Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/JIxjWh-KQBo4Ohmuyu1wwHMx8xY.roa
File:                     JIxjWh-KQBo4Ohmuyu1wwHMx8xY.roa (raw, json)
Hash identifier:          K23m/jvLvnXkBburZPx3PBL8YghtYNlLcK2JJLQF+2g=
Subject key identifier:   24:8C:63:5A:1F:8A:40:1A:38:3A:19:AE:CA:ED:70:C0:73:31:F3:16
Certificate issuer:       /CN=ee31367df6d1861071c92bae726523326f45ba2a
Certificate serial:       018BB0BED2520040F24D522901059DFE7EF2
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/JIxjWh-KQBo4Ohmuyu1wwHMx8xY.roa
Signing time:             Wed 08 Nov 2023 21:02:57 +0000
ROA not before:           Wed 08 Nov 2023 21:02:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203105
IP address blocks:        45.92.42.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 02:29:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b0:be:d2:52:00:40:f2:4d:52:29:01:05:9d:fe:7e:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
        Validity
            Not Before: Nov  8 21:02:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=248c635a1f8a401a383a19aecaed70c07331f316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:83:db:9b:ca:95:ab:3b:51:9f:3c:18:61:ac:
                    ea:d6:05:05:21:0f:54:bc:06:86:6d:55:70:5c:00:
                    e0:31:67:38:b0:3f:b8:e1:f2:63:f9:e8:37:8b:a5:
                    71:68:7b:e4:d8:0d:c3:74:77:99:de:6f:68:f2:ef:
                    10:68:5d:52:0d:4e:b8:d0:4b:89:e6:e5:83:8e:ac:
                    00:19:af:d1:7d:c1:29:85:aa:0b:34:2a:1a:5e:a0:
                    92:63:bc:b6:d3:72:20:b8:da:1a:87:94:f4:48:67:
                    20:87:15:f1:d9:23:5f:e9:51:45:f8:f7:6d:c9:89:
                    6a:f7:22:0b:73:9a:41:c8:a6:aa:1f:cd:f2:b6:94:
                    f7:38:11:18:ba:d9:0a:ed:83:83:ef:5f:a4:9d:33:
                    72:e0:5d:79:bf:60:fa:ce:b8:98:33:cc:d1:08:c6:
                    d8:c3:0c:16:aa:b2:b9:c2:2c:26:29:1f:4b:4d:f2:
                    50:73:15:aa:f4:97:78:06:a0:9d:2c:1e:fc:41:a2:
                    36:f4:00:4f:83:9e:4b:35:b1:69:8d:c3:d1:4b:2c:
                    bf:b9:ca:13:ea:52:ce:61:fc:12:7c:a4:64:2a:77:
                    a7:dd:09:dd:8e:b5:7f:fc:2e:db:bb:00:5d:f9:ce:
                    93:3d:9e:35:61:11:02:d2:49:86:38:cc:75:f4:de:
                    d8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:8C:63:5A:1F:8A:40:1A:38:3A:19:AE:CA:ED:70:C0:73:31:F3:16
            X509v3 Authority Key Identifier:
                keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/JIxjWh-KQBo4Ohmuyu1wwHMx8xY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.92.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:60:70:6a:db:c6:1c:49:3e:8d:c0:fe:15:53:3e:e4:24:d6:
         b8:4c:09:2a:6b:0a:a2:a5:75:50:1b:5c:69:20:56:11:58:09:
         96:1c:a4:5a:87:29:d9:c6:b7:5b:d0:63:82:44:2c:51:75:4f:
         a1:64:77:69:ef:31:71:ac:c9:a5:b0:6e:24:fc:9d:c4:71:a9:
         81:06:38:16:bf:cc:34:ab:a2:65:9b:b6:0d:91:f4:eb:90:5b:
         a5:03:9b:c0:6a:2c:0c:e7:5c:24:7b:79:ea:51:fd:dc:5f:b7:
         91:2d:e2:42:83:e4:15:98:28:62:92:b7:53:79:03:49:ea:6a:
         c2:e4:47:c4:2b:e9:d4:1d:37:6b:0d:1f:e9:80:95:5b:fb:1b:
         3c:3d:52:2d:ac:53:41:f4:e4:29:62:ce:bf:7b:31:93:b8:06:
         65:a2:92:2b:54:81:aa:d1:b1:c6:33:24:0a:6f:b6:82:14:79:
         67:4c:be:26:58:8d:57:a1:45:54:da:bd:5e:5b:8c:74:93:40:
         20:07:9a:dd:19:29:e2:d9:0f:31:ce:38:db:c7:4c:3c:7b:85:
         bc:43:82:2e:2e:d1:b0:04:1c:08:40:1d:5e:e2:0e:e6:60:bb:
         45:bb:5f:1a:5c:c6:e1:f8:b5:16:c8:84:e6:33:b6:0a:a0:e8:
         4c:45:58:5a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYuwvtJSAEDyTVIpAQWd/n7yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMzEzNjdkZjZkMTg2MTA3MWM5MmJhZTcyNjUyMzMyNmY0
NWJhMmEwHhcNMjMxMTA4MjEwMjU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDhjNjM1YTFmOGE0MDFhMzgzYTE5YWVjYWVkNzBjMDczMzFmMzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYPbm8qVqztRnzwYYazq1gUFIQ9U
vAaGbVVwXADgMWc4sD+44fJj+eg3i6VxaHvk2A3DdHeZ3m9o8u8QaF1SDU640EuJ
5uWDjqwAGa/RfcEphaoLNCoaXqCSY7y203IguNoah5T0SGcghxXx2SNf6VFF+Pdt
yYlq9yILc5pByKaqH83ytpT3OBEYutkK7YOD71+knTNy4F15v2D6zriYM8zRCMbY
wwwWqrK5wiwmKR9LTfJQcxWq9Jd4BqCdLB78QaI29ABPg55LNbFpjcPRSyy/ucoT
6lLOYfwSfKRkKnen3QndjrV//C7buwBd+c6TPZ41YREC0kmGOMx19N7YAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCSMY1ofikAaODoZrsrtcMBzMfMWMB8GA1UdIwQY
MBaAFO4xNn320YYQcckrrnJlIzJvRboqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2It
MTE1OWRiZmJlZDU0LzEvSkl4aldoLUtRQm80T2htdXl1MXd3SE14OHhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8xYmI0ZGQtZTljNC00ZDNkLTlhM2ItMTE1OWRiZmJlZDU0
LzEvN2pFMmZmYlJoaEJ4eVN1dWNtVWpNbTlGdWlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVwqMA0G
CSqGSIb3DQEBCwUAA4IBAQAXYHBq28YcST6NwP4VUz7kJNa4TAkqawqipXVQG1xp
IFYRWAmWHKRahynZxrdb0GOCRCxRdU+hZHdp7zFxrMmlsG4k/J3EcamBBjgWv8w0
q6Jlm7YNkfTrkFulA5vAaiwM51wke3nqUf3cX7eRLeJCg+QVmChikrdTeQNJ6mrC
5EfEK+nUHTdrDR/pgJVb+xs8PVItrFNB9OQpYs6/ezGTuAZlopIrVIGq0bHGMyQK
b7aCFHlnTL4mWI1XoUVU2r1eW4x0k0AgB5rdGSni2Q8xzjjbx0w8e4W8Q4IuLtGw
BBwIQB1e4g7mYLtFu18aXMbh+LUWyITmM7YKoOhMRVha
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:59 2024 by rpki-client on console-fra.rpki-client.org