Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/1FnclXBi8NKIy8VkHByVdUjJoTI.roa
File:                     1FnclXBi8NKIy8VkHByVdUjJoTI.roa (raw, json)
Hash identifier:          Wa+QhWuEtWq7iFINibviO58iVnudhBYas5OW1/NwI88=
Subject key identifier:   D4:59:DC:95:70:62:F0:D2:88:CB:C5:64:1C:1C:95:75:48:C9:A1:32
Certificate issuer:       /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial:       0186F3440BEE756B21426E1D45057EF7C7BF
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/1FnclXBi8NKIy8VkHByVdUjJoTI.roa
Signing time:             Sat 18 Mar 2023 05:49:28 +0000
ROA not before:           Sat 18 Mar 2023 05:49:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212384
IP address blocks:        45.149.63.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 23 Sep 2023 05:32:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:f3:44:0b:ee:75:6b:21:42:6e:1d:45:05:7e:f7:c7:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
        Validity
            Not Before: Mar 18 05:49:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d459dc957062f0d288cbc5641c1c957548c9a132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d6:2e:12:0b:3a:80:b9:bb:39:95:ec:a1:82:
                    e7:46:89:3e:46:42:0b:e1:45:24:61:da:68:d8:d5:
                    6a:61:ef:00:d3:f4:92:9d:43:34:3e:b1:4a:05:9f:
                    e6:18:fb:7c:c9:1a:35:89:c3:ee:27:d3:4b:28:87:
                    3d:2f:5a:32:a0:23:a7:61:e1:e3:36:96:1a:b3:e2:
                    b5:31:9b:63:63:d8:16:29:93:a8:32:88:bb:8f:75:
                    5e:b0:9e:e0:3d:e2:2d:6c:ea:be:d6:85:16:3e:71:
                    d4:9b:d5:08:55:55:65:7e:34:65:7c:31:6a:75:15:
                    24:2c:9d:60:ca:3d:46:ff:3a:96:e3:cb:99:86:d2:
                    6c:eb:e4:51:91:0f:15:4c:88:09:3d:fb:97:e3:c6:
                    81:41:69:6f:b4:f4:c5:49:75:ac:70:d4:2f:fb:7e:
                    e0:cb:c3:14:ce:6c:c0:33:cc:6f:10:d5:43:47:4c:
                    20:2e:2c:9e:1b:7c:6b:b9:3a:bb:11:86:84:e0:4b:
                    b1:93:0a:5a:d9:bc:bd:2e:e3:a0:c5:d5:ca:81:48:
                    df:e5:c8:63:e5:0a:c6:d0:cc:df:4f:e7:ad:3f:dd:
                    b1:cb:ba:e3:ee:3e:f1:7a:a7:44:36:0f:1b:b4:5c:
                    1d:c5:e3:98:df:a3:6b:88:74:d3:a4:72:4b:6a:9e:
                    b3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:59:DC:95:70:62:F0:D2:88:CB:C5:64:1C:1C:95:75:48:C9:A1:32
            X509v3 Authority Key Identifier:
                keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/1FnclXBi8NKIy8VkHByVdUjJoTI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.149.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:2d:15:75:e6:be:b4:e0:93:6c:5a:2c:25:65:ed:c9:30:3b:
         63:83:e4:ce:e1:21:79:b4:99:70:34:c4:f2:03:73:5e:0c:43:
         99:a1:8a:70:7d:36:ae:af:0e:c6:7c:26:14:b5:9f:ac:e0:b5:
         ef:26:40:b3:0b:8b:ce:88:ee:13:40:5b:42:2a:8e:01:2f:de:
         b3:e0:e2:20:7e:87:5c:0e:ef:f5:af:55:3c:b0:b7:26:e9:c8:
         ca:f8:cb:43:24:cd:f0:bb:ec:cc:27:15:29:bf:aa:2b:87:d7:
         f2:1a:3e:64:7d:e5:38:19:46:ac:2d:99:84:60:b6:82:1d:6b:
         26:7e:65:af:af:bd:93:f8:49:2b:e4:6b:35:4b:57:2e:7b:1f:
         d6:6c:46:51:a3:98:40:5b:26:a6:6e:60:d9:e4:87:44:f6:58:
         0b:ce:97:8b:6c:7f:92:a5:a3:30:69:98:a1:8a:be:bc:2f:69:
         ba:e8:f1:70:01:c8:a8:fe:47:f3:01:bb:13:66:f7:e0:2e:5f:
         c0:f3:1f:53:f3:c4:e0:e8:7d:89:ef:3e:e3:1b:34:45:62:82:
         4a:2d:2f:30:8d:f8:b1:46:11:4f:64:ac:da:43:73:0c:df:4b:
         4b:53:c2:62:3a:92:70:8f:d0:1c:3c:9c:f1:4d:a0:64:4d:aa:
         49:cf:bd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:31 2024 by rpki-client on console-fra.rpki-client.org