Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/CS_ryji_30viXnzjKECsqK3gJKo.roa
File:                     CS_ryji_30viXnzjKECsqK3gJKo.roa (raw, json)
Hash identifier:          qGtWmmQDQof/wCvRhSkR6dRb6Uhnh40cWMU/UCLrMXw=
Subject key identifier:   09:2F:EB:CA:38:BF:DF:4B:E2:5E:7C:E3:28:40:AC:A8:AD:E0:24:AA
Certificate issuer:       /CN=b960b14746c5875244ae3b694162ec6d8c63255e
Certificate serial:       018570676771334E0C0D58C0ADFD321FFBAC
Authority key identifier: B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/CS_ryji_30viXnzjKECsqK3gJKo.roa
Signing time:             Mon 02 Jan 2023 02:55:02 +0000
ROA not before:           Mon 02 Jan 2023 02:55:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202120
IP address blocks:        45.135.210.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 00:29:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:67:67:71:33:4e:0c:0d:58:c0:ad:fd:32:1f:fb:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b960b14746c5875244ae3b694162ec6d8c63255e
        Validity
            Not Before: Jan  2 02:55:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=092febca38bfdf4be25e7ce32840aca8ade024aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:18:a5:0e:48:34:58:47:52:27:bf:00:b0:dc:
                    a3:81:9d:11:89:0e:ae:b2:fc:43:66:3b:d1:66:fa:
                    af:99:21:f9:2c:ea:f5:07:d4:c9:a2:dc:8d:95:dc:
                    af:1f:5f:4f:5f:3f:65:38:6b:61:b5:b6:e0:c0:7c:
                    c1:57:13:02:96:4f:ee:5b:0d:39:65:cc:ef:52:08:
                    14:89:23:1a:a9:0f:7d:28:6b:fc:3d:4f:7c:ac:df:
                    9f:ba:b1:d3:71:2d:3a:ed:c1:92:77:f3:76:4d:fa:
                    33:ec:a9:17:07:dd:d8:db:bb:81:a6:62:37:7d:26:
                    83:47:3d:e5:42:50:2a:a1:48:77:d8:59:7d:19:94:
                    a8:9f:be:e9:78:c5:e1:14:74:c6:55:a5:e2:6e:ab:
                    ff:41:f9:25:83:53:2a:9c:07:a0:12:cf:24:41:a3:
                    d9:30:15:eb:6c:0a:26:5f:5a:00:a8:0b:d3:a2:14:
                    4e:92:40:79:e4:f7:10:b8:a8:ab:74:03:a0:da:6f:
                    2b:0b:f3:1a:03:70:40:c7:09:0b:cb:8c:1f:17:63:
                    06:1d:c8:07:77:69:a1:d2:2a:12:37:36:1e:f8:b6:
                    c8:91:79:92:39:29:52:3f:44:b2:83:f8:b6:aa:94:
                    2e:35:3e:a9:64:e4:f4:1d:51:5b:f7:cc:67:10:cc:
                    f9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:2F:EB:CA:38:BF:DF:4B:E2:5E:7C:E3:28:40:AC:A8:AD:E0:24:AA
            X509v3 Authority Key Identifier:
                keyid:B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/CS_ryji_30viXnzjKECsqK3gJKo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:ba:3c:3a:a0:15:9e:17:96:b6:5e:5e:cd:1b:c9:17:de:f5:
         72:2a:ae:d3:7c:b1:ce:47:e6:4c:0b:55:7a:fb:1a:d5:84:4c:
         d7:35:66:c9:45:1b:8c:30:d0:be:fc:f5:f2:7e:5c:c6:12:5a:
         2f:61:bb:14:9e:83:3c:5c:bb:b0:b4:a2:ac:47:b9:31:33:ca:
         15:65:0e:8a:8f:50:7d:0e:32:57:f6:c4:7f:27:52:b6:3c:87:
         29:97:43:b6:c4:f6:5b:45:cf:6a:bd:fd:ce:aa:50:6e:6e:b4:
         33:a1:39:ed:55:00:c8:a1:90:ca:0c:dc:fe:b1:01:2b:5a:8d:
         df:b2:04:32:a6:e7:65:45:40:3f:1b:97:29:07:2b:bd:59:49:
         f7:01:8c:34:a1:30:97:fe:42:56:8a:0b:18:ab:39:10:c0:8c:
         1a:08:a0:17:be:52:ea:d8:e7:f6:ee:db:47:95:6f:37:74:48:
         4a:2c:1b:ad:fe:88:0a:fb:53:d4:cd:04:14:6b:14:fd:66:ae:
         2f:aa:b4:e8:bc:a9:91:70:8a:27:94:b3:2b:63:58:c2:03:a6:
         4c:41:6b:59:17:26:f0:93:49:70:ed:1c:f2:5c:07:4c:77:d2:
         71:b2:e7:48:e7:30:96:36:7a:0e:28:a0:c4:84:09:97:3d:42:
         c8:ae:ef:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:41 2024 by rpki-client on console-ams.rpki-client.org