Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/SnnilmxfYj18JzWAMnViTERmhiw.roa
File:                     SnnilmxfYj18JzWAMnViTERmhiw.roa (raw, json)
Hash identifier:          178no/KvKR7AIQuQdrpXfVdsjCG2/2qwLD8sI3t4DtA=
Subject key identifier:   4A:79:E2:96:6C:5F:62:3D:7C:27:35:80:32:75:62:4C:44:66:86:2C
Certificate issuer:       /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial:       01856C53E6F73746EFC787375F74B9A7E8CA
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/SnnilmxfYj18JzWAMnViTERmhiw.roa
Signing time:             Sun 01 Jan 2023 07:55:15 +0000
ROA not before:           Sun 01 Jan 2023 07:55:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     30058
IP address blocks:        45.138.210.0/24 maxlen: 32

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:53:e6:f7:37:46:ef:c7:87:37:5f:74:b9:a7:e8:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
        Validity
            Not Before: Jan  1 07:55:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4a79e2966c5f623d7c2735803275624c4466862c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bd:e8:b2:b2:3c:09:15:ee:b4:f3:28:67:91:
                    67:0b:18:b8:ec:40:1c:c2:b7:a0:ec:ab:d7:a8:e4:
                    bf:15:a5:1e:33:0d:5d:b1:a5:6a:cd:d0:f2:2b:b2:
                    4f:9c:8e:7f:27:f1:99:3f:af:a6:3a:32:12:df:17:
                    ca:8b:13:e4:34:02:71:be:d8:92:27:a7:b3:89:a5:
                    55:14:6a:a8:37:3b:20:8d:05:7e:95:f2:89:de:97:
                    1a:2c:d3:ea:e5:62:6b:fa:08:a2:96:8f:91:cb:20:
                    e1:e7:a1:2e:89:58:f7:04:bf:88:a1:9d:23:e9:f5:
                    64:4c:fa:87:39:9f:e6:a6:db:5a:38:04:11:e6:06:
                    70:aa:3f:13:cf:cd:cd:9e:3c:82:9f:f7:57:b8:a7:
                    8c:48:a5:be:1e:90:ff:1a:64:1b:93:38:c7:46:e3:
                    58:33:41:f6:89:cf:5a:fb:ec:f9:ff:40:ef:10:2e:
                    a0:e2:5a:bf:f8:2f:b1:f6:d3:c5:92:e8:bf:20:ce:
                    6f:8f:fc:c2:9f:94:f3:7d:67:f5:ea:b6:96:cf:db:
                    40:eb:2f:8f:f5:bd:c4:c7:e1:ab:3c:e8:0e:a3:33:
                    90:d4:23:b9:a5:e7:6c:79:54:b0:ed:b6:4c:6a:9b:
                    21:79:63:06:bb:c7:64:eb:35:7b:36:ec:22:8d:68:
                    64:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:79:E2:96:6C:5F:62:3D:7C:27:35:80:32:75:62:4C:44:66:86:2C
            X509v3 Authority Key Identifier:
                keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/SnnilmxfYj18JzWAMnViTERmhiw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.138.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:bf:26:f8:76:5b:1f:cd:75:8b:c3:d2:a8:6f:e0:ee:25:c9:
         9f:c5:ca:84:0c:2b:ae:34:7b:f5:66:bb:2b:92:45:9c:9c:d3:
         3b:75:d2:67:79:4d:e9:d0:a2:65:88:86:ad:77:e1:7c:a3:83:
         a3:71:2a:3e:c2:32:3d:32:31:92:ca:60:8b:9e:a3:e8:2f:dd:
         c5:cf:49:7f:e0:31:ee:cd:ce:73:93:3d:d7:29:8f:10:6f:d7:
         11:04:a8:8d:ad:ae:46:ac:96:2e:ed:70:01:1e:8f:33:37:7a:
         4c:84:66:d5:e6:78:01:26:7a:ff:64:12:9a:6b:e8:28:00:6a:
         84:90:a5:da:0f:5e:a5:b5:38:f5:b5:92:8a:10:26:25:2f:a1:
         21:8e:5d:77:7f:a0:13:0a:64:d9:89:fd:26:b0:87:fe:2c:e5:
         b8:92:6a:3d:b3:49:49:ea:ac:b7:a1:b7:77:a7:89:58:cd:78:
         6f:38:fc:ff:d5:b8:3a:da:10:f4:9b:cb:99:bf:82:fa:80:38:
         22:4f:ec:d6:81:66:99:d8:dd:94:7b:a2:b5:4e:38:65:da:94:
         09:b5:ce:de:50:56:51:5e:15:41:e9:51:b6:bd:ba:d8:02:59:
         0f:f3:e2:e9:4b:62:55:f9:a2:b8:00:b0:fc:59:8e:52:b0:70:
         7d:02:ba:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:32 2024 by rpki-client on console-ams.rpki-client.org