Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/NxyGlbnvp-ZSHuBaXCAob_Ib0lc.roa
File:                     NxyGlbnvp-ZSHuBaXCAob_Ib0lc.roa (raw, json)
Hash identifier:          hS1UHIP5r+k7XiF0feBNGr1AAYZz/1NRedlOJLjZ9ew=
Subject key identifier:   37:1C:86:95:B9:EF:A7:E6:52:1E:E0:5A:5C:20:28:6F:F2:1B:D2:57
Certificate issuer:       /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial:       018BA06550FCA9F0F42D59D158E8874FA903
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/NxyGlbnvp-ZSHuBaXCAob_Ib0lc.roa
Signing time:             Sun 05 Nov 2023 16:51:16 +0000
ROA not before:           Sun 05 Nov 2023 16:51:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        45.145.152.0/24 maxlen: 24
                          45.145.154.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Tue 07 Nov 2023 21:56:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:a0:65:50:fc:a9:f0:f4:2d:59:d1:58:e8:87:4f:a9:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
        Validity
            Not Before: Nov  5 16:51:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=371c8695b9efa7e6521ee05a5c20286ff21bd257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ad:d6:13:4d:a1:85:b3:e3:77:dd:02:f9:79:
                    7e:4d:55:0a:cd:2d:b6:8f:dc:f3:97:e8:ff:30:45:
                    dc:5e:7b:38:4d:58:5b:18:33:5c:e1:7f:ed:9c:dd:
                    31:a0:e2:ee:c5:73:1b:c5:8a:b8:3d:0c:fb:12:76:
                    b0:8e:ea:1f:51:35:5f:c1:50:7e:a1:23:4d:9e:7e:
                    2e:4a:ba:0b:67:79:00:ba:ce:78:cc:8b:49:c8:57:
                    1c:c4:63:d3:c2:c5:f3:0d:cf:f7:88:e6:c5:40:c5:
                    7d:6e:23:ce:be:3e:d3:4c:99:52:28:11:75:0f:d1:
                    d5:68:96:39:b9:11:9d:29:46:2b:c4:46:c4:f1:69:
                    0b:98:b0:5f:92:86:0c:73:ad:ef:06:ab:7e:49:94:
                    73:4d:fd:89:99:fb:ce:8f:3a:8d:88:0a:17:d8:29:
                    b5:29:dc:49:c1:ef:ff:98:a6:b1:e4:0c:19:46:2b:
                    c1:be:be:30:47:fa:47:d6:cb:a2:51:9d:0e:ad:3c:
                    18:7d:ce:c9:c3:82:e8:c4:16:6a:88:5d:48:e5:6d:
                    7e:35:09:5c:44:0d:0d:17:51:5d:79:1f:b2:ca:37:
                    92:16:6f:e9:04:e6:10:66:28:df:69:e1:95:7d:76:
                    c6:d6:c6:91:45:59:71:c1:a8:39:91:3c:99:04:36:
                    e9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:1C:86:95:B9:EF:A7:E6:52:1E:E0:5A:5C:20:28:6F:F2:1B:D2:57
            X509v3 Authority Key Identifier:
                keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/NxyGlbnvp-ZSHuBaXCAob_Ib0lc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.145.152.0/24
                  45.145.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:52:6d:c8:4c:0d:1e:f1:4f:1f:47:82:7b:2e:d4:4a:38:9a:
         1b:f7:ae:63:68:71:fb:fe:ca:ae:ae:8f:c7:f1:1e:19:28:51:
         d7:f1:d1:15:61:f6:aa:8c:66:e9:67:e2:e7:11:bf:8d:f2:fd:
         65:32:c4:18:2e:44:c2:3b:a6:3c:4c:31:f1:9b:74:91:b6:df:
         cc:dd:55:42:66:bf:4f:92:88:fe:98:c8:40:07:d9:5e:44:bd:
         0c:d7:46:bc:26:41:17:3c:75:c2:37:38:ec:5a:72:ed:1e:c6:
         4c:1f:53:18:b8:2b:b4:fe:b8:36:90:78:31:07:76:2c:a2:4b:
         51:c3:32:97:95:9f:d2:7d:c6:07:ec:08:3d:1a:e6:15:36:e8:
         81:b8:37:1e:92:1f:d0:f7:68:da:44:8a:dd:8b:4c:6c:cd:7f:
         73:cd:b8:6f:6b:f6:26:05:4e:f5:1b:fa:10:88:a3:24:43:fa:
         40:96:a2:18:32:c2:3d:3c:33:cb:ad:b6:64:27:c3:94:1d:2b:
         f8:0c:f4:8a:41:7f:87:2f:02:aa:ea:9f:5e:4c:6f:a1:06:82:
         3f:bc:43:f2:a9:82:59:d9:0d:dd:4e:b0:f5:a8:12:25:57:c5:
         e0:28:70:13:d7:02:ed:dc:2b:96:3d:b2:25:e6:f1:7b:03:d4:
         bb:9a:58:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:25 2024 by rpki-client on console-fra.rpki-client.org