Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/m6CZGMynbPgeIys6cvJZIwfHvbE.roa
File:                     m6CZGMynbPgeIys6cvJZIwfHvbE.roa (raw, json)
Hash identifier:          IFE7feE65xj+3OZQVvmDoiel3+TOSe3g4+vvLq9zEqw=
Subject key identifier:   9B:A0:99:18:CC:A7:6C:F8:1E:23:2B:3A:72:F2:59:23:07:C7:BD:B1
Certificate issuer:       /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Certificate serial:       018A8338CCA21C98A76671200C661ACF63BF
Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/m6CZGMynbPgeIys6cvJZIwfHvbE.roa
Signing time:             Mon 11 Sep 2023 07:50:52 +0000
ROA not before:           Mon 11 Sep 2023 07:50:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     197968
IP address blocks:        45.135.215.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:31:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:83:38:cc:a2:1c:98:a7:66:71:20:0c:66:1a:cf:63:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
        Validity
            Not Before: Sep 11 07:50:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9ba09918cca76cf81e232b3a72f2592307c7bdb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:dd:33:b5:75:cc:df:cc:2c:68:9f:e5:1f:5a:
                    34:07:e9:33:c4:7e:56:a9:84:19:43:04:a4:43:08:
                    17:c6:41:c8:4c:d9:23:d9:de:4e:25:02:85:bd:f5:
                    e5:22:e1:b4:81:c2:7f:9b:3d:c1:01:52:4e:19:20:
                    04:9c:ed:c2:56:e2:91:06:8e:d6:92:be:1a:b6:d1:
                    81:c0:cd:1e:1c:26:b2:9e:ef:f0:04:e4:cb:18:03:
                    02:8b:c4:eb:24:d2:65:7d:21:a5:19:e8:23:c1:a9:
                    7c:1d:0a:24:bc:2a:79:4e:22:69:20:45:c0:1c:69:
                    ab:79:68:09:fc:ad:5a:02:9b:1e:ba:27:5b:c0:78:
                    49:80:07:43:c5:07:9d:7b:35:58:92:97:b5:cc:5e:
                    55:df:21:89:d7:5c:58:73:7c:6c:dd:13:0b:54:cb:
                    ab:52:4e:70:73:69:38:91:88:aa:93:a5:a8:b4:8d:
                    a1:44:13:88:7e:dc:00:48:35:7c:98:24:07:70:8f:
                    8f:e9:86:3d:c9:e7:1d:a1:5f:13:b6:8c:72:2e:17:
                    0d:ab:59:cf:18:85:6d:28:05:b5:b3:10:cc:df:3d:
                    47:36:57:ba:de:be:1f:71:ea:ac:8f:11:11:d7:e0:
                    e3:b7:bd:3d:0e:c3:6c:be:e2:09:a7:8d:ae:f2:b3:
                    f8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A0:99:18:CC:A7:6C:F8:1E:23:2B:3A:72:F2:59:23:07:C7:BD:B1
            X509v3 Authority Key Identifier:
                keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/m6CZGMynbPgeIys6cvJZIwfHvbE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:4c:3e:ce:40:90:59:f8:ca:b2:81:7d:d0:5c:24:d3:56:cb:
         88:9b:98:7d:73:c9:7a:6d:ce:93:64:34:37:b5:6d:d4:ea:27:
         7e:63:eb:20:49:b9:21:cf:76:8d:3c:90:7c:d1:ee:6b:6a:b3:
         ca:f9:65:2b:04:b2:00:76:ae:e8:89:70:6c:4c:8c:3d:7b:83:
         c8:1c:59:f6:58:b6:4d:aa:12:5f:82:96:e2:5c:ff:cb:8c:eb:
         d2:a4:74:ad:f9:65:17:f5:e8:f9:cd:40:37:36:80:56:b6:fc:
         bd:53:b9:75:7e:c1:52:f6:22:8e:73:3f:26:6e:ae:12:bd:a4:
         60:0e:6a:7d:09:53:28:28:36:91:1c:09:14:9f:2f:3a:4b:15:
         00:6a:07:a6:24:57:37:45:49:7d:d9:b0:11:ce:83:ef:5f:3a:
         59:2d:89:16:cd:48:d3:d9:93:a3:a1:9c:ca:d7:88:27:de:4c:
         d8:06:d9:01:e4:21:cf:cd:58:d6:12:c0:fd:cf:70:17:a5:89:
         c2:c9:24:a7:af:09:16:ce:99:a0:9c:d6:46:a1:2a:80:f1:67:
         1d:36:bc:78:9a:2a:39:fd:67:e7:2a:d4:ea:27:52:67:8e:17:
         a0:1e:6d:d9:0f:0d:8f:29:42:3a:eb:a1:ca:63:15:12:d1:20:
         25:5b:3a:c7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqDOMyiHJinZnEgDGYaz2O/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkODMxM2U0MWU2NDZhMDljZDAxZTJlNmY0NzM5ZDNiZDIz
NmM0ZmYwHhcNMjMwOTExMDc1MDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmEwOTkxOGNjYTc2Y2Y4MWUyMzJiM2E3MmYyNTkyMzA3YzdiZGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt0ztXXM38wsaJ/lH1o0B+kzxH5W
qYQZQwSkQwgXxkHITNkj2d5OJQKFvfXlIuG0gcJ/mz3BAVJOGSAEnO3CVuKRBo7W
kr4attGBwM0eHCaynu/wBOTLGAMCi8TrJNJlfSGlGegjwal8HQokvCp5TiJpIEXA
HGmreWgJ/K1aApseuidbwHhJgAdDxQedezVYkpe1zF5V3yGJ11xYc3xs3RMLVMur
Uk5wc2k4kYiqk6WotI2hRBOIftwASDV8mCQHcI+P6YY9yecdoV8TtoxyLhcNq1nP
GIVtKAW1sxDM3z1HNle63r4fceqsjxER1+Djt709DsNsvuIJp42u8rP4wwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJugmRjMp2z4HiMrOnLyWSMHx72xMB8GA1UdIwQY
MBaAFM2DE+QeZGoJzQHi5vRznTvSNsT/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt
ODg2MmI1MTczMTdjLzEvbTZDWkdNeW5iUGdlSXlzNmN2SlpJd2ZIdmJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj
LzEvellNVDVCNWthZ25OQWVMbTlIT2RPOUkyeFA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYfXMA0G
CSqGSIb3DQEBCwUAA4IBAQA8TD7OQJBZ+MqygX3QXCTTVsuIm5h9c8l6bc6TZDQ3
tW3U6id+Y+sgSbkhz3aNPJB80e5rarPK+WUrBLIAdq7oiXBsTIw9e4PIHFn2WLZN
qhJfgpbiXP/LjOvSpHSt+WUX9ej5zUA3NoBWtvy9U7l1fsFS9iKOcz8mbq4SvaRg
Dmp9CVMoKDaRHAkUny86SxUAagemJFc3RUl92bARzoPvXzpZLYkWzUjT2ZOjoZzK
14gn3kzYBtkB5CHPzVjWEsD9z3AXpYnCySSnrwkWzpmgnNZGoSqA8WcdNrx4mio5
/WfnKtTqJ1JnjhegHm3ZDw2PKUI666HKYxUS0SAlWzrH
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:34 2024 by rpki-client on console-ams.rpki-client.org