Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/EN5_f89zAyn9NbN7_xL-zZuBCIM.roa
File:                     EN5_f89zAyn9NbN7_xL-zZuBCIM.roa (raw, json)
Hash identifier:          RAoYIvRX3968nkzmLjFIvtZ9n8u5NNbwpcXcvJYU6PU=
Subject key identifier:   10:DE:7F:7F:CF:73:03:29:FD:35:B3:7B:FF:12:FE:CD:9B:81:08:83
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       018E2D6D0D078136C1E4833CB43BAC6BD0C9
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/EN5_f89zAyn9NbN7_xL-zZuBCIM.roa
Signing time:             Mon 11 Mar 2024 12:11:45 +0000
ROA not before:           Mon 11 Mar 2024 12:11:45 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     210164
IP address blocks:        45.135.182.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 18 Mar 2024 16:31:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:2d:6d:0d:07:81:36:c1:e4:83:3c:b4:3b:ac:6b:d0:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Mar 11 12:11:45 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=10de7f7fcf730329fd35b37bff12fecd9b810883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4b:1e:c3:b7:f0:76:9b:6c:9b:90:2f:db:50:
                    0a:10:78:e0:4d:3d:7d:0b:db:31:13:85:f9:c4:52:
                    66:b0:12:09:1c:98:ef:eb:d0:c0:91:04:30:85:e9:
                    10:07:b2:c1:8a:c5:5b:4a:54:95:f9:b1:b9:d2:66:
                    78:5f:ee:05:9a:dc:61:c9:84:9b:03:e1:0d:b9:2b:
                    6f:b6:c2:cb:0f:30:6f:d3:17:62:40:4c:97:49:ba:
                    b9:fa:0b:d6:23:a7:a1:95:52:22:5a:50:13:d7:c9:
                    b7:2a:40:c5:5d:f2:c6:cd:db:5e:d1:f3:d6:3f:37:
                    c1:54:b4:eb:20:63:2f:e9:09:d2:02:0b:21:ab:82:
                    74:fd:2a:9d:09:4e:a6:31:dd:a1:e0:14:b6:56:50:
                    6e:3d:62:28:fd:cd:d2:5d:40:ff:e8:9a:97:5f:b1:
                    8c:a5:cb:f6:e9:b0:d4:9c:5a:29:ec:bb:c2:9f:a5:
                    00:43:53:01:08:c6:d6:74:7e:54:5b:ad:f2:4a:29:
                    68:4d:c9:5b:55:9f:0e:1c:13:db:9c:0d:71:6d:c7:
                    1d:95:38:8e:60:ca:74:29:e8:f0:8e:2b:5b:e6:52:
                    ed:a2:b5:d1:2f:fa:89:89:b3:f9:5b:13:a6:65:d7:
                    09:25:56:5f:d2:c8:89:21:99:dc:5b:f1:e7:cf:34:
                    87:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:DE:7F:7F:CF:73:03:29:FD:35:B3:7B:FF:12:FE:CD:9B:81:08:83
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/EN5_f89zAyn9NbN7_xL-zZuBCIM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:00:11:73:eb:9a:ef:8c:d8:dc:c4:b3:68:ae:52:51:0b:40:
         af:b5:5b:39:f3:33:f2:a2:63:c3:e8:ad:8c:87:3a:13:c9:e6:
         92:f4:d1:cb:e5:2d:cb:54:4c:33:de:cb:2a:d4:0c:d8:1f:e8:
         43:23:8e:f7:a2:3b:85:dd:82:41:61:27:9c:c7:78:74:81:01:
         1d:02:2a:f8:bd:a6:0d:af:58:4b:1c:50:92:03:17:e6:7d:e4:
         21:5b:e7:13:a1:5d:cd:c7:32:4b:d5:79:9f:a4:a6:7a:5a:39:
         34:ee:33:fc:cd:a5:5b:d8:e7:fd:a3:eb:2a:69:01:4f:3b:3a:
         56:9f:dd:d7:06:e7:c7:f2:45:76:0c:b6:05:52:36:0a:28:a0:
         7d:40:ca:6e:b7:12:65:f4:8a:cd:ca:14:7e:86:e2:0c:7f:e6:
         34:57:bd:72:5e:42:de:21:19:be:d1:3d:c2:65:bf:b2:8c:ff:
         f5:3d:47:fb:f0:ce:46:c8:81:96:ed:e1:a2:64:aa:f6:2b:c4:
         f5:6f:81:bd:bc:33:93:e3:9b:a4:f9:33:22:da:64:2b:12:4e:
         fa:89:de:df:82:e0:8d:42:ad:89:5c:38:4b:60:35:a6:2e:a5:
         09:2e:c6:8e:9a:b0:cf:63:61:58:9f:ef:43:54:ab:55:0c:17:
         89:0b:2a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:06 2024 by rpki-client on console-fra.rpki-client.org