Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JNg097F-ELa81WvocpxchNjy1As.roa
File:                     JNg097F-ELa81WvocpxchNjy1As.roa (raw, json)
Hash identifier:          yp+MX5cBww8ACVPiXlp7WuzKtKO+jxj1o3Z+TIbG7i0=
Subject key identifier:   24:D8:34:F7:B1:7E:10:B6:BC:D5:6B:E8:72:9C:5C:84:D8:F2:D4:0B
Certificate issuer:       /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial:       01890D10E2AAC362F87D93C9D46356D472D4
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JNg097F-ELa81WvocpxchNjy1As.roa
Signing time:             Fri 30 Jun 2023 16:09:17 +0000
ROA not before:           Fri 30 Jun 2023 16:09:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        45.149.62.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 30 Jun 2023 18:35:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:0d:10:e2:aa:c3:62:f8:7d:93:c9:d4:63:56:d4:72:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
        Validity
            Not Before: Jun 30 16:09:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=24d834f7b17e10b6bcd56be8729c5c84d8f2d40b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:44:58:2b:11:44:7f:2d:b6:3c:a5:5e:c4:b8:
                    4d:1f:0b:ca:10:e2:3d:b0:1e:93:91:fd:5b:1f:b7:
                    a5:c5:6b:53:89:cd:53:89:78:f2:8d:b8:3d:c7:6a:
                    bd:a4:89:be:bb:ad:ff:6d:de:b6:e0:c2:da:8e:ee:
                    f9:e3:28:57:7f:7c:60:52:dd:ca:a1:49:cc:0c:f6:
                    80:9f:86:c7:e7:99:39:69:fd:7a:a5:77:33:f8:af:
                    23:f4:ef:a3:bb:48:28:62:1e:d7:c2:a6:ce:e4:c4:
                    aa:d5:a1:c7:2d:5e:d8:c0:40:35:36:77:27:84:30:
                    fb:15:79:03:90:be:a2:f5:50:73:62:7e:2f:3d:fe:
                    e8:00:7d:c1:05:ba:69:f3:ac:6e:37:d6:f4:09:8f:
                    c1:7b:e3:e5:a0:05:74:dc:57:4a:e2:79:cb:99:c2:
                    d3:ad:f0:9b:ab:aa:ce:20:60:c2:cd:8d:99:8b:c8:
                    97:23:54:14:5e:94:6c:59:76:a6:95:c7:18:84:36:
                    30:d5:f4:dd:14:86:ef:8b:42:6d:32:36:5d:86:78:
                    77:46:2d:21:8a:d4:b6:53:0c:b9:17:ec:18:fc:ae:
                    01:4a:2b:ca:b5:da:3a:cb:9d:f1:f0:9a:c2:60:9b:
                    1c:ac:93:d5:7c:ea:63:b3:c3:34:89:8e:3f:78:d8:
                    fb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D8:34:F7:B1:7E:10:B6:BC:D5:6B:E8:72:9C:5C:84:D8:F2:D4:0B
            X509v3 Authority Key Identifier:
                keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JNg097F-ELa81WvocpxchNjy1As.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.149.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:78:d5:40:9e:74:7c:c0:7e:3e:2b:70:2c:b5:48:f2:d4:e8:
         e4:a8:05:99:f8:84:8a:17:9d:00:17:0c:45:d8:dd:a6:68:b5:
         e7:a8:54:3b:c5:59:e5:f3:3a:c6:f6:b0:1e:b5:79:e6:87:b3:
         ee:ca:f2:2b:0e:c0:81:42:88:19:dc:62:53:f9:23:b6:50:44:
         53:e3:32:fe:21:bf:42:23:83:62:3a:57:94:91:bd:57:42:bc:
         20:c9:aa:5b:5c:b1:51:d4:38:f3:11:f9:57:ed:4e:1f:4b:83:
         ab:40:b2:a3:3b:89:9f:ef:9c:6e:a6:eb:d7:04:c7:72:99:83:
         39:7f:d8:b7:88:ed:fe:35:5d:eb:b0:48:31:24:cd:4d:9b:06:
         4d:67:3e:bf:30:77:ab:a6:0a:64:e7:3c:44:f6:1b:3c:df:db:
         11:aa:31:03:9d:6a:25:89:a7:b3:d2:78:f2:00:05:59:a9:5b:
         aa:ab:f8:7a:c0:2e:7e:b4:f7:88:74:b5:d6:cc:53:f6:71:b7:
         56:54:ea:6b:04:f1:37:e5:fb:29:54:f4:98:5d:ed:5a:ee:6e:
         64:cd:ff:7d:cd:ae:0b:65:ae:a0:22:2a:16:77:e5:fc:e7:93:
         ca:14:49:e2:36:5a:35:75:fb:a3:ee:f1:ca:18:0a:58:aa:f8:
         ce:38:b1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:18 2024 by rpki-client on console-ams.rpki-client.org