Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/1-CAnX-La69WqOskkWMb2VKIxEnE.roa
File:                     1-CAnX-La69WqOskkWMb2VKIxEnE.roa (raw, json)
Hash identifier:          etPLhO2fdM1QWmxSGtOg/2rti2I+C0hVpBHOtCCztBQ=
Subject key identifier:   F8:20:27:5F:E2:DA:EB:D5:AA:3A:C9:24:58:C6:F6:54:A2:31:12:71
Certificate issuer:       /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial:       018CC801D3C4671B0479E56D8CB9BE9F12DC
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/1-CAnX-La69WqOskkWMb2VKIxEnE.roa
Signing time:             Tue 02 Jan 2024 02:30:12 +0000
ROA not before:           Tue 02 Jan 2024 02:30:12 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     9312
IP address blocks:        149.62.46.0/24 maxlen: 24
                          45.90.210.0/24 maxlen: 24
                          45.90.208.0/24 maxlen: 24
                          149.62.47.0/24 maxlen: 24
                          45.90.211.0/24 maxlen: 24
                          45.90.209.0/24 maxlen: 24
                          194.36.243.0/24 maxlen: 24
                          95.214.165.0/24 maxlen: 24
                          95.214.164.0/24 maxlen: 24
                          194.169.55.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 10 Jan 2024 10:42:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:01:d3:c4:67:1b:04:79:e5:6d:8c:b9:be:9f:12:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
        Validity
            Not Before: Jan  2 02:30:12 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=f820275fe2daebd5aa3ac92458c6f654a2311271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e0:82:a9:a9:1b:1b:0e:6d:6b:a2:1d:86:7b:
                    ee:77:ce:65:0b:e6:26:92:27:b5:cb:66:2b:f9:59:
                    c1:bf:29:5b:1b:43:af:96:dd:1d:37:df:43:e4:dc:
                    78:d4:4c:a3:81:60:02:b3:c3:5b:0c:4f:df:1d:de:
                    bf:40:a2:16:0b:3d:39:6b:5c:00:31:95:40:2c:34:
                    84:39:95:b0:7b:e9:f9:3c:f8:8e:e9:c7:e4:45:02:
                    68:ea:19:8b:93:4c:1c:e3:7e:69:c8:99:27:3c:9f:
                    a1:61:6e:0a:77:6b:06:5f:7f:a4:d3:4e:50:b8:b9:
                    ca:b8:2b:17:f2:4e:56:4a:bc:59:95:6f:63:a5:1b:
                    bf:9c:c0:4c:aa:5b:1f:53:8f:c0:62:0b:af:bb:ec:
                    6c:dc:4b:ab:ba:1f:5f:03:19:75:03:51:17:53:b7:
                    57:c2:30:b6:bb:4d:83:eb:2e:84:37:3e:8a:98:de:
                    ca:3a:26:d8:a7:b8:8c:56:fb:94:7d:66:1b:67:84:
                    69:ee:be:d4:0b:5e:98:59:55:56:fb:cc:27:87:ca:
                    bb:10:4e:22:47:41:87:80:42:c2:76:be:12:c2:98:
                    c6:43:5a:a1:ad:60:38:17:25:ab:24:c9:0c:c4:b2:
                    d9:60:2e:a3:b5:5d:46:67:d8:42:50:61:32:f9:82:
                    bf:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:20:27:5F:E2:DA:EB:D5:AA:3A:C9:24:58:C6:F6:54:A2:31:12:71
            X509v3 Authority Key Identifier:
                keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/1-CAnX-La69WqOskkWMb2VKIxEnE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.90.208.0/22
                  95.214.164.0/23
                  149.62.46.0/23
                  194.36.243.0/24
                  194.169.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:85:9b:3a:24:50:a7:3c:2a:be:9f:d5:39:b2:52:f8:d4:30:
         c8:ce:44:df:bc:11:fa:42:97:de:ff:c3:0c:4a:3d:97:73:2b:
         0e:cf:6c:5c:23:fa:fe:f4:2e:34:ad:fe:3a:ff:2f:2c:72:9a:
         fc:43:af:df:4d:64:64:f2:b6:df:47:46:2c:f4:2f:54:7b:9c:
         c4:82:59:c1:bc:7d:b7:11:3b:d8:46:96:1c:b2:03:98:96:95:
         1d:45:a6:64:3b:11:6d:5d:72:fa:02:80:da:9b:4b:32:aa:1d:
         4e:24:11:ae:78:46:4f:15:46:e9:53:20:69:e8:cf:b9:0a:6a:
         29:77:10:14:6c:43:06:f2:60:89:a7:0c:f1:f2:75:15:96:22:
         6a:e7:6f:10:ae:16:d7:8f:71:ef:62:11:86:c3:40:02:06:55:
         5b:ee:78:88:2e:06:55:a5:70:ca:92:a5:1d:ce:e0:eb:9f:52:
         27:32:94:ab:30:0c:31:26:b5:4f:0d:73:c3:85:0c:d0:77:a3:
         9c:31:54:48:93:7b:62:cc:ef:04:87:ca:bc:af:b5:ea:5d:01:
         30:45:91:16:2c:6a:4c:f4:2a:17:d0:91:db:3b:dd:00:d7:a4:
         29:81:a2:ba:d8:63:77:69:c6:f8:68:da:08:c7:3b:87:cf:23:
         4f:90:22:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:47 2024 by rpki-client on console-fra.rpki-client.org