Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/1-y7A-jBOveGGDoI0a4ZupJOJ5o8.roa
File:                     1-y7A-jBOveGGDoI0a4ZupJOJ5o8.roa (raw, json)
Hash identifier:          Kpk/+RiLvdV56XmVsXGoEwBHID6wybBpMTO72AP5Hro=
Subject key identifier:   FB:2E:C0:FA:30:4E:BD:E1:86:0E:82:34:6B:86:6E:A4:93:89:E6:8F
Certificate issuer:       /CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782
Certificate serial:       0185EED13DB0606BC5A38792B82A834F2366
Authority key identifier: BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/1-y7A-jBOveGGDoI0a4ZupJOJ5o8.roa
Signing time:             Thu 26 Jan 2023 16:02:48 +0000
ROA not before:           Thu 26 Jan 2023 16:02:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209055
IP address blocks:        45.8.40.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:31:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:ee:d1:3d:b0:60:6b:c5:a3:87:92:b8:2a:83:4f:23:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782
        Validity
            Not Before: Jan 26 16:02:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fb2ec0fa304ebde1860e82346b866ea49389e68f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:36:c8:17:04:41:9e:90:80:9e:d8:6e:98:8b:
                    75:65:c3:81:00:45:27:3c:7b:f0:2e:ec:0d:bc:d4:
                    ed:79:32:5c:52:ad:e5:3a:95:ba:92:40:93:ae:5c:
                    66:d3:fd:ca:e0:51:c0:0d:99:5f:ff:3b:83:cd:6b:
                    47:5d:f8:0e:0c:1a:a8:27:a8:26:3f:8c:9b:a3:cc:
                    1d:40:26:10:39:58:42:17:41:60:e6:91:94:d9:15:
                    fd:1c:ae:27:58:d2:80:fa:9c:dc:1a:dd:86:eb:28:
                    2f:d2:79:09:96:bd:ec:66:b4:55:39:c6:43:a1:04:
                    25:54:48:65:2e:32:b1:88:4e:b2:2c:bb:61:c2:be:
                    0e:94:a9:df:50:9f:d9:73:27:41:38:a1:44:5f:b2:
                    63:57:dc:cf:c3:40:9b:c7:93:35:68:b0:c4:dc:9c:
                    99:ee:ab:38:3c:fb:b2:bb:6f:d8:2a:6c:08:d8:8e:
                    92:1e:5c:3a:7d:d9:c0:7f:ea:09:60:0a:66:da:0c:
                    f4:95:2f:37:91:7e:ba:e0:d3:f9:51:15:e8:e3:15:
                    40:f5:7d:ab:27:cc:a2:44:8f:6a:52:d5:71:b1:a6:
                    a1:c9:f0:19:00:06:66:14:2e:5b:39:ba:56:41:a2:
                    10:4e:c1:7d:60:5d:71:ac:59:05:e8:ca:de:a3:1d:
                    78:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2E:C0:FA:30:4E:BD:E1:86:0E:82:34:6B:86:6E:A4:93:89:E6:8F
            X509v3 Authority Key Identifier:
                keyid:BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/1-y7A-jBOveGGDoI0a4ZupJOJ5o8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:ca:6a:2f:1c:64:6f:e1:9c:15:fd:6f:3b:ab:c4:93:fc:a7:
         9e:53:36:ed:01:9c:4a:e8:ca:3a:00:61:24:82:c9:93:11:61:
         7b:12:f8:6c:fb:c8:3b:c0:1e:21:f0:62:50:7e:97:6c:bd:dc:
         f2:47:ad:c5:69:bd:82:c5:7c:69:10:47:f5:76:26:c2:cb:62:
         c2:57:64:09:aa:19:e7:ac:fe:b6:6b:6d:e7:eb:75:8f:07:7e:
         12:40:0a:81:2b:e5:4e:1d:44:62:b8:cc:53:77:42:19:06:a3:
         86:3c:05:a9:ce:89:30:12:75:71:08:51:c9:9e:57:fe:12:db:
         01:c8:1f:9e:28:d9:55:12:eb:48:5b:8b:20:31:88:95:f1:be:
         13:06:ab:40:55:f3:b8:29:48:06:0a:e4:68:13:96:ce:da:35:
         f4:96:24:96:88:d2:f8:64:0d:69:75:30:05:fb:48:28:cc:93:
         f4:8d:f9:5c:d9:87:42:22:b0:ba:28:80:81:05:ac:a8:a9:2d:
         55:b3:b4:c7:48:a6:21:d4:41:8c:e1:3d:ef:34:89:60:45:cd:
         3d:ca:51:b9:1e:56:54:2c:66:2b:5b:7d:af:a0:f8:e2:26:90:
         20:e2:ab:59:ab:df:38:50:61:e1:e2:3f:31:b3:8d:5e:21:69:
         8d:00:a5:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:17:02 2024 by rpki-client on console-ams.rpki-client.org