Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/E-VEzslSeL4gwe736vwGiyHHZB4.roa
File:                     E-VEzslSeL4gwe736vwGiyHHZB4.roa (raw, json)
Hash identifier:          k7ra0QGkNXf3IVEB0bVz7McMmK959FPX+AvG/EqlDDQ=
Subject key identifier:   13:E5:44:CE:C9:52:78:BE:20:C1:EE:F7:EA:FC:06:8B:21:C7:64:1E
Certificate issuer:       /CN=8c060040ef3a0823aa973f0d0592b1dda808f782
Certificate serial:       018570DE46DFC3ED537A6B2515422A5B8D54
Authority key identifier: 8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/E-VEzslSeL4gwe736vwGiyHHZB4.roa
Signing time:             Mon 02 Jan 2023 05:04:53 +0000
ROA not before:           Mon 02 Jan 2023 05:04:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204835
IP address blocks:        45.11.208.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 22:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:de:46:df:c3:ed:53:7a:6b:25:15:42:2a:5b:8d:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c060040ef3a0823aa973f0d0592b1dda808f782
        Validity
            Not Before: Jan  2 05:04:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=13e544cec95278be20c1eef7eafc068b21c7641e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2f:c3:eb:b4:37:87:cd:a8:e8:49:cc:6c:a7:
                    f0:bb:68:da:3a:8c:87:01:88:8b:aa:28:bb:98:51:
                    74:bd:5f:82:c5:7a:90:e7:22:13:b8:f2:17:1a:ed:
                    d1:cc:7f:8f:d8:d0:41:5a:4e:f4:9a:27:6b:f8:52:
                    45:08:d5:a5:78:fb:63:f2:93:cf:67:5a:53:6a:7c:
                    86:d4:78:3f:a5:8a:f8:d5:3e:ea:b6:56:30:bf:a1:
                    7c:7a:5e:57:78:d5:12:f2:86:2f:8d:c7:3b:8c:89:
                    1d:76:9b:cf:b7:a1:12:1c:ce:71:81:ac:19:1b:e1:
                    6d:e1:86:56:15:ff:e7:20:88:61:3a:ae:d5:e5:8f:
                    10:93:ad:7d:4c:36:c0:5a:56:2f:a8:d5:e9:b2:05:
                    21:a2:b0:59:79:b1:2a:41:18:7e:3e:86:6e:0f:33:
                    ea:71:10:a3:10:d1:87:ee:15:b3:b0:aa:75:22:26:
                    80:c1:4e:b9:fa:cb:50:5d:8d:9c:65:df:b2:b5:9e:
                    5e:a6:34:4a:14:2c:b3:ca:50:19:65:86:3a:07:d2:
                    24:cf:2b:1c:d2:95:77:36:18:a8:aa:43:c6:c4:cc:
                    5e:55:29:78:51:78:3a:d3:f0:46:32:bc:07:71:0e:
                    0b:d3:91:c7:e0:92:cd:26:dc:2a:c3:8f:ba:29:bc:
                    67:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E5:44:CE:C9:52:78:BE:20:C1:EE:F7:EA:FC:06:8B:21:C7:64:1E
            X509v3 Authority Key Identifier:
                keyid:8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/E-VEzslSeL4gwe736vwGiyHHZB4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.11.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:28:24:3c:8f:cf:17:8b:a8:5c:33:2f:26:cd:fa:26:0e:53:
         33:c5:d0:1a:21:be:a4:80:fa:32:25:42:0b:df:d9:cf:4e:96:
         69:1c:97:0a:3b:7f:ae:36:5b:46:b7:b8:e4:3d:08:0a:5f:f1:
         fb:12:95:6a:ec:89:79:75:c6:d8:d9:62:2d:34:d1:da:08:35:
         be:20:60:04:fc:5e:f5:ee:ec:51:8a:ca:eb:a7:70:8f:64:00:
         1f:82:1c:dc:9e:ff:74:b2:c1:e6:d9:53:46:61:44:de:47:d7:
         05:90:34:0c:bc:fe:ee:67:81:87:6d:8b:81:02:97:80:18:5d:
         5b:9a:72:2c:92:91:2d:14:b2:b2:f4:bf:c7:17:d2:f1:d8:61:
         c0:19:eb:d6:d8:14:ef:08:34:e9:de:98:88:41:56:c3:02:74:
         91:bf:80:91:57:ce:d6:88:16:e6:ee:2d:93:87:a4:c4:f7:49:
         f7:15:80:db:73:e8:02:7a:40:74:e4:9b:a5:68:44:23:ad:8e:
         bf:68:b0:c4:88:15:bb:c8:35:ee:da:bb:ea:19:0a:11:50:af:
         96:78:18:d4:05:39:ad:c6:37:ef:25:ac:8c:2c:9e:33:c0:48:
         c5:87:d4:d1:de:58:5f:21:89:77:cb:ef:71:0d:ef:05:6b:04:
         bd:56:84:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:35 2024 by rpki-client on console-ams.rpki-client.org