Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/THSeGUGJqrcfMeY01b76SnEpg6g.roa
File:                     THSeGUGJqrcfMeY01b76SnEpg6g.roa (raw, json)
Hash identifier:          znU1b7UY66rtFC0/m5AKnXA1LGYM/mSU3CFe0L7S8jI=
Subject key identifier:   4C:74:9E:19:41:89:AA:B7:1F:31:E6:34:D5:BE:FA:4A:71:29:83:A8
Certificate issuer:       /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial:       01856FCB9431C692F962B908C47E500600E1
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/THSeGUGJqrcfMeY01b76SnEpg6g.roa
Signing time:             Mon 02 Jan 2023 00:04:50 +0000
ROA not before:           Mon 02 Jan 2023 00:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62579
IP address blocks:        45.81.149.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 11 Nov 2023 00:19:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:cb:94:31:c6:92:f9:62:b9:08:c4:7e:50:06:00:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
        Validity
            Not Before: Jan  2 00:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4c749e194189aab71f31e634d5befa4a712983a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e1:49:18:7f:14:22:c7:39:ab:d5:7d:2f:ba:
                    9b:50:97:62:0d:83:09:53:97:1f:65:c0:ea:20:06:
                    44:05:43:18:c8:bf:15:5e:8b:18:dd:f2:19:87:e1:
                    86:11:1b:e6:07:5c:62:75:19:08:2b:83:10:f5:c1:
                    d6:01:74:81:ce:5f:b3:4a:68:5c:6a:af:42:cb:11:
                    ed:91:01:3e:d1:27:3d:4d:f0:4d:e6:b9:23:7c:1a:
                    91:41:b2:04:b6:93:05:47:39:bc:f9:d0:c7:bc:d1:
                    79:9d:27:25:96:71:a6:fe:d4:50:d0:79:69:0c:f2:
                    75:33:df:74:9b:95:85:e1:93:17:31:7d:66:6e:c4:
                    21:e5:be:9e:ec:1c:f8:b0:42:9a:e1:ad:d8:57:81:
                    f5:95:ff:11:df:9b:8f:b0:76:99:ae:ca:e9:d5:ae:
                    f2:38:f9:c3:8c:a3:78:66:87:14:53:5b:ab:9c:55:
                    0f:e6:88:2e:7c:b7:6e:d8:52:91:3a:6c:bc:27:a2:
                    2b:ce:e6:03:96:4a:19:8b:05:2b:34:8c:37:01:f1:
                    a7:0b:6c:80:b0:ae:0e:78:07:52:82:da:d2:bd:4b:
                    1a:6e:dc:5a:39:76:31:b4:fd:03:d4:a7:fa:68:06:
                    8c:05:48:ac:dc:4f:9b:49:99:c4:7f:cc:a2:f5:90:
                    16:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:74:9E:19:41:89:AA:B7:1F:31:E6:34:D5:BE:FA:4A:71:29:83:A8
            X509v3 Authority Key Identifier:
                keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/THSeGUGJqrcfMeY01b76SnEpg6g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.81.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:c6:06:9a:9f:88:de:d0:46:c8:11:ee:49:23:fe:46:04:1d:
         e2:40:a8:16:a3:19:61:81:a6:b2:51:d8:16:63:6f:b0:05:4a:
         f4:a6:ce:af:88:01:e8:c1:89:65:c4:c1:f1:d9:44:20:96:f4:
         55:f6:29:db:27:03:32:0a:e2:29:da:40:a7:b4:93:86:c5:e3:
         9c:dd:63:38:c9:18:67:7c:5f:02:32:93:9f:8b:fa:66:5c:a3:
         c6:4e:19:94:a8:8a:51:bc:72:bf:76:a6:0b:a0:92:29:82:1c:
         a3:fa:8f:4d:eb:88:88:53:d2:f4:5d:a9:5c:98:42:d4:13:c2:
         2b:b9:80:d0:e7:6c:e4:03:17:fb:43:9a:a0:77:9a:52:5c:55:
         9a:ca:b0:ad:af:81:55:db:2a:00:c8:54:b5:4b:81:bb:54:07:
         b3:8e:86:7d:9b:6c:8a:c6:5a:58:92:78:14:46:f0:c6:02:77:
         5e:c9:43:9b:c1:5f:be:17:18:5e:57:c8:3d:3c:6a:50:4e:59:
         e2:e4:39:7a:27:de:a6:6d:f7:76:82:96:c6:32:54:92:11:53:
         41:5f:ff:5e:b7:9a:fe:a7:49:06:40:d1:02:89:64:3c:e9:54:
         72:52:4a:64:82:87:9b:a6:04:b9:44:cb:53:73:e0:4d:2a:f5:
         06:48:cc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-fra.rpki-client.org