Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/Uwl_7XF_VzjXfiRJk4DQFPcGZ34.roa
File:                     Uwl_7XF_VzjXfiRJk4DQFPcGZ34.roa (raw, json)
Hash identifier:          6aq0A9NtqwZKDy39ntDu2RaE4FdZwIUMqjab2vkjLGE=
Subject key identifier:   53:09:7F:ED:71:7F:57:38:D7:7E:24:49:93:80:D0:14:F7:06:67:7E
Certificate issuer:       /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial:       018AF0C911CB641AD847C169E95328B13D78
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/Uwl_7XF_VzjXfiRJk4DQFPcGZ34.roa
Signing time:             Mon 02 Oct 2023 14:27:03 +0000
ROA not before:           Mon 02 Oct 2023 14:27:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     22781
IP address blocks:        45.141.168.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Fri 29 Dec 2023 08:24:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:f0:c9:11:cb:64:1a:d8:47:c1:69:e9:53:28:b1:3d:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18101772248996b87d90840c2d27d62549458173
        Validity
            Not Before: Oct  2 14:27:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=53097fed717f5738d77e24499380d014f706677e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:63:ae:97:6d:d2:d6:eb:c0:61:dd:4d:77:d0:
                    62:36:64:c2:df:d9:d1:7a:f8:7e:70:27:57:12:3c:
                    cd:f3:f3:01:a8:ba:00:d4:4a:2b:37:78:af:00:8f:
                    2b:f7:ab:5c:e1:76:3d:33:12:ab:e3:fd:3f:b1:ab:
                    7b:8a:72:eb:b5:ed:5d:db:01:cf:a6:a2:ef:71:e1:
                    25:40:a6:7b:2f:26:42:fa:3b:e2:61:35:96:9d:cf:
                    d2:28:47:3a:5c:68:b1:f8:1a:e1:f7:e2:02:f7:2c:
                    26:c0:25:bf:21:e8:56:3b:63:a2:cc:64:c5:03:41:
                    b6:3f:5f:f4:48:b0:be:58:9f:ff:30:9d:7f:49:6e:
                    71:c0:e9:50:b6:a4:a5:b9:c7:23:35:49:2b:d1:ce:
                    07:55:4e:f9:77:70:c3:82:a4:e6:13:5a:09:39:56:
                    bf:8b:87:70:b5:c2:15:25:f0:18:48:06:e2:57:4c:
                    36:e4:4b:29:36:f3:4e:58:d5:7c:d2:ac:c7:f3:b3:
                    9e:37:db:0f:4f:77:94:1d:e7:ad:f1:2e:c9:d9:48:
                    d4:76:f5:33:92:cd:e6:4d:bd:8b:81:71:b6:ac:c3:
                    5e:d9:a3:ab:2b:1f:8f:46:8e:17:ab:be:59:62:cb:
                    61:30:43:16:bd:25:61:b5:38:66:24:33:ee:13:b6:
                    27:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:09:7F:ED:71:7F:57:38:D7:7E:24:49:93:80:D0:14:F7:06:67:7E
            X509v3 Authority Key Identifier:
                keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/Uwl_7XF_VzjXfiRJk4DQFPcGZ34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.141.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:ef:85:d0:c6:8f:87:df:28:d1:65:a8:4b:97:98:0c:f1:62:
         ca:40:aa:67:93:20:b7:bb:d7:b5:f3:40:94:09:51:d1:d0:bf:
         f7:28:47:5d:9f:0f:82:07:4e:07:c8:ee:5a:c1:fd:9c:b7:10:
         57:5a:a5:1a:f1:d1:23:b3:9f:43:e7:59:69:53:2c:cd:32:29:
         21:e8:da:80:4f:7d:19:41:0b:47:58:aa:d1:9b:75:85:02:05:
         1b:92:f0:42:4c:b8:39:e2:7a:50:fa:0d:71:03:af:63:c8:8a:
         bd:e7:74:78:44:19:3e:53:9b:3b:76:ca:95:c9:a4:4b:9d:71:
         8b:f1:6f:c6:4b:cc:c6:45:2c:07:ca:76:57:cb:65:6b:f9:95:
         4b:78:28:85:a8:d4:9e:c4:19:2b:d2:8d:63:74:ec:cd:c4:85:
         82:b9:e6:fa:dc:0c:f8:73:d8:bd:5e:2f:eb:60:1a:4a:2f:15:
         3c:d4:92:1d:14:4c:ac:d1:ac:0b:c1:ab:21:b0:b8:74:31:9e:
         3c:77:e0:c4:9d:0b:bc:2b:7a:4f:af:87:3a:83:81:34:41:96:
         c7:6c:0a:17:37:52:04:57:fb:b4:59:22:28:09:bf:7a:24:72:
         37:82:24:70:8b:c6:f6:b2:aa:cf:b2:57:0d:7c:5b:55:1a:bc:
         34:f1:da:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:59 2024 by rpki-client on console-fra.rpki-client.org