Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/uTRVffe51OyXGZFv1kfBXAbnsc4.roa
File:                     uTRVffe51OyXGZFv1kfBXAbnsc4.roa (raw, json)
Hash identifier:          kiDBPpS7HMaeUt4XbCX/Gv7PzhdeTeyXi5lLPqZML4s=
Subject key identifier:   B9:34:55:7D:F7:B9:D4:EC:97:19:91:6F:D6:47:C1:5C:06:E7:B1:CE
Certificate issuer:       /CN=732adfeeda50be0369a52be4951a093968744f67
Certificate serial:       01856DD41FBF0C3E355B82A33F030DC68760
Authority key identifier: 73:2A:DF:EE:DA:50:BE:03:69:A5:2B:E4:95:1A:09:39:68:74:4F:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cyrf7tpQvgNppSvklRoJOWh0T2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/uTRVffe51OyXGZFv1kfBXAbnsc4.roa
Signing time:             Sun 01 Jan 2023 14:54:56 +0000
ROA not before:           Sun 01 Jan 2023 14:54:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208891
IP address blocks:        45.80.236.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 22:29:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:d4:1f:bf:0c:3e:35:5b:82:a3:3f:03:0d:c6:87:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=732adfeeda50be0369a52be4951a093968744f67
        Validity
            Not Before: Jan  1 14:54:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b934557df7b9d4ec9719916fd647c15c06e7b1ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d5:0a:9a:47:04:17:35:b3:41:79:63:e0:4f:
                    64:5f:e7:ed:bd:0b:37:df:ae:63:ee:8c:f2:2f:ff:
                    90:21:cd:29:2a:42:5f:dd:1b:3f:bd:e6:77:0e:37:
                    12:4f:a5:10:ed:4e:a0:8d:79:57:e5:2e:37:3d:b1:
                    a0:88:b0:7a:08:92:e6:d1:90:e9:e8:60:99:1c:25:
                    3e:65:42:9a:35:2a:05:ee:de:84:58:20:fc:f9:23:
                    08:de:0f:df:eb:e9:c0:e3:bf:50:cb:d1:5c:69:71:
                    d0:18:48:ce:1a:3d:a2:fe:90:ce:b4:44:6c:45:d2:
                    e7:fc:b0:05:57:01:f1:b0:22:0b:98:7b:89:46:0e:
                    3d:ca:49:24:74:81:ac:87:db:2e:ad:d3:33:e0:5a:
                    29:dd:04:6c:0c:02:56:25:7f:2f:2c:6c:68:46:9e:
                    5b:06:0e:84:13:5d:b5:0e:60:49:02:5b:3f:47:6c:
                    ec:75:39:84:09:76:be:77:bc:6b:eb:04:66:1e:d4:
                    55:c1:ee:e6:00:82:77:18:56:4a:e5:9d:56:b2:b4:
                    f1:09:fd:93:17:e9:bc:b3:87:a5:06:13:9b:49:a1:
                    02:0d:42:d0:d8:dc:77:c2:db:5e:bf:bc:54:59:2e:
                    db:34:ea:c9:9a:c0:6a:86:9b:63:77:4a:18:7c:7a:
                    99:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:34:55:7D:F7:B9:D4:EC:97:19:91:6F:D6:47:C1:5C:06:E7:B1:CE
            X509v3 Authority Key Identifier:
                keyid:73:2A:DF:EE:DA:50:BE:03:69:A5:2B:E4:95:1A:09:39:68:74:4F:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cyrf7tpQvgNppSvklRoJOWh0T2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/uTRVffe51OyXGZFv1kfBXAbnsc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/e7722b-e54d-424d-b6c7-e32d05d19235/1/cyrf7tpQvgNppSvklRoJOWh0T2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.80.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:87:0c:4e:6d:33:34:c9:05:a1:c5:9a:33:99:b0:68:da:e3:
         4a:08:e8:3b:a1:fa:3e:6c:3d:d4:00:87:24:04:61:44:80:12:
         b8:6b:80:13:f8:b4:0e:7f:88:fb:bf:25:0e:7e:82:60:a8:6f:
         c4:4b:58:99:10:84:ad:ac:cd:39:9d:09:30:3a:ed:78:5d:99:
         c4:d8:97:7c:e0:63:77:2f:96:3e:74:c6:17:33:c9:e1:e2:04:
         b9:86:bf:fa:10:f6:47:0a:ee:70:26:cb:7e:cc:34:e5:b2:92:
         12:c4:0e:c6:cc:64:e8:d7:b9:d0:75:3f:7b:45:cc:51:9f:56:
         e0:ee:61:88:46:af:69:a4:23:3c:9f:75:0d:e8:c4:4f:d5:52:
         d1:42:fa:18:eb:5e:1a:2a:f5:7c:20:c0:d5:d3:72:0b:9d:00:
         28:f4:55:1e:1c:30:83:ef:fa:cb:3d:71:0b:97:03:48:65:af:
         67:07:8b:fe:71:d4:c0:96:b3:de:9a:f6:b0:01:9d:bf:b0:6d:
         da:8c:42:8b:9c:6b:58:88:60:4a:a2:1f:08:53:88:4d:f8:23:
         0a:71:dc:63:28:5a:82:5f:41:fc:a6:c6:09:7a:4b:57:23:96:
         1e:d6:82:01:90:10:4d:50:7a:bd:d5:f1:82:7f:4a:7a:58:47:
         fb:9d:ae:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVt1B+/DD41W4KjPwMNxodgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMmFkZmVlZGE1MGJlMDM2OWE1MmJlNDk1MWEwOTM5Njg3
NDRmNjcwHhcNMjMwMTAxMTQ1NDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTM0NTU3ZGY3YjlkNGVjOTcxOTkxNmZkNjQ3YzE1YzA2ZTdiMWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9UKmkcEFzWzQXlj4E9kX+ftvQs3
365j7ozyL/+QIc0pKkJf3Rs/veZ3DjcST6UQ7U6gjXlX5S43PbGgiLB6CJLm0ZDp
6GCZHCU+ZUKaNSoF7t6EWCD8+SMI3g/f6+nA479Qy9FcaXHQGEjOGj2i/pDOtERs
RdLn/LAFVwHxsCILmHuJRg49ykkkdIGsh9surdMz4Fop3QRsDAJWJX8vLGxoRp5b
Bg6EE121DmBJAls/R2zsdTmECXa+d7xr6wRmHtRVwe7mAIJ3GFZK5Z1WsrTxCf2T
F+m8s4elBhObSaECDULQ2Nx3wttev7xUWS7bNOrJmsBqhptjd0oYfHqZZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLk0VX33udTslxmRb9ZHwVwG57HOMB8GA1UdIwQY
MBaAFHMq3+7aUL4DaaUr5JUaCTlodE9nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3lyZjd0cFF2Z05wcFN2a2xSb0pPV2gwVDJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9lNzcyMmItZTU0ZC00MjRkLWI2Yzct
ZTMyZDA1ZDE5MjM1LzEvdVRSVmZmZTUxT3lYR1pGdjFrZkJYQWJuc2M0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9lNzcyMmItZTU0ZC00MjRkLWI2YzctZTMyZDA1ZDE5MjM1
LzEvY3lyZjd0cFF2Z05wcFN2a2xSb0pPV2gwVDJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVDsMA0G
CSqGSIb3DQEBCwUAA4IBAQCPhwxObTM0yQWhxZozmbBo2uNKCOg7ofo+bD3UAIck
BGFEgBK4a4AT+LQOf4j7vyUOfoJgqG/ES1iZEIStrM05nQkwOu14XZnE2Jd84GN3
L5Y+dMYXM8nh4gS5hr/6EPZHCu5wJst+zDTlspISxA7GzGTo17nQdT97RcxRn1bg
7mGIRq9ppCM8n3UN6MRP1VLRQvoY614aKvV8IMDV03ILnQAo9FUeHDCD7/rLPXEL
lwNIZa9nB4v+cdTAlrPemvawAZ2/sG3ajEKLnGtYiGBKoh8IU4hN+CMKcdxjKFqC
X0H8psYJektXI5Ye1oIBkBBNUHq91fGCf0p6WEf7na4v
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:31 2024 by rpki-client on console-ams.rpki-client.org