Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/927sELmf2fjloGcBRd23MsAKfWw.roa
File:                     927sELmf2fjloGcBRd23MsAKfWw.roa (raw, json)
Hash identifier:          qnTomHwHp5jCGGvfSegMl1/1Q4JLRe2d75HvfMLt0U8=
Subject key identifier:   F7:6E:EC:10:B9:9F:D9:F8:E5:A0:67:01:45:DD:B7:32:C0:0A:7D:6C
Certificate issuer:       /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial:       01870BF08CDC973187BD9D4F7284E99750EE
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/927sELmf2fjloGcBRd23MsAKfWw.roa
Signing time:             Thu 23 Mar 2023 00:48:46 +0000
ROA not before:           Thu 23 Mar 2023 00:48:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14445
IP address blocks:        45.8.21.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 22 Apr 2023 16:50:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:0b:f0:8c:dc:97:31:87:bd:9d:4f:72:84:e9:97:50:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
        Validity
            Not Before: Mar 23 00:48:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f76eec10b99fd9f8e5a0670145ddb732c00a7d6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:08:85:f7:92:de:88:ae:cc:7d:ab:31:29:79:
                    77:7a:3f:e4:cf:bf:68:f6:5d:18:67:2c:94:70:64:
                    33:77:23:93:20:a7:e3:e5:9c:cf:7c:c7:fc:94:56:
                    a3:5e:d2:70:6f:39:f0:c9:a8:73:62:62:bd:a4:32:
                    2a:f0:d1:3e:76:7c:24:99:b7:84:7f:d2:52:c6:b0:
                    3b:9e:95:4b:4b:3a:71:fd:49:eb:b0:31:b9:a1:0c:
                    a8:b3:21:81:9e:84:7c:33:e6:02:c4:ef:58:11:a7:
                    e3:c2:89:0e:17:bd:59:02:1a:c7:e2:86:72:ab:1c:
                    3f:f3:f1:c6:c6:a4:13:8d:ea:91:d5:50:f2:ed:51:
                    f4:e1:2b:a8:fe:70:12:85:b9:a9:e8:6a:4b:8b:e6:
                    bc:cd:20:31:08:d1:21:8b:37:db:f0:df:42:6f:40:
                    16:bb:c1:a9:bd:da:7c:3a:e5:10:86:8c:b1:3e:00:
                    c4:97:65:29:6d:91:66:8d:20:bf:fd:f4:ff:df:c8:
                    2b:40:89:94:84:de:0a:bf:a9:57:39:b9:ab:a4:7d:
                    de:d2:af:f9:e1:ca:45:d6:84:17:81:96:0e:a1:12:
                    b8:98:f4:30:d3:2d:0b:dc:de:0c:44:cc:a6:5d:0b:
                    f4:96:e0:f1:1a:71:03:40:43:d6:ba:5f:cb:68:3c:
                    9b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6E:EC:10:B9:9F:D9:F8:E5:A0:67:01:45:DD:B7:32:C0:0A:7D:6C
            X509v3 Authority Key Identifier:
                keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/927sELmf2fjloGcBRd23MsAKfWw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:4a:34:9c:3f:03:89:bc:6c:11:0e:bd:05:5c:b8:ba:6b:a6:
         8f:ff:89:b7:48:61:5f:a0:75:17:f9:30:c3:d6:cf:8c:36:8c:
         c2:a0:b3:b5:75:d0:8b:ad:b5:d4:28:8d:49:a7:f2:31:88:f1:
         5e:85:f1:23:32:81:ac:40:8f:c0:c9:9f:67:f1:50:de:7e:94:
         52:b7:b7:34:7f:79:ee:32:86:99:22:66:42:b3:d5:f1:01:4f:
         5e:87:65:0e:08:ac:50:8a:f6:88:40:4d:28:54:ff:ac:2d:26:
         18:ae:1b:39:de:5f:35:c3:fb:67:cb:04:05:a9:29:52:73:e3:
         a1:8b:d6:a8:7c:ca:0e:e5:87:b2:ee:bd:d5:38:86:9e:ba:0a:
         30:bd:82:51:82:20:f3:1c:dc:09:f4:17:f5:b5:b4:0c:7e:78:
         82:38:08:b2:cd:ba:ef:fb:3d:80:95:f5:fd:20:a1:16:f9:5f:
         c7:e6:fe:1f:63:02:f2:d2:66:11:6a:e2:17:d2:e9:fe:f9:65:
         b5:1c:18:80:3f:2b:5e:82:b3:7d:20:6d:50:8f:0a:90:44:81:
         96:7c:c0:7b:46:46:75:bf:a2:bd:dc:f9:dc:4e:ee:c2:41:aa:
         9e:77:67:ce:d8:10:4b:b5:77:18:40:28:b1:13:96:62:d8:4c:
         1b:92:fb:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:20 2024 by rpki-client on console-ams.rpki-client.org