Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/UE_YIidWGRLzYpV8FWUvQthZxzs.roa
File:                     UE_YIidWGRLzYpV8FWUvQthZxzs.roa (raw, json)
Hash identifier:          W+olXQqQz17QmPwJm/eP9IKRtEh3xo/u39WRdneAp7s=
Subject key identifier:   50:4F:D8:22:27:56:19:12:F3:62:95:7C:15:65:2F:42:D8:59:C7:3B
Certificate issuer:       /CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Certificate serial:       018571A7983562649ABEA7E53CD025CB85CD
Authority key identifier: 2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/UE_YIidWGRLzYpV8FWUvQthZxzs.roa
Signing time:             Mon 02 Jan 2023 08:44:46 +0000
ROA not before:           Mon 02 Jan 2023 08:44:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51324
IP address blocks:        45.93.188.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:31:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:a7:98:35:62:64:9a:be:a7:e5:3c:d0:25:cb:85:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
        Validity
            Not Before: Jan  2 08:44:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=504fd82227561912f362957c15652f42d859c73b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4f:22:6a:b8:0e:ba:05:a4:3e:8a:c0:c2:fe:
                    71:49:b8:c6:54:08:9f:6e:29:a5:03:75:d0:fa:eb:
                    01:13:b5:81:99:a9:38:ab:6a:e1:8e:78:ea:13:45:
                    b3:86:7b:a4:4f:ac:92:df:e9:b4:86:65:20:76:57:
                    51:f8:44:3f:ba:b4:d7:35:5b:c4:7c:63:f3:3f:39:
                    b1:d1:c4:64:d5:30:6b:a9:00:e3:ad:df:fe:ef:57:
                    a7:98:57:15:76:77:db:9a:b5:61:9c:ee:fb:cb:e5:
                    71:04:bc:32:d1:cb:c7:c1:9a:1e:b9:e7:44:41:80:
                    5e:99:18:88:78:1f:69:f5:4c:c0:c0:5d:eb:7b:b3:
                    43:d5:1a:28:77:ca:fd:19:6e:57:fd:31:f5:fc:d9:
                    98:5b:b3:73:ea:14:28:db:92:c5:09:e4:e6:fd:92:
                    6b:15:a5:c3:0b:cb:e5:4d:e8:6f:de:66:b2:ce:d6:
                    80:ae:cc:e9:07:82:93:68:ac:1f:f0:0e:5a:43:86:
                    82:17:68:72:b2:07:2d:da:36:74:2d:74:5f:18:87:
                    dd:10:00:cf:65:b3:bf:c6:2a:ff:de:b7:32:f8:1e:
                    5b:c2:e8:a4:2f:b1:43:23:8b:f4:d6:66:33:6d:1f:
                    35:d5:1b:25:a3:42:22:79:ba:f9:45:04:f6:0b:d6:
                    12:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4F:D8:22:27:56:19:12:F3:62:95:7C:15:65:2F:42:D8:59:C7:3B
            X509v3 Authority Key Identifier:
                keyid:2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/UE_YIidWGRLzYpV8FWUvQthZxzs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.93.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:1a:01:68:7d:5e:c7:40:11:6f:6d:93:d7:5a:fe:bb:28:f0:
         3d:72:4e:18:ea:91:e7:ca:c2:94:52:57:0e:16:20:2b:c0:7f:
         cb:8c:df:cd:e3:40:3c:29:a5:06:c0:d4:8a:c0:cb:b0:6c:08:
         8f:1a:62:0f:18:67:c1:8b:1d:ea:95:75:67:f6:79:46:7f:89:
         20:ac:87:62:78:c0:29:d1:0a:2c:f1:dc:0c:0b:de:1f:48:e9:
         49:19:6f:76:9e:d1:8b:c5:59:df:f9:a7:77:db:6c:4a:97:ea:
         48:bf:ee:f1:3e:a5:43:60:7e:58:a5:8d:b6:3b:6d:03:91:f7:
         4b:4c:ec:f6:de:16:c6:f4:34:36:7a:05:e5:b6:83:d0:dc:60:
         07:0c:2c:68:5e:99:d4:dd:c9:cd:1a:bf:f1:68:21:16:86:45:
         af:d9:dd:36:d9:ed:13:92:8d:ff:50:c4:68:f7:a1:d1:aa:fe:
         f2:8b:3d:a4:71:01:1a:9c:a5:8e:fa:4e:6b:cc:bd:50:30:b8:
         5f:3e:d3:bf:02:a0:c2:57:08:da:cd:5f:47:73:2a:87:d7:a9:
         4a:b0:23:ea:a9:cf:0e:2c:63:c2:5a:c6:64:cf:c5:f8:b8:9f:
         82:03:13:15:85:75:03:2f:f9:fb:6a:cb:4a:8d:32:f8:be:3c:
         5c:6b:5b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:56 2024 by rpki-client on console-fra.rpki-client.org