Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/lVJxHJ6HOMhuaMgVwtoUFMgsNrA.roa
File:                     lVJxHJ6HOMhuaMgVwtoUFMgsNrA.roa (raw, json)
Hash identifier:          guRdgg4zNpncGlUefXwEOn5wHhvvPX2RFWDI0N/xbXM=
Subject key identifier:   95:52:71:1C:9E:87:38:C8:6E:68:C8:15:C2:DA:14:14:C8:2C:36:B0
Certificate issuer:       /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial:       01856EA6CC2143DF68562F08F21CAE940BFB
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/lVJxHJ6HOMhuaMgVwtoUFMgsNrA.roa
Signing time:             Sun 01 Jan 2023 18:45:03 +0000
ROA not before:           Sun 01 Jan 2023 18:45:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     22773
IP address blocks:        194.247.44.0/23 maxlen: 23
                          45.149.164.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 07 Jan 2023 10:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:a6:cc:21:43:df:68:56:2f:08:f2:1c:ae:94:0b:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
        Validity
            Not Before: Jan  1 18:45:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9552711c9e8738c86e68c815c2da1414c82c36b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4e:51:3e:96:e9:b1:95:fb:31:22:b8:9c:63:
                    ed:45:c6:fc:8b:dc:79:a3:63:b8:db:46:1d:8f:18:
                    e7:86:d4:0f:21:14:4f:35:5c:80:99:eb:f2:f7:d4:
                    8c:bf:c9:78:c2:80:50:cc:03:09:43:29:f4:99:3a:
                    5e:90:cc:47:36:1c:64:45:aa:06:d1:f6:fc:3f:f4:
                    7e:ea:a9:d6:cf:5a:57:b9:ad:90:f0:3a:88:dc:fa:
                    6a:23:34:f4:9b:ad:df:a7:d0:a3:09:98:38:70:53:
                    5d:9e:b6:55:b2:90:ce:05:de:df:0b:9f:52:10:60:
                    90:47:f9:ac:5e:10:83:3d:c2:ca:f7:c4:86:46:7a:
                    04:2f:e4:ba:4e:ff:c7:48:cb:f4:77:01:a7:88:a7:
                    34:dd:e5:9b:25:8c:6e:76:ce:41:7a:2c:39:2d:5e:
                    42:aa:d8:48:9f:cc:a7:ea:e8:31:f1:3f:7e:ae:6e:
                    4e:e6:79:4f:dd:cd:8f:e0:fc:11:35:af:e5:32:e3:
                    7d:ce:57:46:a0:f6:bd:c0:80:40:16:1a:ea:9a:79:
                    c3:00:8e:4b:3f:0a:90:b0:3d:0b:52:3c:70:14:fa:
                    7d:3f:c0:41:fa:3e:82:49:e2:16:8b:df:20:23:1d:
                    f0:dc:00:83:b0:c2:3b:8e:b5:f1:73:c7:bf:c1:bf:
                    2f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:52:71:1C:9E:87:38:C8:6E:68:C8:15:C2:DA:14:14:C8:2C:36:B0
            X509v3 Authority Key Identifier:
                keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/lVJxHJ6HOMhuaMgVwtoUFMgsNrA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.149.164.0/24
                  194.247.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:d9:6b:44:66:da:75:0b:22:a9:82:f4:82:1a:ef:e1:06:4e:
         e3:c7:4d:c2:1a:e5:55:09:40:0d:ff:31:d4:a6:b8:e3:5d:03:
         84:b1:ba:5d:50:e6:e1:c9:13:75:9c:dc:02:2c:48:36:47:9a:
         d2:b8:3e:f7:80:47:f9:d0:3c:69:61:0f:9d:e9:12:a5:6b:f4:
         cc:c7:da:c4:9e:8e:d5:71:80:96:55:de:b7:6f:af:c6:47:44:
         5c:fc:7f:75:44:f9:42:ec:e6:10:83:cf:70:d0:12:7c:2e:3c:
         2a:af:74:ec:06:43:04:33:0d:8f:96:27:f8:c4:bf:df:0f:71:
         11:c5:b7:9c:7d:9d:09:49:0e:5d:a8:67:c8:53:da:a4:9b:da:
         ac:67:ba:4f:9e:40:7f:e1:59:08:cd:c8:19:c0:d8:8b:38:b0:
         32:0c:42:29:4a:9c:b8:1e:98:b8:ac:93:4c:a7:7b:4c:74:57:
         5e:ea:8f:0f:bd:e8:28:a1:9a:bd:6b:35:23:41:fc:d6:3f:57:
         5c:d8:ef:f5:88:7b:52:e1:e4:6b:ac:02:e4:fc:3a:97:f2:e8:
         10:f5:03:3d:11:92:1d:ed:0e:d9:9f:f0:7d:6f:c5:9f:46:4e:
         81:1f:57:83:a9:b7:1d:31:4c:70:78:88:ee:1f:b0:22:cc:3c:
         7d:16:c5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:08 2024 by rpki-client on console-ams.rpki-client.org