Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/gXusBC1bCZB_5l67ABdZlvHtuB4.roa
File:                     gXusBC1bCZB_5l67ABdZlvHtuB4.roa (raw, json)
Hash identifier:          Il2b21yUw6ka99swzujY7LlpcJsJ8GHlVHS7yGqanw4=
Subject key identifier:   81:7B:AC:04:2D:5B:09:90:7F:E6:5E:BB:00:17:59:96:F1:ED:B8:1E
Certificate issuer:       /CN=4c468f181265b4d96ca2835a3e570c2679035dff
Certificate serial:       018571A7BB3BB59286595B3285DF5AC83419
Authority key identifier: 4C:46:8F:18:12:65:B4:D9:6C:A2:83:5A:3E:57:0C:26:79:03:5D:FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/gXusBC1bCZB_5l67ABdZlvHtuB4.roa
Signing time:             Mon 02 Jan 2023 08:44:55 +0000
ROA not before:           Mon 02 Jan 2023 08:44:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208708
IP address blocks:        45.87.112.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:33:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:a7:bb:3b:b5:92:86:59:5b:32:85:df:5a:c8:34:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c468f181265b4d96ca2835a3e570c2679035dff
        Validity
            Not Before: Jan  2 08:44:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=817bac042d5b09907fe65ebb00175996f1edb81e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:12:e8:c6:b4:d8:fe:57:23:94:15:26:9a:66:
                    fb:aa:1e:3e:5e:42:51:e9:73:c6:7f:0b:df:87:8f:
                    0b:92:d4:6c:18:03:dd:06:b7:78:a3:9e:7d:7b:95:
                    ab:5d:91:10:41:9d:c5:2b:52:6f:73:b7:7f:c5:78:
                    03:6c:04:2a:c0:cf:bf:e2:77:85:1c:c5:e2:24:61:
                    a5:9c:05:09:5b:fb:6c:31:3b:7b:a2:e5:25:4a:4b:
                    86:1e:ba:ea:57:ba:3b:a1:87:c9:64:b0:2b:77:79:
                    cb:06:46:60:73:32:15:dc:67:9b:06:21:0d:49:10:
                    62:7e:69:9d:65:49:2a:90:5b:33:85:f5:7c:ca:42:
                    82:7d:81:8e:c9:1f:47:43:03:e1:22:1f:4f:3e:94:
                    c5:b8:fa:39:69:42:8f:ef:d0:84:79:62:b4:df:55:
                    35:cc:60:b9:1b:49:64:5f:41:8c:ba:59:6e:2c:a0:
                    83:5c:15:31:bf:8b:64:6a:5d:92:29:fb:42:35:18:
                    64:32:57:06:33:65:05:07:69:26:4a:b4:aa:a7:b2:
                    23:dd:26:1f:f0:bb:9f:3e:49:e5:e3:6b:8e:64:a9:
                    e5:c6:1a:c2:0a:2b:1d:04:6e:42:92:3b:6a:35:ba:
                    c6:e3:ab:7c:22:06:d3:78:d7:d4:a0:5b:e3:13:8b:
                    ee:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:7B:AC:04:2D:5B:09:90:7F:E6:5E:BB:00:17:59:96:F1:ED:B8:1E
            X509v3 Authority Key Identifier:
                keyid:4C:46:8F:18:12:65:B4:D9:6C:A2:83:5A:3E:57:0C:26:79:03:5D:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/gXusBC1bCZB_5l67ABdZlvHtuB4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.87.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ca:b1:ca:1f:f7:10:24:33:18:11:09:08:ba:4a:e1:dc:f8:39:
         2e:19:29:56:a8:d0:00:9e:89:21:c1:03:d9:cf:ab:ae:2c:8c:
         ad:05:36:b6:0f:b6:18:df:74:d1:5f:93:17:7f:16:45:73:45:
         de:67:98:61:3b:ac:48:e1:01:15:f0:5f:71:b9:32:aa:c7:99:
         00:5f:e1:b8:f6:ab:0a:7e:1c:aa:ea:9e:e0:51:14:99:0e:f0:
         05:eb:a8:20:b9:0d:6d:b5:ac:f3:2f:dc:e9:e1:c7:cf:8f:df:
         7e:a7:4e:c2:6e:9c:1f:7e:f1:44:81:0d:2a:8d:a4:5f:b4:19:
         1c:e9:c1:46:36:5c:09:11:28:cb:72:7c:ed:f2:47:a2:23:97:
         79:e2:f7:7e:75:a7:77:5f:c9:8d:d3:56:f1:8c:9d:28:8a:02:
         96:b2:08:d8:85:5f:e8:1a:21:bb:6a:b0:45:b3:ca:d9:6d:a7:
         e6:61:34:e7:6f:0e:a7:0f:74:b0:c3:ab:60:f1:31:3e:55:5f:
         39:c9:d0:6f:8f:c0:cf:c2:8e:1b:a6:3a:58:67:0e:fb:6c:91:
         65:5d:7e:5a:fc:de:5c:1e:13:70:96:6c:d7:b7:19:f4:1c:94:
         16:25:2a:30:1c:7c:89:57:eb:90:5e:ee:31:6c:81:24:86:de:
         11:31:f7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:21 2024 by rpki-client on console-fra.rpki-client.org