Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7VnYGbUZWpoVtbZa1HoJ-iZ-qgk.roa
File:                     7VnYGbUZWpoVtbZa1HoJ-iZ-qgk.roa (raw, json)
Hash identifier:          u6+O+1ARozVWLkUI6SatliF3OxadIUWu7FpUFM9U2eA=
Subject key identifier:   ED:59:D8:19:B5:19:5A:9A:15:B5:B6:5A:D4:7A:09:FA:26:7E:AA:09
Certificate issuer:       /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial:       0186544817864603FBA33F7E7B21D2491515
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7VnYGbUZWpoVtbZa1HoJ-iZ-qgk.roa
Signing time:             Wed 15 Feb 2023 08:54:16 +0000
ROA not before:           Wed 15 Feb 2023 08:54:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3320
IP address blocks:        45.147.227.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 15 Feb 2023 19:27:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:54:48:17:86:46:03:fb:a3:3f:7e:7b:21:d2:49:15:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
        Validity
            Not Before: Feb 15 08:54:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ed59d819b5195a9a15b5b65ad47a09fa267eaa09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:10:1a:ea:10:4a:2c:37:bb:02:18:47:ec:4b:
                    0e:96:56:14:03:7a:fc:27:cb:b1:ef:2e:ef:12:9b:
                    1c:33:0e:9e:a1:f7:10:7e:4d:d9:b5:4c:5b:39:f0:
                    e2:71:86:88:e7:a8:2e:97:e8:9a:1f:1c:a4:d8:63:
                    d4:08:85:6b:7c:a6:ed:b2:73:e4:d0:e9:2a:d5:b9:
                    c7:96:0d:67:95:42:cf:5f:2c:ea:66:ed:97:2f:53:
                    d4:a4:bf:46:d9:e5:5f:9a:e9:8e:33:37:25:69:3c:
                    50:3a:31:06:7a:fe:70:e7:79:08:6b:f5:47:5e:fc:
                    1e:e7:fe:70:27:f4:40:ef:e3:dd:9b:d5:d4:78:14:
                    1f:eb:07:1f:44:50:be:11:44:a1:51:47:85:17:33:
                    11:bb:97:d9:55:1b:6a:67:72:96:25:21:78:9d:f2:
                    47:9f:75:74:0a:04:6b:da:92:44:cf:86:f4:e4:60:
                    4f:42:41:f5:1a:df:61:65:be:ab:d6:d5:10:8c:20:
                    51:ac:fd:1d:84:04:41:fe:96:0c:f1:33:3c:37:58:
                    53:69:ba:7a:2b:fc:36:2c:a5:44:64:5a:09:90:2d:
                    5a:2c:d3:26:e6:de:a6:28:af:45:a4:82:a2:15:31:
                    ff:c7:31:89:53:a1:2a:01:8f:6f:b2:fc:57:30:d6:
                    5f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:59:D8:19:B5:19:5A:9A:15:B5:B6:5A:D4:7A:09:FA:26:7E:AA:09
            X509v3 Authority Key Identifier:
                keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/7VnYGbUZWpoVtbZa1HoJ-iZ-qgk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.147.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:89:08:e7:8f:af:3b:42:bd:90:37:f3:38:78:10:a5:ab:dd:
         c8:07:45:d0:7c:95:f1:cd:7a:94:0c:a7:6f:c0:45:1a:bc:16:
         cf:e7:22:45:53:b0:51:7d:45:e9:fe:1f:75:de:46:b1:8d:9c:
         a8:c3:34:a6:6d:41:a3:d6:38:fe:a0:b7:5e:f2:b7:40:f3:5a:
         3b:03:e2:69:55:74:00:eb:16:df:2e:6b:29:4d:46:25:72:fd:
         99:35:85:a6:1d:3e:e1:48:f9:a0:d8:b7:68:46:cc:ab:3b:c5:
         bd:5a:cc:72:98:4e:51:c1:95:d9:7d:b5:bc:e7:b0:88:81:3f:
         b8:51:74:ad:c9:aa:0f:37:f7:75:4e:96:2f:d1:3a:64:5d:3d:
         3d:34:cf:84:97:fb:bc:5e:c6:34:ef:69:b8:df:48:f9:44:e8:
         bc:fe:c8:4f:b7:58:b2:c7:48:ca:05:65:b4:8e:10:bd:3a:5d:
         e7:c6:1b:a4:9d:2f:17:a0:74:d4:b4:cb:8a:04:34:63:52:28:
         8d:4b:f3:16:8a:e0:1d:62:f8:a5:69:4d:07:92:aa:71:3f:6d:
         4d:d6:ad:f5:d8:58:e0:3e:88:8b:11:a9:75:56:35:7e:d3:05:
         03:0f:b8:2f:20:fd:eb:62:20:9b:a6:bf:25:60:52:29:aa:83:
         eb:c8:f0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:20 2024 by rpki-client on console-ams.rpki-client.org