Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/CAxqw0VBFByJWpyk4CGaL0hbZP8.roa
File:                     CAxqw0VBFByJWpyk4CGaL0hbZP8.roa (raw, json)
Hash identifier:          G9PSZZIGk1inrt4b/B3A9Qw2vr/n5JS/GpxDaRt2frg=
Subject key identifier:   08:0C:6A:C3:45:41:14:1C:89:5A:9C:A4:E0:21:9A:2F:48:5B:64:FF
Certificate issuer:       /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial:       01857CCB6115BD6A488B458D873020728272
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/CAxqw0VBFByJWpyk4CGaL0hbZP8.roa
Signing time:             Wed 04 Jan 2023 12:39:41 +0000
ROA not before:           Wed 04 Jan 2023 12:39:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6134
IP address blocks:        91.216.169.0/24 maxlen: 24
                          91.217.135.0/24 maxlen: 24
                          91.216.190.0/24 maxlen: 24
                          45.83.236.0/24 maxlen: 24
                          45.10.68.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 12 May 2023 05:56:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:7c:cb:61:15:bd:6a:48:8b:45:8d:87:30:20:72:82:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
        Validity
            Not Before: Jan  4 12:39:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=080c6ac34541141c895a9ca4e0219a2f485b64ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:94:82:d8:75:27:74:94:33:a6:71:dd:e6:19:
                    60:73:ea:81:95:f7:4b:60:1b:a0:ac:1c:72:80:ca:
                    0f:4f:93:6f:16:4a:7a:9d:ba:67:7e:6c:a0:3f:c4:
                    7a:f9:7a:8e:c2:78:70:a5:18:f5:38:65:15:5e:75:
                    39:dd:61:81:60:63:e8:6d:cc:83:c1:c6:b2:74:b7:
                    92:45:42:c1:67:56:9e:cc:e2:a2:11:fb:51:ce:a1:
                    1d:bb:cd:81:b4:e1:af:67:94:12:39:a7:81:16:ff:
                    9c:78:20:91:f4:fa:6d:b9:f6:d1:ed:d0:96:c2:d4:
                    a7:70:d6:6b:72:dd:6f:85:d6:78:72:9d:58:ec:d3:
                    69:4a:f6:51:0a:38:21:9c:a4:98:db:f2:f2:44:a1:
                    c8:58:fb:4b:51:16:2a:8d:6e:32:00:04:ea:40:fd:
                    50:cb:f0:13:30:30:0b:78:a1:85:fa:20:bb:d3:c2:
                    24:3e:4c:67:ed:a1:92:cb:59:ab:97:c7:54:dc:fa:
                    66:2d:76:17:fe:c6:a8:0e:80:4e:ed:ab:0b:67:12:
                    1f:75:d2:83:89:be:3e:77:8a:c2:7b:d4:ce:db:39:
                    38:56:8f:cd:4b:b6:c4:71:5a:df:a9:64:25:3f:9d:
                    0f:d6:16:da:de:5c:33:4d:37:77:89:b0:fb:02:38:
                    20:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:0C:6A:C3:45:41:14:1C:89:5A:9C:A4:E0:21:9A:2F:48:5B:64:FF
            X509v3 Authority Key Identifier:
                keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/CAxqw0VBFByJWpyk4CGaL0hbZP8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.68.0/24
                  45.83.236.0/24
                  91.216.169.0/24
                  91.216.190.0/24
                  91.217.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:18:a9:81:3c:be:f5:84:ba:cf:ed:c4:06:e6:2d:7a:3a:08:
         58:75:38:c3:d3:76:9e:4c:39:2a:26:f1:b5:5b:2b:f6:14:62:
         dd:bd:e4:5d:b1:24:b1:7b:c4:c6:4d:51:e5:26:8e:9e:c8:3c:
         85:87:6a:65:92:ad:3b:84:91:95:e3:51:4b:d8:1a:15:b6:ee:
         78:38:e6:09:f0:39:56:fd:ad:c8:d5:86:5d:84:c2:c4:9f:93:
         f4:eb:9d:6e:e4:2d:74:ce:67:9a:bb:39:7f:7c:72:ae:4a:1b:
         c5:14:25:e1:1e:8e:58:32:c8:c1:29:ca:73:a4:b3:e2:b0:3c:
         32:0c:11:f9:91:99:73:dd:f3:9f:fc:cb:ab:77:b5:41:02:03:
         46:8b:15:ed:fe:56:76:5b:f5:21:5a:a7:9e:10:65:18:4d:de:
         38:af:a0:7e:a1:11:a0:94:86:b7:d4:8a:18:f5:4d:f0:91:e9:
         07:2e:eb:25:7e:e4:94:47:76:18:99:93:60:6c:db:3d:14:bf:
         31:91:f5:b8:bb:94:8b:13:0d:c8:8f:cc:38:40:7d:ea:cf:70:
         bb:12:53:1f:2e:cd:c4:2d:ef:7d:50:ee:97:5d:76:c2:7a:08:
         53:d5:c8:fe:99:0b:fc:f5:40:92:67:80:02:76:c1:90:18:9b:
         b8:af:25:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:14 2024 by rpki-client on console-ams.rpki-client.org