Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/__4NuVP1529RquCHQae8nOKn6uw.roa
File:                     __4NuVP1529RquCHQae8nOKn6uw.roa (raw, json)
Hash identifier:          DC07A30k2/207kcQlDzIdfHCd8UW8Gqz5dwh+tZ1cUQ=
Subject key identifier:   FF:FE:0D:B9:53:F5:E7:6F:51:AA:E0:87:41:A7:BC:9C:E2:A7:EA:EC
Certificate issuer:       /CN=57130f799f8a8985502a2ea3356037674085cfca
Certificate serial:       0188B1B0080A0F88BFC216D83A0A8797C73A
Authority key identifier: 57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/__4NuVP1529RquCHQae8nOKn6uw.roa
Signing time:             Mon 12 Jun 2023 22:18:03 +0000
ROA not before:           Mon 12 Jun 2023 22:18:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49999
IP address blocks:        45.149.36.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 08 Aug 2023 08:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:b1:b0:08:0a:0f:88:bf:c2:16:d8:3a:0a:87:97:c7:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57130f799f8a8985502a2ea3356037674085cfca
        Validity
            Not Before: Jun 12 22:18:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fffe0db953f5e76f51aae08741a7bc9ce2a7eaec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b6:5d:c6:f5:e4:34:b0:da:93:f9:17:01:f0:
                    bd:55:86:0c:34:af:46:7f:37:4a:d3:b9:37:5e:6a:
                    d4:ac:24:47:a7:7d:26:91:87:2a:77:25:b2:bf:61:
                    ef:6a:ed:3f:01:1a:b1:20:45:2b:39:c6:01:b6:f8:
                    13:7f:ed:b5:aa:c9:d7:bd:5f:96:60:45:cb:f0:5c:
                    c1:67:11:e8:7a:f2:c3:cd:2d:d7:43:15:3e:4e:c9:
                    f9:b7:69:49:d6:44:ab:a6:d7:04:d6:13:f4:9f:b0:
                    89:55:4a:5f:8d:76:fb:ab:a1:13:82:cc:89:8a:b1:
                    cd:1c:c8:f0:f6:f5:ed:13:85:8c:6f:7f:2c:79:6f:
                    be:2c:b7:a8:7b:71:28:c2:a2:84:73:c9:f1:5d:34:
                    da:f7:3d:31:88:b5:f8:8f:89:c8:9e:8c:bd:fb:42:
                    21:ce:be:27:8b:49:77:04:31:d7:13:6e:51:dc:ef:
                    e6:b8:51:35:b4:60:38:30:12:02:9b:39:38:16:a0:
                    6d:9d:d3:be:0d:2a:4f:fe:f7:03:e4:4a:e8:fe:79:
                    be:c3:a5:9b:9f:11:51:40:dc:d2:09:63:c0:18:e9:
                    95:cd:60:b7:00:90:e6:21:93:e3:48:41:01:4d:dd:
                    83:35:31:eb:53:d1:42:25:5c:23:c5:54:94:e0:3e:
                    25:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FE:0D:B9:53:F5:E7:6F:51:AA:E0:87:41:A7:BC:9C:E2:A7:EA:EC
            X509v3 Authority Key Identifier:
                keyid:57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/__4NuVP1529RquCHQae8nOKn6uw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.149.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:ca:bc:0d:8c:ee:eb:b0:14:15:ed:81:d9:02:30:98:52:03:
         a6:a7:ec:a2:2d:3a:f1:98:52:c9:b9:f2:a3:a7:fb:e2:ed:0b:
         d6:f8:12:40:8f:01:4e:ff:25:79:bc:b0:5c:82:74:7a:c5:be:
         2c:dc:2b:1f:51:75:90:ac:fa:28:e2:02:d8:ae:5f:49:7b:7c:
         b3:10:f9:f6:10:3c:bf:00:57:bf:85:b7:dd:e3:5d:99:ba:3d:
         2e:78:a3:16:da:53:6e:2e:2c:a1:6e:2c:21:3e:57:47:5a:8c:
         56:0e:b0:f4:03:49:68:73:b2:89:cf:6e:9f:49:11:09:40:e0:
         4b:0b:6d:77:b1:a7:bf:b3:6e:52:bd:62:2a:37:97:39:e0:40:
         84:97:5d:7f:96:d9:5d:4c:99:2a:4d:59:23:0a:18:a7:b0:47:
         d3:44:d2:31:e3:49:47:15:c4:c8:e1:83:02:40:68:bd:29:95:
         e7:a4:38:f9:8d:1c:eb:4d:52:d0:8d:b7:d2:7b:ed:47:2b:93:
         72:75:00:a0:80:03:4c:96:aa:4b:6a:87:b2:e8:02:f5:18:8c:
         0c:88:45:7b:b4:7e:a0:23:12:81:0b:c6:2f:a7:9b:6a:f6:8b:
         c7:8f:e6:2a:c9:01:55:6d:67:32:0f:b4:0a:8b:18:d8:0f:63:
         8c:ee:8e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-fra.rpki-client.org