Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/LUya41FemhN747wrG7FSBCh9NHA.roa
File:                     LUya41FemhN747wrG7FSBCh9NHA.roa (raw, json)
Hash identifier:          Jrp5Y32lic+WOuA0y4ywtyyHCagR45cTgfLP3rAzzQc=
Subject key identifier:   2D:4C:9A:E3:51:5E:9A:13:7B:E3:BC:2B:1B:B1:52:04:28:7D:34:70
Certificate issuer:       /CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Certificate serial:       018CC42560B91FB964A8140F91CB8F1A543E
Authority key identifier: EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/LUya41FemhN747wrG7FSBCh9NHA.roa
Signing time:             Mon 01 Jan 2024 08:30:33 +0000
ROA not before:           Mon 01 Jan 2024 08:30:33 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     56851
IP address blocks:        45.83.192.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Fri 19 Apr 2024 13:42:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c4:25:60:b9:1f:b9:64:a8:14:0f:91:cb:8f:1a:54:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecd6bdacc521edca4c076048da86fed5dcd61220
        Validity
            Not Before: Jan  1 08:30:33 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=2d4c9ae3515e9a137be3bc2b1bb15204287d3470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3e:9e:92:f5:76:11:db:e1:39:df:5d:28:2d:
                    c1:af:9d:06:1e:42:b5:e6:42:26:33:00:d1:ee:63:
                    a8:c5:24:60:3b:55:ee:55:9e:1b:59:3d:65:3d:b4:
                    0d:93:8e:c1:07:64:98:09:4a:88:80:da:aa:28:c0:
                    8f:7b:86:45:f9:37:a9:59:b3:7e:1f:53:72:a4:da:
                    85:f5:2a:e0:ba:45:30:50:1f:01:f1:82:61:4f:f0:
                    a9:d2:1b:4e:44:de:69:36:56:7b:d0:d6:16:fd:37:
                    5f:17:d4:3d:be:e2:25:92:0b:c4:0a:23:cf:f2:69:
                    bd:66:c1:0d:73:48:6a:7f:29:78:6e:ba:88:ca:3e:
                    69:a3:1b:bb:4b:2b:c2:f9:bd:7c:78:e5:92:2e:dc:
                    46:6e:a2:91:89:27:7d:c0:fa:77:96:0c:b7:b0:d3:
                    26:38:40:89:45:f4:f5:ee:9b:a1:41:1c:b7:22:da:
                    ef:d7:0c:e3:99:28:24:3d:1e:a6:0b:81:4f:dc:cd:
                    fb:ee:64:73:ae:5b:65:46:7f:0b:18:45:46:c1:ec:
                    78:b8:db:dc:de:6a:c1:12:8e:33:0e:41:dc:81:99:
                    bb:81:a0:46:40:57:69:84:21:27:41:1e:d8:49:ed:
                    c7:c9:16:6c:bc:f4:24:25:37:b0:fe:60:0c:fa:59:
                    fb:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4C:9A:E3:51:5E:9A:13:7B:E3:BC:2B:1B:B1:52:04:28:7D:34:70
            X509v3 Authority Key Identifier:
                keyid:EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/LUya41FemhN747wrG7FSBCh9NHA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.83.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         89:24:48:83:98:b8:c9:8c:7f:0b:7b:32:7f:3c:f2:1b:02:50:
         66:17:38:8b:05:e5:f1:00:5b:3c:5f:44:bb:a1:0f:d2:8f:bb:
         25:f2:84:e4:bc:05:81:1b:c9:b1:f1:e5:f4:4a:8c:78:28:72:
         ef:f8:4c:88:d8:88:a3:dd:3d:4e:54:0c:7d:4d:6d:99:1d:42:
         55:b3:f2:59:d7:59:19:ee:fe:4f:92:e7:cf:ca:94:59:a7:23:
         9f:b7:16:81:f4:cf:17:1a:88:29:6b:be:36:57:11:18:c8:57:
         2c:7a:1d:6e:ce:a4:6a:86:3d:86:15:b2:13:7f:e5:75:8b:4e:
         73:31:48:ba:79:e0:f5:86:7e:d6:94:40:57:55:41:53:f7:01:
         4e:f1:e1:bc:57:c4:2d:f5:51:1f:b9:e2:8e:6a:87:d9:5d:89:
         7d:4f:23:f0:5d:7e:a8:f7:df:48:9d:6c:12:b0:53:0d:88:08:
         de:20:0e:f6:65:bc:51:7e:de:61:e3:f2:cf:84:1e:b2:3a:90:
         25:d3:a7:e0:4a:2f:70:66:38:e5:a6:e4:bd:ed:9e:02:16:fe:
         96:45:59:98:21:fe:72:7c:3d:02:78:c0:64:c8:b6:5d:27:e5:
         e3:fc:ba:a4:c0:57:6e:e9:53:0f:a2:53:36:da:b3:53:2a:46:
         49:23:4d:e1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJWC5H7lkqBQPkcuPGlQ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjZDZiZGFjYzUyMWVkY2E0YzA3NjA0OGRhODZmZWQ1ZGNk
NjEyMjAwHhcNMjQwMTAxMDgzMDMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZDRjOWFlMzUxNWU5YTEzN2JlM2JjMmIxYmIxNTIwNDI4N2QzNDcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjj6ekvV2EdvhOd9dKC3Br50GHkK1
5kImMwDR7mOoxSRgO1XuVZ4bWT1lPbQNk47BB2SYCUqIgNqqKMCPe4ZF+TepWbN+
H1NypNqF9SrgukUwUB8B8YJhT/Cp0htORN5pNlZ70NYW/TdfF9Q9vuIlkgvECiPP
8mm9ZsENc0hqfyl4brqIyj5poxu7SyvC+b18eOWSLtxGbqKRiSd9wPp3lgy3sNMm
OECJRfT17puhQRy3Itrv1wzjmSgkPR6mC4FP3M377mRzrltlRn8LGEVGwex4uNvc
3mrBEo4zDkHcgZm7gaBGQFdphCEnQR7YSe3HyRZsvPQkJTew/mAM+ln7EQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC1MmuNRXpoTe+O8KxuxUgQofTRwMB8GA1UdIwQY
MBaAFOzWvazFIe3KTAdgSNqG/tXc1hIgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN05hOXJNVWg3Y3BNQjJCSTJvYi0xZHpXRWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9iOWYyOWItZWUzZC00YmRlLWFkYzYt
NDNlOTFlNWVmMTQ1LzEvTFV5YTQxRmVtaE43NDd3ckc3RlNCQ2g5TkhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9iOWYyOWItZWUzZC00YmRlLWFkYzYtNDNlOTFlNWVmMTQ1
LzEvN05hOXJNVWg3Y3BNQjJCSTJvYi0xZHpXRWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVPAMA0G
CSqGSIb3DQEBCwUAA4IBAQCJJEiDmLjJjH8LezJ/PPIbAlBmFziLBeXxAFs8X0S7
oQ/Sj7sl8oTkvAWBG8mx8eX0Sox4KHLv+EyI2Iij3T1OVAx9TW2ZHUJVs/JZ11kZ
7v5PkufPypRZpyOftxaB9M8XGogpa742VxEYyFcseh1uzqRqhj2GFbITf+V1i05z
MUi6eeD1hn7WlEBXVUFT9wFO8eG8V8Qt9VEfueKOaofZXYl9TyPwXX6o999InWwS
sFMNiAjeIA72ZbxRft5h4/LPhB6yOpAl06fgSi9wZjjlpuS97Z4CFv6WRVmYIf5y
fD0CeMBkyLZdJ+Xj/LqkwFdu6VMPolM22rNTKkZJI03h
-----END CERTIFICATE-----
Generated at Fri Apr 19 18:28:17 2024 by rpki-client on console-ams.rpki-client.org