d4:83:55:bc:f9:f0:65:57:c7:5a:e7:c4:f4:54:4a:
         09:27:01:7b:43:f3:dd:37:61:c3:f6:c1:df:24:c0:00:6b:56:
         9a:de:38:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:00 2024 by rpki-client on console-fra.rpki-client.org