Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/BdrZcs1EQoguJEMQsUTldd7F8Uo.roa
File:                     BdrZcs1EQoguJEMQsUTldd7F8Uo.roa (raw, json)
Hash identifier:          5Eyk3FCpVZ+XZs6kfqB1KGDt+SAq2zqVHeuxDAkmRGk=
Subject key identifier:   05:DA:D9:72:CD:44:42:88:2E:24:43:10:B1:44:E5:75:DE:C5:F1:4A
Certificate issuer:       /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial:       01856F798EBB5EEB89661D2A79FE5FE329DA
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/BdrZcs1EQoguJEMQsUTldd7F8Uo.roa
Signing time:             Sun 01 Jan 2023 22:35:15 +0000
ROA not before:           Sun 01 Jan 2023 22:35:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201814
IP address blocks:        45.138.16.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 24 May 2023 06:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:79:8e:bb:5e:eb:89:66:1d:2a:79:fe:5f:e3:29:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
        Validity
            Not Before: Jan  1 22:35:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=05dad972cd4442882e244310b144e575dec5f14a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c2:15:1c:73:62:b5:cb:4e:d4:06:41:f9:b9:
                    0f:fd:37:6d:9d:a0:ff:2b:08:b3:7b:cf:87:16:e7:
                    c1:1e:c2:ac:8a:7d:43:d5:f1:66:e7:eb:9b:f1:3a:
                    fa:45:35:86:4f:22:9d:43:c1:d1:0b:73:6c:a4:c4:
                    23:17:fa:5a:b1:9f:b1:5e:9c:e9:3b:68:99:e5:a4:
                    c8:9f:59:e7:2a:32:bb:7b:24:a0:0b:97:9a:f4:91:
                    5f:4f:e4:15:f1:ad:51:5e:4b:08:b2:c7:69:67:2e:
                    b3:fc:d9:89:43:62:62:86:88:b7:ed:59:ef:5a:36:
                    fe:23:e6:09:e4:82:cd:61:0d:2c:eb:74:58:72:9f:
                    5d:89:4a:b7:a3:78:1a:44:6b:94:7b:45:c2:31:ee:
                    b9:8d:1d:de:c3:ab:05:b4:bc:04:4a:13:74:18:d7:
                    97:ee:d4:e5:d1:85:75:ae:c2:c8:3e:f3:bb:86:90:
                    74:4b:d7:a0:45:ec:94:52:0c:1b:b4:e8:7e:01:0a:
                    9c:b2:ba:b3:57:06:09:e6:9d:d9:a1:26:c6:d5:5f:
                    7f:2f:17:6a:1b:d1:30:21:e8:4b:83:cb:e3:72:fd:
                    6e:2a:f5:90:27:bc:15:75:28:b7:00:ac:de:f3:0b:
                    84:c4:57:f8:89:03:87:4a:ab:2c:fd:de:fd:8e:3f:
                    41:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DA:D9:72:CD:44:42:88:2E:24:43:10:B1:44:E5:75:DE:C5:F1:4A
            X509v3 Authority Key Identifier:
                keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/BdrZcs1EQoguJEMQsUTldd7F8Uo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.138.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:c5:bc:d1:32:48:26:e4:35:fd:ec:43:c1:6d:c1:76:9b:0c:
         ba:8e:db:36:b5:0e:50:68:53:ce:68:cf:a4:92:68:ea:5b:d3:
         61:50:39:c2:82:c2:fc:c7:07:e3:bf:a1:44:90:78:5c:11:9c:
         12:e4:2b:fc:53:a2:38:34:c8:e3:35:67:9c:65:39:52:c8:26:
         06:76:60:21:aa:42:f1:47:fb:66:6d:27:95:ae:ad:fc:9f:b6:
         81:eb:07:66:30:e9:25:c4:b9:9d:77:3b:61:57:38:f1:c7:f8:
         8f:1a:03:99:1f:59:ba:c6:16:aa:a3:e2:88:b3:f4:15:c7:6c:
         1e:ce:f1:87:db:eb:1b:4c:f2:72:22:66:ca:10:f7:f5:29:57:
         5f:e5:6a:72:51:c3:b5:9b:8d:a9:a6:71:6a:32:0b:94:ec:e7:
         3b:fc:1e:ad:64:c2:6d:87:6c:ca:3e:8a:24:0d:be:41:38:0c:
         bf:53:29:21:7e:68:a5:c4:28:15:9b:0b:21:2a:20:78:8f:51:
         0e:fc:6f:7a:46:e6:64:2b:a8:62:d2:50:41:1f:bd:c1:57:78:
         31:9a:b9:89:f9:9b:4d:a5:c6:df:fd:0c:2d:3c:bd:d9:0b:64:
         82:a3:7d:e4:9f:69:c9:2d:93:64:14:ec:f1:04:bd:ae:db:3d:
         9b:80:1a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:51 2024 by rpki-client on console-ams.rpki-client.org