Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/zn88NhjNIsN2s14URLpPQDyqxV8.roa
File:                     zn88NhjNIsN2s14URLpPQDyqxV8.roa (raw, json)
Hash identifier:          Wz7peWO0fStcxDn/et3vl5+/M4Fy0eZwwUP4CeKw8vQ=
Subject key identifier:   CE:7F:3C:36:18:CD:22:C3:76:B3:5E:14:44:BA:4F:40:3C:AA:C5:5F
Certificate issuer:       /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial:       018BFAC9597EBB0F77DEA93EC9C08CAF18A1
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/zn88NhjNIsN2s14URLpPQDyqxV8.roa
Signing time:             Thu 23 Nov 2023 06:06:21 +0000
ROA not before:           Thu 23 Nov 2023 06:06:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206150
IP address blocks:        45.130.140.0/24 maxlen: 24
                          2a0f:f43::/32 maxlen: 48
                          2a0f:f47::/32 maxlen: 48
                          2a0f:f45::/32 maxlen: 48
                          2a0f:f41::/32 maxlen: 32
                          2a0f:f44::/32 maxlen: 48
                          2a0f:f40::/32 maxlen: 32
                          2a0f:f46::/32 maxlen: 48
                          2a07:e342::/32 maxlen: 48

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 04:30:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:fa:c9:59:7e:bb:0f:77:de:a9:3e:c9:c0:8c:af:18:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
        Validity
            Not Before: Nov 23 06:06:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ce7f3c3618cd22c376b35e1444ba4f403caac55f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b9:8a:de:4f:5f:50:be:32:2d:e6:2c:5c:81:
                    53:8f:fe:4f:9a:aa:4e:58:53:16:3a:6c:ac:02:cd:
                    b2:9a:c2:1f:3f:b5:a8:51:ed:1d:67:a1:45:e6:cb:
                    81:c6:51:83:c9:e4:47:11:1b:d0:10:d0:b2:7c:b7:
                    0f:c6:3c:6b:40:ab:2b:15:0e:6a:45:9c:81:1a:1b:
                    b3:0a:93:38:52:d3:7a:57:46:3b:fc:d3:12:6d:ce:
                    e3:4c:2b:ca:25:ac:1e:b7:32:23:6d:14:f7:34:5f:
                    71:2f:4c:5c:7c:c9:23:18:07:ba:19:58:4b:cc:6a:
                    bc:6a:b2:d4:ef:ba:a8:82:92:60:3f:3d:91:d4:81:
                    47:ce:dc:81:c3:59:31:ed:5c:07:63:24:ae:da:77:
                    79:b0:72:b5:6e:fd:2a:ef:39:79:51:25:c8:80:84:
                    00:ac:d9:0c:21:28:f5:15:72:5f:25:92:57:d4:b6:
                    77:c4:62:94:fb:19:63:f5:39:5e:75:70:0b:af:45:
                    b7:33:31:e6:7e:5a:bb:7e:c4:ba:e0:3e:be:b0:b9:
                    fd:23:62:12:04:0d:f0:62:c1:cb:87:52:96:50:82:
                    d9:66:7e:46:15:21:a8:b8:4b:0a:9f:87:ab:2f:22:
                    e8:1e:66:4c:24:32:e2:79:c3:f8:b2:07:71:d5:32:
                    05:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:7F:3C:36:18:CD:22:C3:76:B3:5E:14:44:BA:4F:40:3C:AA:C5:5F
            X509v3 Authority Key Identifier:
                keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/zn88NhjNIsN2s14URLpPQDyqxV8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.130.140.0/24
                IPv6:
                  2a07:e342::/32
                  2a0f:f40::/31
                  2a0f:f43::-2a0f:f47:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         19:13:3c:45:46:5d:f9:81:1c:e7:c1:a2:92:47:64:bd:48:8d:
         c8:a7:79:22:98:ab:5a:b5:14:b2:e0:f0:ba:1a:51:64:81:b6:
         68:70:af:14:13:35:e1:b5:0c:76:0e:4f:1e:bc:d8:09:bc:c9:
         bf:fb:94:9a:45:38:df:11:b7:cb:27:92:1b:85:b6:90:ec:46:
         15:12:b4:db:0d:39:b8:27:b5:8b:09:2e:80:c1:08:b3:b1:56:
         fe:54:a8:1e:57:0c:f3:b1:97:f6:d9:b0:f4:20:69:95:ab:24:
         33:26:ba:34:23:87:4c:b9:3e:c0:22:f3:6a:24:d1:57:79:38:
         af:31:0b:41:80:4a:83:d0:de:5b:c4:e8:31:08:70:68:93:6d:
         6d:16:25:3d:a9:39:ce:41:f2:e3:98:e0:08:1d:ed:69:bb:df:
         5d:4c:5a:31:8a:d8:98:3b:4c:bb:9a:b0:b1:a4:fa:c3:6a:a4:
         05:03:58:7f:ca:e4:d6:94:b3:d0:90:dd:af:6f:79:47:3e:df:
         ec:2b:a7:fb:f9:b3:83:5c:cb:53:b4:0b:06:bb:86:01:e6:f6:
         c4:00:f6:70:6d:44:62:fd:63:d7:78:bd:ef:b8:87:97:7f:04:
         6f:15:3a:2f:68:bb:86:12:8b:a2:96:4f:a1:11:ff:dc:54:fc:
         a9:2c:39:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:52 2024 by rpki-client on console-ams.rpki-client.org