Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/yE7K6T12SCU7KLZhb3ihLCo46yc.roa
File:                     yE7K6T12SCU7KLZhb3ihLCo46yc.roa (raw, json)
Hash identifier:          PH1KrTz/vGvSgVjgs3JTaMNdO2WGEeIyPTu2dPV2A0o=
Subject key identifier:   C8:4E:CA:E9:3D:76:48:25:3B:28:B6:61:6F:78:A1:2C:2A:38:EB:27
Certificate issuer:       /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial:       01902CB36CA3F286E44ADBD58D59BDE157A9
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/yE7K6T12SCU7KLZhb3ihLCo46yc.roa
Signing time:             Tue 18 Jun 2024 18:54:34 +0000
ROA not before:           Tue 18 Jun 2024 18:54:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     60117
IP address blocks:        45.149.94.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 18 Aug 2024 22:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:2c:b3:6c:a3:f2:86:e4:4a:db:d5:8d:59:bd:e1:57:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
        Validity
            Not Before: Jun 18 18:54:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=c84ecae93d7648253b28b6616f78a12c2a38eb27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a6:09:b5:55:61:78:76:cb:71:87:23:09:9a:
                    e0:7a:8d:55:a7:e1:1b:cb:6a:1d:bf:ee:5b:79:13:
                    5f:f3:70:64:22:58:7d:d4:4c:aa:89:c1:7a:b4:68:
                    6e:5b:a5:4a:58:32:e3:0c:0a:6a:2b:38:1d:82:f5:
                    2c:a5:01:d7:78:0c:39:75:a7:74:ae:9b:25:3a:1f:
                    ee:6a:4a:b3:7d:b3:c4:be:51:c4:d1:40:00:cb:9b:
                    5c:fc:73:a9:26:7e:44:25:a1:b8:0e:d8:22:58:79:
                    88:4d:05:87:58:a2:f5:58:c1:f2:f1:71:f4:dd:85:
                    09:8e:28:55:e8:a1:94:22:dd:a4:53:b9:ba:f0:a9:
                    10:71:eb:1c:13:e9:85:da:57:34:f2:85:38:a0:9a:
                    f7:57:b3:da:fb:ec:31:b6:a3:47:19:88:be:b1:56:
                    46:83:a5:b4:f3:77:a9:8b:d9:a2:a8:e5:5c:1d:e3:
                    68:eb:fe:e4:cd:d4:90:db:b6:9b:ae:5d:9d:1e:9e:
                    fe:f0:15:b9:69:18:61:75:aa:1e:1a:78:71:b6:34:
                    bf:53:cf:36:b1:f3:52:28:18:3c:a2:65:66:d1:88:
                    c4:74:ca:f8:e2:a7:4b:e7:fa:3c:1b:34:a4:f9:61:
                    08:26:dd:0b:b7:c3:68:0a:e5:77:eb:e6:b9:b7:fd:
                    53:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:4E:CA:E9:3D:76:48:25:3B:28:B6:61:6F:78:A1:2C:2A:38:EB:27
            X509v3 Authority Key Identifier:
                keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/yE7K6T12SCU7KLZhb3ihLCo46yc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.149.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:e4:80:91:0e:09:a5:fa:df:c3:f9:0e:cc:d2:d8:e9:44:2c:
         85:4c:11:0c:4e:f5:d2:af:fd:3a:d6:59:d2:52:0b:52:62:72:
         c8:29:09:79:0f:73:86:e2:51:a3:d4:60:1e:38:11:61:81:1a:
         e3:ad:34:14:22:64:b6:52:46:60:36:d3:3e:a2:63:96:d4:77:
         1c:74:cb:a1:bd:23:67:6a:ca:2a:e5:81:65:c8:46:97:70:f8:
         14:91:bc:11:b5:8d:1c:d9:14:95:76:1b:7e:97:e2:91:73:cd:
         4a:ea:ae:99:52:b4:15:04:b3:52:7c:1f:86:87:40:47:d7:a0:
         95:88:88:47:4f:49:77:74:e4:26:21:c6:58:be:c7:ca:47:0a:
         d2:f8:b4:33:09:9a:3d:8b:a2:dc:43:39:23:f5:39:01:1e:2d:
         f8:50:c2:2f:08:3d:d9:35:ee:2d:38:dd:5e:c4:6d:f2:86:be:
         38:d3:a3:9c:fc:d9:52:cc:96:a2:3c:8f:e0:9b:79:3e:19:2f:
         59:19:b9:cd:57:68:f0:d3:30:98:ee:f0:05:cc:f1:ad:c5:c6:
         cf:2b:73:76:41:5f:a8:35:16:8e:c0:5b:21:4d:c2:ba:cf:47:
         59:aa:a0:bf:c4:a5:e6:b5:a1:65:46:8f:ed:64:9e:a0:1f:f5:
         3c:2d:23:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 18 23:39:35 2024 by rpki-client on console-ams.rpki-client.org