Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/tFN1EHMZsV0dVhxQgFfjJO9BvvE.roa
File:                     tFN1EHMZsV0dVhxQgFfjJO9BvvE.roa (raw, json)
Hash identifier:          /AzNNm2/PU4JzuzPesO6g2WygyfDK/wLR8fcB7ZdKuU=
Subject key identifier:   B4:53:75:10:73:19:B1:5D:1D:56:1C:50:80:57:E3:24:EF:41:BE:F1
Certificate issuer:       /CN=4c261919b55c2c08f72a5ab1d0eb185ee12bdff7
Certificate serial:       0185F15FD74E48578D13DD4558DDD1ED4F28
Authority key identifier: 4C:26:19:19:B5:5C:2C:08:F7:2A:5A:B1:D0:EB:18:5E:E1:2B:DF:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TCYZGbVcLAj3Klqx0OsYXuEr3_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/tFN1EHMZsV0dVhxQgFfjJO9BvvE.roa
Signing time:             Fri 27 Jan 2023 03:57:48 +0000
ROA not before:           Fri 27 Jan 2023 03:57:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201570
IP address blocks:        46.45.49.0/24 maxlen: 24
                          46.45.50.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 08:31:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:f1:5f:d7:4e:48:57:8d:13:dd:45:58:dd:d1:ed:4f:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c261919b55c2c08f72a5ab1d0eb185ee12bdff7
        Validity
            Not Before: Jan 27 03:57:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b45375107319b15d1d561c508057e324ef41bef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f3:14:0c:eb:b7:52:34:ff:6d:75:47:54:7e:
                    cb:b6:e0:ef:2a:27:ea:fd:2e:01:69:e4:77:9f:79:
                    f6:4a:c9:b5:3d:ca:b1:da:83:7b:86:20:7c:a9:68:
                    12:6d:5f:a3:9f:c7:1e:de:6e:d8:09:dd:3c:d9:16:
                    c6:10:2e:71:b4:12:16:13:c0:c4:b4:7e:3a:26:1c:
                    b1:bf:3f:de:9a:10:c3:b0:28:82:60:9f:8e:09:a8:
                    55:51:cb:f5:6e:ea:88:ef:66:a2:82:89:41:f4:5b:
                    08:e2:72:f1:19:d6:6a:f5:54:f0:71:fc:ba:36:0c:
                    f5:d9:65:20:39:7d:75:74:b5:36:98:b9:dd:49:1c:
                    9f:b8:f5:43:77:24:ae:9e:18:21:8d:3d:16:41:da:
                    10:08:91:e7:d3:82:6c:d5:59:3e:dc:f4:87:cf:fe:
                    e2:d5:b1:a7:89:25:5c:a0:43:55:70:ae:c6:58:f4:
                    2a:93:da:a8:b1:cb:f1:0f:48:1e:c6:a1:30:01:ac:
                    f3:47:89:46:7f:4c:2d:df:96:54:84:2d:7d:8d:24:
                    f6:53:94:e1:5e:00:19:c6:ca:3c:4e:a2:b0:71:70:
                    32:cc:2a:b8:ea:2c:42:46:c1:01:d1:f2:54:79:66:
                    c9:44:6a:2f:98:b7:6d:16:d8:a2:d3:d2:5f:ac:d6:
                    68:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:53:75:10:73:19:B1:5D:1D:56:1C:50:80:57:E3:24:EF:41:BE:F1
            X509v3 Authority Key Identifier:
                keyid:4C:26:19:19:B5:5C:2C:08:F7:2A:5A:B1:D0:EB:18:5E:E1:2B:DF:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCYZGbVcLAj3Klqx0OsYXuEr3_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/tFN1EHMZsV0dVhxQgFfjJO9BvvE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.45.49.0-46.45.50.255

    Signature Algorithm: sha256WithRSAEncryption
         75:e2:d5:aa:21:11:a5:99:c7:7c:41:2f:e2:10:2a:53:b8:6b:
         6e:4b:27:33:22:8e:fd:ab:67:15:0c:21:ad:bf:84:2e:4c:0b:
         18:0a:36:dd:cb:6c:39:46:69:85:e1:d0:c4:6a:aa:f8:73:e2:
         60:48:65:92:50:a8:01:8b:35:53:bb:c2:fc:69:6e:1d:98:46:
         2a:bb:e4:88:f1:d3:60:7d:48:20:27:bd:1b:47:af:1f:b9:5a:
         24:48:35:8a:92:37:85:77:93:09:c1:3e:3e:ac:3a:29:1b:77:
         7b:a9:31:85:f4:b8:fc:cd:fe:40:5b:a2:ec:f0:a9:15:e3:48:
         e9:b5:dd:74:fd:a0:7e:79:00:7e:d1:43:52:ef:67:21:ba:01:
         f0:c3:83:d2:bd:35:f0:9a:e6:6e:e2:b2:4c:2d:12:51:53:e4:
         ee:c9:21:87:1c:ad:da:b3:1b:e9:7c:f8:38:3e:58:8e:5b:fb:
         3e:95:13:8c:fc:b9:f9:32:3e:13:43:d2:b3:84:75:98:07:3d:
         e3:bc:0d:38:e7:0e:17:0b:0f:4c:4d:ae:ae:ab:61:21:c8:7e:
         f1:f0:e7:8a:95:3f:1a:eb:b6:cc:d0:66:a8:03:9a:7d:e6:20:
         6b:e2:ae:21:ba:76:22:e0:70:21:b3:87:c8:78:a3:6e:35:b7:
         bc:23:c6:c5
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYXxX9dOSFeNE91FWN3R7U8oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMjYxOTE5YjU1YzJjMDhmNzJhNWFiMWQwZWIxODVlZTEy
YmRmZjcwHhcNMjMwMTI3MDM1NzQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDUzNzUxMDczMTliMTVkMWQ1NjFjNTA4MDU3ZTMyNGVmNDFiZWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/MUDOu3UjT/bXVHVH7LtuDvKifq
/S4BaeR3n3n2Ssm1Pcqx2oN7hiB8qWgSbV+jn8ce3m7YCd082RbGEC5xtBIWE8DE
tH46Jhyxvz/emhDDsCiCYJ+OCahVUcv1buqI72aigolB9FsI4nLxGdZq9VTwcfy6
Ngz12WUgOX11dLU2mLndSRyfuPVDdySunhghjT0WQdoQCJHn04Js1Vk+3PSHz/7i
1bGniSVcoENVcK7GWPQqk9qoscvxD0gexqEwAazzR4lGf0wt35ZUhC19jST2U5Th
XgAZxso8TqKwcXAyzCq46ixCRsEB0fJUeWbJRGovmLdtFtii09JfrNZobQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFLRTdRBzGbFdHVYcUIBX4yTvQb7xMB8GA1UdIwQY
MBaAFEwmGRm1XCwI9ypasdDrGF7hK9/3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVENZWkdiVmNMQWozS2xxeDBPc1lYdUVyM19jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9jMWQ5NDAtMDQ0ZC00OWM0LWE3YTEt
YTAwNzY2NzliZTYwLzEvdEZOMUVITVpzVjBkVmh4UWdGZmpKTzlCdnZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9jMWQ5NDAtMDQ0ZC00OWM0LWE3YTEtYTAwNzY2NzliZTYw
LzEvVENZWkdiVmNMQWozS2xxeDBPc1lYdUVyM19jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAuLTED
BAAuLTIwDQYJKoZIhvcNAQELBQADggEBAHXi1aohEaWZx3xBL+IQKlO4a25LJzMi
jv2rZxUMIa2/hC5MCxgKNt3LbDlGaYXh0MRqqvhz4mBIZZJQqAGLNVO7wvxpbh2Y
Riq75Ijx02B9SCAnvRtHrx+5WiRINYqSN4V3kwnBPj6sOikbd3upMYX0uPzN/kBb
ouzwqRXjSOm13XT9oH55AH7RQ1LvZyG6AfDDg9K9NfCa5m7iskwtElFT5O7JIYcc
rdqzG+l8+Dg+WI5b+z6VE4z8ufkyPhND0rOEdZgHPeO8DTjnDhcLD0xNrq6rYSHI
fvHw54qVPxrrtszQZqgDmn3mIGviriG6diLgcCGzh8h4o241t7wjxsU=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:56 2024 by rpki-client on console-ams.rpki-client.org