Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/uy7Y1s5_nYUJ6S9GIyfvW8mAhXM.roa
File:                     uy7Y1s5_nYUJ6S9GIyfvW8mAhXM.roa (raw, json)
Hash identifier:          yTDeKbNVBs033vH+7vdKuqDENBYbKUEeuYXSY9zCrk8=
Subject key identifier:   BB:2E:D8:D6:CE:7F:9D:85:09:E9:2F:46:23:27:EF:5B:C9:80:85:73
Certificate issuer:       /CN=57130f799f8a8985502a2ea3356037674085cfca
Certificate serial:       018BC8417E71A39E0830ADFF185D1E29AA83
Authority key identifier: 57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/uy7Y1s5_nYUJ6S9GIyfvW8mAhXM.roa
Signing time:             Mon 13 Nov 2023 10:36:57 +0000
ROA not before:           Mon 13 Nov 2023 10:36:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199925
IP address blocks:        45.149.37.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 10:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:c8:41:7e:71:a3:9e:08:30:ad:ff:18:5d:1e:29:aa:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57130f799f8a8985502a2ea3356037674085cfca
        Validity
            Not Before: Nov 13 10:36:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bb2ed8d6ce7f9d8509e92f462327ef5bc9808573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:12:94:85:f9:b4:e4:68:81:ea:11:22:69:fe:
                    b6:26:04:bd:4f:4e:20:e9:1b:26:0f:34:c1:b3:1b:
                    25:f5:f1:7e:5c:e9:68:75:fa:69:f4:b2:91:af:67:
                    41:89:1a:ff:e7:82:85:00:b9:d2:c3:7e:35:74:5a:
                    11:eb:e8:70:1f:40:1d:9f:c8:2c:25:aa:1f:1b:a0:
                    86:83:8e:9f:ca:dc:5a:24:0f:58:1b:7f:69:51:02:
                    c8:9f:de:83:0f:19:51:14:0d:2d:a0:db:e1:ef:a2:
                    a0:ff:fc:81:d8:f3:31:44:39:8b:03:30:4d:9e:50:
                    12:d3:47:ab:85:9c:91:b5:39:6c:90:ca:0b:dd:a6:
                    6e:8b:a5:1c:b1:40:a7:4f:4d:12:be:b3:f9:9c:39:
                    e5:32:f8:db:c1:fb:75:5d:3d:7d:f1:bb:dc:4c:e9:
                    3c:1e:0a:41:ed:65:f4:52:6e:87:24:39:89:1a:74:
                    00:8c:09:31:cc:a8:fc:8e:16:ad:06:46:76:1a:59:
                    19:8d:d9:48:15:8f:3f:fa:cf:50:c1:22:85:63:5f:
                    ff:40:85:63:14:7e:c9:cb:22:d6:88:f4:20:4e:50:
                    85:9a:7e:cc:66:0e:c5:d0:15:9f:7a:f8:81:1a:26:
                    e8:b7:c5:db:5f:71:f7:57:0d:a9:5f:c7:27:67:59:
                    2f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:2E:D8:D6:CE:7F:9D:85:09:E9:2F:46:23:27:EF:5B:C9:80:85:73
            X509v3 Authority Key Identifier:
                keyid:57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/uy7Y1s5_nYUJ6S9GIyfvW8mAhXM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.149.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:08:a4:c5:03:00:ee:6f:df:45:26:8c:a1:49:f5:67:ec:ef:
         d6:eb:bf:bf:d3:72:ae:1c:41:5d:b4:f2:75:fa:36:a8:d3:b8:
         e8:02:61:ef:d7:d8:83:51:14:ee:e5:43:b3:c7:75:bb:94:41:
         b6:f4:5a:c7:53:0e:7b:b9:2d:45:7d:8a:f4:67:28:80:1d:42:
         2e:d5:61:d6:3a:53:93:9c:39:cf:da:de:cf:c0:8f:8c:b9:30:
         ea:3d:06:97:05:a7:c9:ae:d8:bd:1a:17:f5:f0:79:4b:59:f5:
         0c:b9:94:12:a3:bf:b1:df:7b:8e:34:fa:f6:d2:a5:3b:a4:f5:
         fd:b6:43:27:e9:ec:61:6a:83:1c:8d:ed:13:90:74:a5:d1:0e:
         2c:b8:4b:ea:59:01:2f:b8:a9:63:e4:bf:19:de:9b:33:18:f0:
         51:ce:7c:40:eb:88:e2:88:07:c0:db:7d:51:d3:91:51:c1:c1:
         5d:c9:cb:56:d9:15:71:ec:96:5c:f5:8f:6a:9b:2d:35:39:19:
         b5:23:b9:2f:51:4f:73:c6:05:0f:37:2b:ec:46:08:be:40:63:
         fe:1b:86:8e:45:c9:c2:dd:10:03:bb:3a:96:54:ba:c9:d2:11:
         c2:5e:9c:dd:e0:7d:be:9a:01:70:d0:23:67:f5:e1:41:9a:80:
         a6:28:4d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-fra.rpki-client.org