Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/EqY0BC-G_WG4dFufXbDp5vfjwMQ.roa
File:                     EqY0BC-G_WG4dFufXbDp5vfjwMQ.roa (raw, json)
Hash identifier:          AmDdTeK5CV5IJZ1CI7LAgWG3p3xMwqlYes1VdW2IVWE=
Subject key identifier:   12:A6:34:04:2F:86:FD:61:B8:74:5B:9F:5D:B0:E9:E6:F7:E3:C0:C4
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       018FBAF61EC50CA7C15BFB7276E9C96687BA
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/EqY0BC-G_WG4dFufXbDp5vfjwMQ.roa
Signing time:             Mon 27 May 2024 16:50:42 +0000
ROA not before:           Mon 27 May 2024 16:50:42 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     198510
IP address blocks:        45.144.174.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Sun 09 Jun 2024 14:40:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:ba:f6:1e:c5:0c:a7:c1:5b:fb:72:76:e9:c9:66:87:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: May 27 16:50:42 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=12a634042f86fd61b8745b9f5db0e9e6f7e3c0c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:85:ff:55:45:09:7f:a2:6e:94:2d:b7:08:89:
                    27:8e:90:73:0a:c8:9c:e6:6c:a1:47:e8:76:29:79:
                    f5:7a:c9:72:60:e9:7e:62:35:54:79:74:61:bd:f4:
                    f0:00:ae:90:a1:09:97:41:b9:2b:37:67:f6:97:d4:
                    b8:57:3b:28:0d:c9:f2:a8:d1:02:a5:00:62:da:07:
                    75:ef:07:de:4f:c3:6a:e1:e1:15:a2:08:71:51:ff:
                    80:93:04:61:32:9a:45:00:bf:0b:7f:4f:46:f3:43:
                    c1:f3:a5:8f:e1:51:98:41:f7:d1:eb:4f:a7:13:7f:
                    f0:e9:d8:2f:50:a5:ad:f3:b5:99:a6:05:64:f3:f2:
                    70:dc:3d:dc:c6:5e:0d:8c:3b:ea:cc:a6:28:99:83:
                    3e:76:c1:da:c4:e2:43:6b:b9:8a:6c:dd:36:5d:36:
                    71:b7:b0:b6:50:25:a3:7d:e3:62:6e:87:59:e4:b5:
                    de:d4:0e:ec:a7:e4:77:aa:55:42:36:9d:6c:00:ee:
                    96:46:95:61:d7:25:0f:59:58:f1:d0:97:62:eb:28:
                    70:e1:4d:6b:3c:27:ee:b5:e4:fe:9f:79:f1:d9:5b:
                    72:98:a7:92:74:78:a5:ec:be:b5:7f:85:bb:72:ab:
                    b5:53:ee:b5:d8:65:8d:02:77:87:23:3f:d2:2c:ce:
                    56:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A6:34:04:2F:86:FD:61:B8:74:5B:9F:5D:B0:E9:E6:F7:E3:C0:C4
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/EqY0BC-G_WG4dFufXbDp5vfjwMQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.144.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:58:bd:a1:a1:72:ef:7f:9c:b9:73:ef:ff:39:e2:cb:ed:ff:
         85:92:75:40:9e:78:c0:ec:13:97:f4:94:a1:c0:d2:81:a4:50:
         93:0c:a1:0f:0b:f9:d7:17:45:48:18:ff:e7:41:21:75:91:e7:
         35:04:7c:b9:00:2e:e3:1b:87:ea:47:5f:a9:35:fb:44:ab:2c:
         19:d3:19:57:c2:76:53:30:51:03:70:d6:66:d8:1b:39:09:d9:
         2a:41:6b:59:47:e1:d3:0e:2c:fe:98:75:97:85:0b:ed:21:52:
         d1:f9:de:c6:bc:ed:61:7d:f8:67:6e:1c:ef:b0:9c:6b:b6:90:
         84:d8:d6:c8:72:ff:fc:d8:72:08:ad:4a:0d:29:4c:08:aa:65:
         71:a8:c7:0b:30:6f:4c:ed:91:b9:01:ee:6c:0b:d4:e6:43:46:
         6b:c0:ad:79:57:dc:d3:7f:54:b1:c8:30:5f:43:f8:d6:06:bf:
         2e:df:93:f1:dd:b8:b2:2f:42:ce:da:62:56:a1:30:75:a9:7e:
         85:96:81:7f:dd:cd:5a:8d:2e:0d:06:3b:8c:fa:68:dd:3a:80:
         96:4b:11:30:ba:ef:cd:5c:44:69:93:73:ae:dc:0e:c9:8c:9a:
         48:bf:c4:d2:c0:a2:9b:52:12:eb:17:d9:9f:60:84:a2:f6:32:
         57:8c:e5:38
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY+69h7FDKfBW/tydunJZoe6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQwNTI3MTY1MDQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmE2MzQwNDJmODZmZDYxYjg3NDViOWY1ZGIwZTllNmY3ZTNjMGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IX/VUUJf6JulC23CIknjpBzCsic
5myhR+h2KXn1eslyYOl+YjVUeXRhvfTwAK6QoQmXQbkrN2f2l9S4VzsoDcnyqNEC
pQBi2gd17wfeT8Nq4eEVoghxUf+AkwRhMppFAL8Lf09G80PB86WP4VGYQffR60+n
E3/w6dgvUKWt87WZpgVk8/Jw3D3cxl4NjDvqzKYomYM+dsHaxOJDa7mKbN02XTZx
t7C2UCWjfeNibodZ5LXe1A7sp+R3qlVCNp1sAO6WRpVh1yUPWVjx0Jdi6yhw4U1r
PCfuteT+n3nx2VtymKeSdHil7L61f4W7cqu1U+612GWNAneHIz/SLM5WNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBKmNAQvhv1huHRbn12w6eb348DEMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvRXFZMEJDLUdfV0c0ZEZ1ZlhiRHA1dmZqd01RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZCuMA0G
CSqGSIb3DQEBCwUAA4IBAQCMWL2hoXLvf5y5c+//OeLL7f+FknVAnnjA7BOX9JSh
wNKBpFCTDKEPC/nXF0VIGP/nQSF1kec1BHy5AC7jG4fqR1+pNftEqywZ0xlXwnZT
MFEDcNZm2Bs5CdkqQWtZR+HTDiz+mHWXhQvtIVLR+d7GvO1hffhnbhzvsJxrtpCE
2NbIcv/82HIIrUoNKUwIqmVxqMcLMG9M7ZG5Ae5sC9TmQ0ZrwK15V9zTf1SxyDBf
Q/jWBr8u35Px3biyL0LO2mJWoTB1qX6FloF/3c1ajS4NBjuM+mjdOoCWSxEwuu/N
XERpk3Ou3A7JjJpIv8TSwKKbUhLrF9mfYISi9jJXjOU4
-----END CERTIFICATE-----
Generated at Sun Jun 9 17:31:16 2024 by rpki-client on console-ams.rpki-client.org