Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/eUhuwVakwuWVahCdDtNo8QK3gzw.roa
File:                     eUhuwVakwuWVahCdDtNo8QK3gzw.roa (raw, json)
Hash identifier:          4Rvv9zPE49fwXIYsqAc3+tspQjsxrUkT6sXJ2WDGtVI=
Subject key identifier:   79:48:6E:C1:56:A4:C2:E5:95:6A:10:9D:0E:D3:68:F1:02:B7:83:3C
Certificate issuer:       /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial:       01867ACE2C38ABEE9553A5530A81B119EBD0
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/eUhuwVakwuWVahCdDtNo8QK3gzw.roa
Signing time:             Wed 22 Feb 2023 20:26:17 +0000
ROA not before:           Wed 22 Feb 2023 20:26:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207633
IP address blocks:        45.149.95.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 22 Mar 2023 14:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:7a:ce:2c:38:ab:ee:95:53:a5:53:0a:81:b1:19:eb:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
        Validity
            Not Before: Feb 22 20:26:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=79486ec156a4c2e5956a109d0ed368f102b7833c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c2:a0:b4:37:b3:37:b2:53:b6:e8:63:b0:4e:
                    78:6f:46:d2:1c:f9:f7:f6:aa:76:ba:77:3c:a7:6e:
                    b4:05:ea:e6:0a:97:9e:20:6d:b3:61:18:1b:7c:83:
                    af:90:3b:c8:d7:05:af:e9:f4:36:c3:09:fc:a6:24:
                    75:0a:c2:05:18:d2:78:64:b2:e0:b6:31:1f:90:b3:
                    3b:17:eb:28:de:99:69:79:38:32:51:47:4f:03:53:
                    d0:39:f2:0d:e8:58:64:1e:c5:52:f3:f2:b7:80:7d:
                    b7:67:29:46:fd:b1:38:c6:f6:9d:73:77:00:04:98:
                    b7:53:59:15:7a:e5:ba:e0:ae:de:4f:28:d1:77:e4:
                    fd:c8:82:8a:5c:4e:4f:6f:1f:44:29:bd:6a:c8:68:
                    5c:ca:f2:d4:a4:21:a8:9d:05:1e:9c:78:4e:b5:8c:
                    bb:04:06:b3:74:60:0c:d4:6a:39:bb:30:e7:96:c6:
                    01:d9:6b:37:17:06:85:f9:57:1c:30:38:2f:ae:ea:
                    41:f2:b5:be:92:93:af:97:16:7f:1c:71:6f:c6:ab:
                    4e:57:f6:6f:26:71:9b:52:97:58:cf:21:17:d6:73:
                    3a:2e:37:3d:fe:c6:67:6f:2b:10:1c:a8:8e:4a:3e:
                    72:db:5c:b1:d3:80:6b:31:44:49:1b:2a:f5:b0:30:
                    cc:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:48:6E:C1:56:A4:C2:E5:95:6A:10:9D:0E:D3:68:F1:02:B7:83:3C
            X509v3 Authority Key Identifier:
                keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/eUhuwVakwuWVahCdDtNo8QK3gzw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.149.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:79:fe:51:e2:91:0a:93:bf:aa:9c:00:3f:49:79:96:cd:f0:
         cf:15:71:25:da:f4:34:53:51:7c:de:0c:1e:32:95:a1:6b:2f:
         56:bf:24:c6:4a:9c:82:b2:14:7d:6e:bb:d8:14:28:50:78:5a:
         35:37:cd:f1:82:df:c9:57:82:68:70:74:3e:b9:d5:e6:8d:89:
         31:48:52:e4:23:63:e1:4a:9c:d8:82:0a:71:d8:1c:e4:99:87:
         93:c4:d9:8b:83:b8:74:d0:b1:cc:e7:cb:cc:ff:dc:83:59:f8:
         f7:07:dd:1c:24:f2:1a:ff:63:1e:93:8f:c7:7a:98:e5:86:6a:
         ba:d0:32:06:8c:4a:82:e5:a2:3c:eb:c5:6c:2b:d7:f1:ff:2f:
         31:b6:84:b6:54:22:70:21:76:c7:91:d0:7f:54:bd:17:1f:0e:
         53:99:8b:0b:51:19:fa:11:70:62:38:85:04:23:1a:e6:7e:69:
         d7:d3:7e:7c:2f:09:02:4e:e1:f4:16:22:16:f8:ef:c0:72:8e:
         2a:86:84:10:cb:18:41:55:ed:02:f6:d7:bf:41:27:7a:e3:f9:
         69:b0:6b:44:98:aa:e4:e2:ea:9a:5d:42:f6:2c:8d:8e:91:52:
         28:bf:b3:6c:2d:c2:16:c5:2d:89:14:bf:0b:44:f3:2f:c2:c5:
         b6:38:92:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZ6ziw4q+6VU6VTCoGxGevQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2
Y2Q3MzMwHhcNMjMwMjIyMjAyNjE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTQ4NmVjMTU2YTRjMmU1OTU2YTEwOWQwZWQzNjhmMTAyYjc4MzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMKgtDezN7JTtuhjsE54b0bSHPn3
9qp2unc8p260BermCpeeIG2zYRgbfIOvkDvI1wWv6fQ2wwn8piR1CsIFGNJ4ZLLg
tjEfkLM7F+so3plpeTgyUUdPA1PQOfIN6FhkHsVS8/K3gH23ZylG/bE4xvadc3cA
BJi3U1kVeuW64K7eTyjRd+T9yIKKXE5Pbx9EKb1qyGhcyvLUpCGonQUenHhOtYy7
BAazdGAM1Go5uzDnlsYB2Ws3FwaF+VccMDgvrupB8rW+kpOvlxZ/HHFvxqtOV/Zv
JnGbUpdYzyEX1nM6Ljc9/sZnbysQHKiOSj5y21yx04BrMURJGyr1sDDM1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHlIbsFWpMLllWoQnQ7TaPECt4M8MB8GA1UdIwQY
MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt
YWRlYWRlMjg2NWMxLzEvZVVodXdWYWt3dVdWYWhDZER0Tm84UUszZ3p3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx
LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZVfMA0G
CSqGSIb3DQEBCwUAA4IBAQBBef5R4pEKk7+qnAA/SXmWzfDPFXEl2vQ0U1F83gwe
MpWhay9WvyTGSpyCshR9brvYFChQeFo1N83xgt/JV4JocHQ+udXmjYkxSFLkI2Ph
SpzYggpx2BzkmYeTxNmLg7h00LHM58vM/9yDWfj3B90cJPIa/2Mek4/Hepjlhmq6
0DIGjEqC5aI868VsK9fx/y8xtoS2VCJwIXbHkdB/VL0XHw5TmYsLURn6EXBiOIUE
IxrmfmnX0358LwkCTuH0FiIW+O/Aco4qhoQQyxhBVe0C9te/QSd64/lpsGtEmKrk
4uqaXUL2LI2OkVIov7NsLcIWxS2JFL8LRPMvwsW2OJIv
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:31 2024 by rpki-client on console-ams.rpki-client.org