Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/V4YCPVMriBUunEQHbqFp7ldhDhU.roa
File:                     V4YCPVMriBUunEQHbqFp7ldhDhU.roa (raw, json)
Hash identifier:          LUcqktg5/BdcXZjlQkLdI7Wm/RQpcs+3ook0daVvcKk=
Subject key identifier:   57:86:02:3D:53:2B:88:15:2E:9C:44:07:6E:A1:69:EE:57:61:0E:15
Certificate issuer:       /CN=cc6077e004e88eff8f13b7740df254d9e48dd574
Certificate serial:       018573FDF499F1267E4E286DC147B8DC77FA
Authority key identifier: CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/V4YCPVMriBUunEQHbqFp7ldhDhU.roa
Signing time:             Mon 02 Jan 2023 19:38:21 +0000
ROA not before:           Mon 02 Jan 2023 19:38:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        45.10.123.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 19 Oct 2023 09:42:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:fd:f4:99:f1:26:7e:4e:28:6d:c1:47:b8:dc:77:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc6077e004e88eff8f13b7740df254d9e48dd574
        Validity
            Not Before: Jan  2 19:38:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5786023d532b88152e9c44076ea169ee57610e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fa:d5:6a:d9:ca:2f:72:19:29:5e:3d:97:c7:
                    9c:87:11:32:9a:a2:fe:f5:a3:07:3d:de:6c:04:c7:
                    a0:1c:e8:c2:1c:15:53:5e:f0:8a:1d:1d:34:f7:a5:
                    3e:15:ff:7a:c5:0a:52:cf:3a:b2:55:75:1f:85:66:
                    2b:50:da:ce:4f:d7:8b:97:a1:a5:76:7f:54:46:91:
                    ac:94:7e:6c:f5:d9:86:98:72:16:32:bc:c0:ea:e8:
                    4b:f8:ad:ff:6b:db:a2:b2:47:fe:1d:3b:23:69:45:
                    a4:ce:61:d8:c5:5b:47:31:f6:ae:9f:46:30:aa:5d:
                    91:ca:ef:bf:44:8c:5d:57:bd:3f:76:ed:76:5c:a8:
                    9a:97:62:08:1c:26:46:96:2f:83:34:45:20:d1:51:
                    47:a9:32:23:39:53:8b:24:f5:e2:ea:f7:28:03:f9:
                    55:b5:89:4d:b1:0d:90:3a:80:cc:17:d1:46:f7:6c:
                    69:6b:db:2f:45:a6:d9:73:5c:9c:20:94:df:3b:07:
                    b6:21:05:94:da:32:1d:1c:4f:9f:fa:df:26:93:6f:
                    b3:fa:c1:f0:67:e2:6b:b8:19:e2:3a:07:0a:b7:09:
                    6e:cb:d0:92:19:06:50:fe:51:b9:16:0f:5e:6f:75:
                    c9:33:69:f7:03:8a:07:44:f9:a2:86:18:1b:f4:35:
                    02:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:86:02:3D:53:2B:88:15:2E:9C:44:07:6E:A1:69:EE:57:61:0E:15
            X509v3 Authority Key Identifier:
                keyid:CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/V4YCPVMriBUunEQHbqFp7ldhDhU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:05:44:7c:86:8c:bc:94:dd:47:1d:21:f8:ea:b9:2d:03:9d:
         46:bb:c5:24:5f:07:ea:5a:55:61:b9:7c:0d:d4:58:e6:bf:42:
         1e:15:82:d5:1b:cb:d0:d0:05:b4:0e:b2:7d:5e:f4:63:48:a0:
         dc:2c:de:93:1a:e5:92:0a:ee:59:ff:d8:9b:e8:21:a6:85:bd:
         75:37:32:3a:7d:6a:c4:6a:4c:50:3f:e3:5b:9f:e3:24:59:ff:
         b8:2a:22:5f:2c:f6:a8:77:7f:05:c5:a7:00:02:19:1d:e5:98:
         75:da:1e:6e:92:f7:ea:a7:b3:20:a7:d1:0a:c0:e0:40:7b:ae:
         34:e1:b2:56:8f:57:19:17:0a:cd:56:a2:85:59:0d:85:d0:c4:
         6f:13:d9:8e:5e:a1:3c:40:71:54:2c:6f:4a:ae:59:26:d9:ee:
         5b:79:bb:86:82:ad:e8:1e:cc:78:64:6b:4b:b0:b9:9b:21:c9:
         c4:66:6c:1d:73:59:10:60:0d:13:a4:61:1b:cd:6d:5a:b8:0a:
         3c:7d:43:86:13:34:17:dc:cd:b3:9c:49:9a:5f:b0:6b:1e:42:
         42:38:17:a1:3d:05:db:0b:eb:ff:1b:68:78:bd:1c:35:84:c1:
         6b:9b:74:06:ae:3d:80:ab:84:7c:6b:c7:14:a8:37:d5:20:f2:
         9a:dc:db:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVz/fSZ8SZ+TihtwUe43Hf6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjNjA3N2UwMDRlODhlZmY4ZjEzYjc3NDBkZjI1NGQ5ZTQ4
ZGQ1NzQwHhcNMjMwMTAyMTkzODIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Nzg2MDIzZDUzMmI4ODE1MmU5YzQ0MDc2ZWExNjllZTU3NjEwZTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPrVatnKL3IZKV49l8echxEymqL+
9aMHPd5sBMegHOjCHBVTXvCKHR0096U+Ff96xQpSzzqyVXUfhWYrUNrOT9eLl6Gl
dn9URpGslH5s9dmGmHIWMrzA6uhL+K3/a9uiskf+HTsjaUWkzmHYxVtHMfaun0Yw
ql2Ryu+/RIxdV70/du12XKial2IIHCZGli+DNEUg0VFHqTIjOVOLJPXi6vcoA/lV
tYlNsQ2QOoDMF9FG92xpa9svRabZc1ycIJTfOwe2IQWU2jIdHE+f+t8mk2+z+sHw
Z+JruBniOgcKtwluy9CSGQZQ/lG5Fg9eb3XJM2n3A4oHRPmihhgb9DUCjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFeGAj1TK4gVLpxEB26hae5XYQ4VMB8GA1UdIwQY
MBaAFMxgd+AE6I7/jxO3dA3yVNnkjdV0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvekdCMzRBVG9qdi1QRTdkMERmSlUyZVNOMVhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81ODE3OGQtMzc3Yi00NjBhLTk0YjEt
NDY3MWY0YmFhOWIxLzEvVjRZQ1BWTXJpQlV1bkVRSGJxRnA3bGRoRGhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS81ODE3OGQtMzc3Yi00NjBhLTk0YjEtNDY3MWY0YmFhOWIx
LzEvekdCMzRBVG9qdi1QRTdkMERmSlUyZVNOMVhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQp7MA0G
CSqGSIb3DQEBCwUAA4IBAQAVBUR8hoy8lN1HHSH46rktA51Gu8UkXwfqWlVhuXwN
1Fjmv0IeFYLVG8vQ0AW0DrJ9XvRjSKDcLN6TGuWSCu5Z/9ib6CGmhb11NzI6fWrE
akxQP+Nbn+MkWf+4KiJfLPaod38FxacAAhkd5Zh12h5ukvfqp7Mgp9EKwOBAe640
4bJWj1cZFwrNVqKFWQ2F0MRvE9mOXqE8QHFULG9Krlkm2e5bebuGgq3oHsx4ZGtL
sLmbIcnEZmwdc1kQYA0TpGEbzW1auAo8fUOGEzQX3M2znEmaX7BrHkJCOBehPQXb
C+v/G2h4vRw1hMFrm3QGrj2Aq4R8a8cUqDfVIPKa3NtJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:21 2024 by rpki-client on console-ams.rpki-client.org