Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/4plUDtEJEG1nnm5HYKBSa0tJZRw.roa
File:                     4plUDtEJEG1nnm5HYKBSa0tJZRw.roa (raw, json)
Hash identifier:          KVjjolU0E+e5gpe3HwbZy6/MxJFrUKBpTgWeLHfwE5s=
Subject key identifier:   E2:99:54:0E:D1:09:10:6D:67:9E:6E:47:60:A0:52:6B:4B:49:65:1C
Certificate issuer:       /CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
Certificate serial:       019243251BCB8A47097FA6660C67618BDA0F
Authority key identifier: 6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/4plUDtEJEG1nnm5HYKBSa0tJZRw.roa
Signing time:             Mon 30 Sep 2024 13:35:58 +0000
ROA not before:           Mon 30 Sep 2024 13:35:58 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     212635
IP address blocks:        45.159.140.0/22 maxlen: 24
                          2a10:6e40::/29 maxlen: 48
                          2a10:6e40::/32 maxlen: 48

Validation:               Failed, certificate revoked on Mon 30 Sep 2024 19:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:43:25:1b:cb:8a:47:09:7f:a6:66:0c:67:61:8b:da:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
        Validity
            Not Before: Sep 30 13:35:58 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e299540ed109106d679e6e4760a0526b4b49651c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:07:28:cf:16:e6:54:ac:a9:70:dd:4d:06:ef:
                    75:e4:7d:96:ae:41:ac:dd:44:31:47:99:1f:7b:10:
                    95:d8:f6:7b:72:fe:98:ac:28:8d:01:3c:34:8d:c1:
                    3d:e0:28:1f:1f:8b:d2:01:4d:ce:15:f9:5f:60:40:
                    e8:60:41:b7:c8:f6:67:ce:08:07:9f:b5:5d:e6:21:
                    9b:b8:e7:99:8d:28:05:75:9e:0c:24:87:9f:f5:48:
                    12:84:f1:e3:4d:49:ec:8b:36:5d:f1:bc:e5:30:cb:
                    3f:b8:51:8b:0e:de:47:ef:05:1b:2a:a4:c5:79:e9:
                    51:79:e5:67:8d:34:42:c5:fd:7e:6a:3f:05:fb:9c:
                    ce:56:a4:8e:56:a0:d5:38:b4:cc:f4:b4:54:35:0b:
                    04:c1:9d:e5:ab:42:f6:ff:3d:df:af:cd:fe:0c:b9:
                    a6:33:1d:09:1f:56:84:5e:a5:a2:cd:94:57:eb:81:
                    e2:26:54:d1:83:25:02:35:9a:a0:88:e2:e3:bb:8c:
                    43:3c:2a:4a:67:7c:56:d1:11:21:e9:76:e5:ae:f3:
                    75:7a:ad:01:9e:e0:be:2d:fd:1c:38:21:dd:c1:1e:
                    17:1f:b0:1c:e2:c9:4a:ed:9b:99:69:4b:cb:24:ac:
                    53:3c:b5:16:ef:08:96:af:0f:81:95:30:53:54:41:
                    69:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:99:54:0E:D1:09:10:6D:67:9E:6E:47:60:A0:52:6B:4B:49:65:1C
            X509v3 Authority Key Identifier:
                keyid:6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/4plUDtEJEG1nnm5HYKBSa0tJZRw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.159.140.0/22
                IPv6:
                  2a10:6e40::/29

    Signature Algorithm: sha256WithRSAEncryption
         67:00:7b:38:9f:2b:47:4a:97:76:c8:ab:02:99:9a:19:77:04:
         b3:af:8b:b0:30:1a:0d:4a:21:71:5f:91:a7:c7:29:ab:58:d0:
         20:1f:0a:e8:93:48:b2:a0:63:b8:04:a0:ca:1f:a6:6b:8f:e3:
         a7:ce:03:4c:12:25:c3:0f:a6:cf:e1:1a:15:69:8e:b3:c5:2b:
         08:8b:dd:8e:28:35:31:d5:12:7d:30:e5:4e:2a:23:17:06:7e:
         fb:40:ba:f5:0d:28:28:96:85:44:25:1b:5a:06:44:00:da:86:
         69:96:57:49:17:96:eb:bf:f9:d0:0f:05:28:cc:8d:bf:24:77:
         b7:1a:d1:a5:3f:50:b4:25:30:6d:12:a2:3e:00:63:2a:10:ff:
         9c:03:df:a1:f1:ee:44:45:be:a0:37:fb:5d:7e:33:67:9e:f1:
         04:a6:50:f9:b9:44:8c:fb:5f:62:c9:9a:e9:6b:de:98:62:dd:
         25:90:ed:0e:9e:6a:60:0c:fa:53:a2:c0:c7:70:37:ab:89:f8:
         24:c6:3e:77:3c:9d:52:96:f4:23:25:07:cb:af:b2:1b:bc:86:
         50:d0:a3:0e:1b:ab:ff:70:c9:54:7e:1c:bc:18:db:8e:30:84:
         1d:98:2d:99:94:08:26:3c:84:cc:d1:7c:23:19:02:01:0b:e8:
         18:82:4b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----