Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/R2Yim1iFBFt8ULjO_YqA0ltrRzY.roa
File:                     R2Yim1iFBFt8ULjO_YqA0ltrRzY.roa (raw, json)
Hash identifier:          ALVfQoAfES9pGOMi5JROyNWol67mhH/l82U08EZi5lM=
Subject key identifier:   47:66:22:9B:58:85:04:5B:7C:50:B8:CE:FD:8A:80:D2:5B:6B:47:36
Certificate issuer:       /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial:       01906A17C96C92F8B439DA871BD4DC8B3AA8
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/R2Yim1iFBFt8ULjO_YqA0ltrRzY.roa
Signing time:             Sun 30 Jun 2024 17:01:02 +0000
ROA not before:           Sun 30 Jun 2024 17:01:02 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        45.8.185.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 03 Jul 2024 15:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6a:17:c9:6c:92:f8:b4:39:da:87:1b:d4:dc:8b:3a:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
        Validity
            Not Before: Jun 30 17:01:02 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4766229b5885045b7c50b8cefd8a80d25b6b4736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e5:10:fe:b5:f3:b4:88:a7:6e:2f:a0:0c:d3:
                    ce:e1:8a:80:d4:80:1c:91:c8:5d:90:dd:77:f0:a2:
                    32:63:85:e0:4f:ac:4a:be:e6:6d:8d:27:1c:b5:55:
                    2a:80:39:9a:5b:7b:52:de:37:b8:a6:a3:0a:e3:65:
                    08:57:0d:8d:11:1a:80:c5:4f:76:74:ee:65:0e:6b:
                    f0:5d:09:31:fb:03:c6:28:76:42:a1:e4:7a:9f:00:
                    18:95:6b:46:e3:69:08:d8:b0:af:12:94:ea:b0:e2:
                    9f:11:75:fb:30:96:91:c3:ec:e0:92:6e:af:17:36:
                    0c:db:da:05:85:91:0c:21:06:c2:2e:5b:35:a6:48:
                    a2:86:71:21:ee:1c:6f:dd:56:e6:93:f1:e9:d5:a7:
                    13:08:05:3c:74:8b:0b:25:e9:56:08:9c:1e:c9:e9:
                    6e:7a:d9:45:33:f0:6e:d7:d1:a3:a2:8b:35:5a:72:
                    66:ba:89:01:42:8c:a9:8d:f8:b4:8b:c2:93:62:df:
                    c5:8a:98:52:4f:0a:25:e4:13:67:40:da:39:4b:b8:
                    dd:e2:95:b7:24:c7:57:24:67:59:59:bc:ee:a3:57:
                    ea:4d:c1:3b:3c:ee:d5:f4:b0:0c:63:71:56:6e:17:
                    fd:32:7a:6a:c6:c0:1e:e7:54:89:bb:c5:2a:34:76:
                    81:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:66:22:9B:58:85:04:5B:7C:50:B8:CE:FD:8A:80:D2:5B:6B:47:36
            X509v3 Authority Key Identifier:
                keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/R2Yim1iFBFt8ULjO_YqA0ltrRzY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:54:ff:05:bb:95:b4:3c:be:80:7b:48:7f:f2:13:dd:02:3f:
         e3:6d:18:c2:d9:2a:38:ef:7a:20:ea:b9:34:4a:f8:b0:df:e4:
         20:cc:54:f1:c2:1e:bc:e2:bb:56:08:0d:fd:29:bc:d1:f6:04:
         bd:c1:10:3a:70:b6:c6:79:3e:f8:01:a0:47:77:63:a4:06:d7:
         72:f8:1a:a0:40:df:c6:8b:34:ba:4a:43:37:98:38:4c:3d:8b:
         6e:05:3f:13:0c:16:53:53:3e:2d:65:a7:1b:58:68:9a:7c:e3:
         6d:f5:10:60:9b:36:3b:6a:b0:d8:77:ce:21:1f:bf:bd:85:5d:
         81:61:32:85:00:e9:c2:77:8b:8d:8a:af:69:83:df:33:d3:2b:
         c2:ad:28:d7:c5:7b:1e:dd:d8:a4:e6:64:93:92:bb:e6:bf:df:
         c4:73:a5:e4:c9:07:2d:53:38:3c:a5:d5:a0:cf:38:45:92:64:
         e6:d2:59:cc:55:15:08:d0:db:97:2d:19:34:1c:68:4c:d2:7d:
         02:bd:76:97:6b:56:39:33:9d:d4:ec:d4:9e:5a:68:2a:46:78:
         27:f5:44:a2:28:1d:3e:62:6a:36:04:f2:b8:b8:f2:5f:b4:b2:
         25:e9:95:95:cc:22:3a:b0:96:82:1e:ec:3c:53:18:64:03:64:
         23:66:ac:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 16:42:01 2024 by rpki-client on console-ams.rpki-client.org