Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Lu8o0U-x5ffdO24Tq3hvd4sQpxA.roa
File:                     Lu8o0U-x5ffdO24Tq3hvd4sQpxA.roa (raw, json)
Hash identifier:          AIVXnqp5BXBiYqlbFNluXcQghrGONflEWArkruiGBHM=
Subject key identifier:   2E:EF:28:D1:4F:B1:E5:F7:DD:3B:6E:13:AB:78:6F:77:8B:10:A7:10
Certificate issuer:       /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial:       0185710C39F5A67C02183FEB0AEB00F24F27
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Lu8o0U-x5ffdO24Tq3hvd4sQpxA.roa
Signing time:             Mon 02 Jan 2023 05:55:04 +0000
ROA not before:           Mon 02 Jan 2023 05:55:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207577
IP address blocks:        195.66.104.0/24 maxlen: 24
                          45.142.123.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:32:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:0c:39:f5:a6:7c:02:18:3f:eb:0a:eb:00:f2:4f:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
        Validity
            Not Before: Jan  2 05:55:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2eef28d14fb1e5f7dd3b6e13ab786f778b10a710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c6:55:c6:b8:14:ee:17:6a:68:80:10:02:ed:
                    60:c8:d0:3e:bf:52:f2:ca:a6:8b:9f:0d:5b:4f:5d:
                    1f:e4:56:10:58:14:b5:76:e9:c1:60:5c:53:8f:95:
                    08:43:b3:29:ea:2c:31:9e:db:6e:39:3b:0d:25:02:
                    a2:a9:02:12:46:87:22:e8:5c:09:68:31:16:f2:ec:
                    ac:ca:a5:5a:df:b3:b6:2c:1d:15:d1:93:f3:76:7d:
                    47:0f:e4:8a:28:00:6b:b7:96:6f:68:e8:25:12:c6:
                    4a:e0:60:04:26:bb:33:09:77:f7:50:53:48:c0:ce:
                    33:c6:ae:2c:c2:e8:19:4c:6f:7c:45:8d:7e:56:c7:
                    4c:22:d0:3c:0c:f0:f5:c4:25:ea:c3:87:03:4d:de:
                    a5:4b:fe:0c:74:34:a9:e0:df:b4:97:19:4a:d9:5b:
                    80:81:5a:f7:c1:06:e4:ef:61:20:39:7b:ff:90:02:
                    c2:ff:80:30:2c:fe:57:43:d8:7d:44:4d:cc:15:5e:
                    7b:95:8b:08:7d:1b:e8:a3:c1:da:c1:78:3c:c4:16:
                    fc:b7:40:0a:09:2f:0b:41:1a:fb:e2:64:0b:be:9c:
                    7d:8b:0e:0f:7c:fc:85:02:80:ae:f5:2d:34:d9:56:
                    df:b6:cd:ca:eb:d1:11:c4:d7:e0:ed:6c:1c:d5:9f:
                    af:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:EF:28:D1:4F:B1:E5:F7:DD:3B:6E:13:AB:78:6F:77:8B:10:A7:10
            X509v3 Authority Key Identifier:
                keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Lu8o0U-x5ffdO24Tq3hvd4sQpxA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.142.123.0/24
                  195.66.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:eb:c1:b6:04:ed:3f:05:d8:14:c4:75:32:21:12:85:d9:f4:
         55:ce:f8:bb:55:e0:47:78:fe:a4:25:b6:84:e3:65:71:6c:1d:
         2a:fb:00:37:28:11:d8:6b:41:86:38:81:18:75:5d:b0:8c:eb:
         3f:d6:ad:f6:3a:f5:f4:a1:4e:1f:1b:80:f5:ce:d1:54:18:59:
         11:75:da:83:42:83:a0:f5:32:57:43:0f:5b:21:c5:d8:2e:86:
         53:fb:69:89:70:c7:3a:3c:e5:c1:23:16:ed:05:3d:71:cd:47:
         81:8d:9c:67:ed:38:ec:e4:e0:97:cd:76:12:fa:2d:9c:93:86:
         44:73:1c:8b:a0:69:23:53:22:a3:06:53:6a:3b:08:2b:77:8d:
         25:eb:57:e7:5b:97:93:3e:c4:49:c5:68:53:89:79:9e:74:3f:
         8c:3b:63:0e:63:27:45:9e:1c:36:c4:8d:68:18:0d:ae:62:89:
         62:2b:21:e2:23:7e:e6:6c:03:8d:b7:03:e8:ec:88:9e:02:f3:
         5e:8e:a6:53:b2:16:68:32:28:b9:30:84:ae:cb:ad:88:8a:e2:
         f6:47:d0:94:31:7b:ff:ee:c0:50:ce:c6:50:ad:85:91:94:07:
         a1:85:76:5a:3c:2f:58:30:9a:8b:92:77:f4:49:08:e4:68:9f:
         53:71:52:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:10 2024 by rpki-client on console-ams.rpki-client.org