Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/_Ljr8cgsWSpPK-MVoaswdfcR2pU.roa
File:                     _Ljr8cgsWSpPK-MVoaswdfcR2pU.roa (raw, json)
Hash identifier:          qqyuXEeXbPiIsskvKl9EKWAD3wCLlfpraOsE4yL2d5A=
Subject key identifier:   FC:B8:EB:F1:C8:2C:59:2A:4F:2B:E3:15:A1:AB:30:75:F7:11:DA:95
Certificate issuer:       /CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
Certificate serial:       0188B364BCDB67252EFED7EBE6C97C469FC0
Authority key identifier: 1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/_Ljr8cgsWSpPK-MVoaswdfcR2pU.roa
Signing time:             Tue 13 Jun 2023 06:15:03 +0000
ROA not before:           Tue 13 Jun 2023 06:15:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8895
IP address blocks:        164.215.45.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 01 Nov 2023 08:29:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:b3:64:bc:db:67:25:2e:fe:d7:eb:e6:c9:7c:46:9f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e8d205c798ed78f3c44ca0c8f2852e8bec8eaa2
        Validity
            Not Before: Jun 13 06:15:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fcb8ebf1c82c592a4f2be315a1ab3075f711da95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:10:57:36:ce:70:3d:f0:d0:9a:5c:bb:1d:c6:
                    81:8d:d3:f7:ad:5e:63:15:b3:d6:53:dd:9f:10:0f:
                    77:1a:6e:db:64:aa:dd:b3:1e:2a:75:21:b3:68:4b:
                    8a:32:b7:5c:7b:ff:28:66:8d:80:7c:b3:4a:fd:66:
                    e9:76:f1:e9:cc:e2:98:eb:69:44:cb:4b:2e:a6:a7:
                    54:85:85:e3:84:56:8a:78:3c:19:fd:2f:87:b2:c4:
                    56:36:f7:c9:1e:95:c0:69:1b:cc:85:d4:ed:ae:b8:
                    bb:aa:24:86:60:1f:0a:8d:45:bb:5f:fb:a7:35:61:
                    27:82:7a:5d:55:6b:a7:a4:8e:ba:5e:0c:14:57:9c:
                    ef:5d:fe:8b:7e:7b:4c:2a:bb:3c:6d:4b:f2:61:ff:
                    77:0b:09:40:f8:39:4b:de:3d:a0:55:e8:ec:f2:7d:
                    ee:6b:25:a0:1a:c5:e7:64:0b:cd:18:9e:11:1b:23:
                    de:b1:a0:f2:ac:78:d9:ae:23:91:17:23:88:f3:e5:
                    6c:01:0b:ae:6d:84:3a:7d:c7:72:32:54:9e:ee:d4:
                    72:5a:7f:3e:20:03:58:57:23:6c:a4:02:57:1a:53:
                    7e:ad:5b:52:07:49:5a:70:eb:6e:b1:a8:5e:1b:e0:
                    0b:fe:a8:26:a1:e2:70:21:d3:57:34:ce:91:41:cf:
                    0b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B8:EB:F1:C8:2C:59:2A:4F:2B:E3:15:A1:AB:30:75:F7:11:DA:95
            X509v3 Authority Key Identifier:
                keyid:1E:8D:20:5C:79:8E:D7:8F:3C:44:CA:0C:8F:28:52:E8:BE:C8:EA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ho0gXHmO1488RMoMjyhS6L7I6qI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/_Ljr8cgsWSpPK-MVoaswdfcR2pU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/298898-7454-402b-81e9-ee1bd344f015/1/Ho0gXHmO1488RMoMjyhS6L7I6qI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.215.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:37:0a:44:f0:7a:2a:2d:c1:cf:fa:3d:ef:4d:a0:7a:7b:a9:
         7c:ff:19:a3:40:f1:87:c7:ab:b7:75:69:7a:46:6b:bf:8e:b7:
         60:72:a0:fb:e3:f9:19:9b:f2:b8:68:84:45:fb:d5:fc:81:94:
         78:57:ab:da:77:5e:23:7e:53:e2:bc:45:87:3c:ff:c7:90:e3:
         d2:59:f5:c4:1a:e6:e7:ba:58:62:aa:99:fd:98:ea:23:95:b3:
         24:d9:32:b2:c4:9b:c0:ca:39:3b:9e:55:60:7d:d1:57:be:af:
         04:0f:1a:83:33:52:60:45:3e:63:eb:22:41:fa:e8:73:5a:75:
         39:24:ec:94:2a:1f:04:a7:9d:e7:e2:42:6e:22:57:a2:5d:33:
         9b:de:47:c0:4e:fa:f6:76:6c:ca:26:38:7f:4f:05:e2:5e:07:
         db:70:0a:70:fd:e8:9f:11:a1:8c:f4:e2:23:15:97:ed:6e:91:
         72:c1:4f:41:7b:58:a2:89:1e:89:c4:73:91:78:cb:91:3e:e9:
         5f:f2:f9:15:55:81:a8:89:fa:02:66:0f:19:f3:15:fa:d5:12:
         76:3e:ff:03:30:cd:e3:cb:a3:16:f2:90:b8:a0:50:31:69:f4:
         e3:2f:30:f4:f3:a7:ff:6c:ae:d1:9a:ed:65:25:c8:46:82:96:
         31:49:b3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:19 2024 by rpki-client on console-ams.rpki-client.org