Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4n6v_0lJWOGSa_b8C0pZGkRbXZU.roa
File:                     4n6v_0lJWOGSa_b8C0pZGkRbXZU.roa (raw, json)
Hash identifier:          enG1lmbTp9zpZtdfN25QryA57OBIqztFNO31tmsoc1s=
Subject key identifier:   E2:7E:AF:FF:49:49:58:E1:92:6B:F6:FC:0B:4A:59:1A:44:5B:5D:95
Certificate issuer:       /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial:       018CC7933E2B2FE3BC8BCDAF8980268535E0
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4n6v_0lJWOGSa_b8C0pZGkRbXZU.roa
Signing time:             Tue 02 Jan 2024 00:29:24 +0000
ROA not before:           Tue 02 Jan 2024 00:29:24 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     39782
IP address blocks:        45.82.222.0/24 maxlen: 24
                          45.82.221.0/24 maxlen: 24
                          45.82.220.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 02 Jun 2024 04:47:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c7:93:3e:2b:2f:e3:bc:8b:cd:af:89:80:26:85:35:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
        Validity
            Not Before: Jan  2 00:29:24 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=e27eafff494958e1926bf6fc0b4a591a445b5d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f8:76:28:ff:d4:7c:75:71:dc:bb:2f:aa:2f:
                    6c:4b:73:09:53:a3:46:38:95:71:b5:6b:40:fa:f2:
                    e1:2c:cb:09:f5:3f:68:76:05:f7:75:86:47:e7:80:
                    35:bf:f2:7c:be:8c:89:ce:ac:1c:9d:68:17:59:e3:
                    ea:de:3e:ca:6b:0b:4d:ea:8e:1c:25:2c:91:7c:6f:
                    cb:4e:99:a9:f5:21:4d:0d:46:be:dc:67:13:ce:35:
                    8e:ec:4d:13:07:20:71:04:47:7c:24:d4:43:64:c2:
                    80:79:ba:60:2a:b6:00:1a:a1:e1:8a:a1:7e:61:6c:
                    34:4a:7d:25:b4:7f:fc:e0:a2:b3:91:ca:8d:ff:64:
                    90:0d:a6:92:89:ed:11:d9:a9:72:d3:3f:10:2e:e9:
                    ed:60:ee:48:36:1d:e7:1e:93:1d:62:39:19:df:a0:
                    f4:02:af:31:54:55:03:43:c1:92:40:69:b8:f5:5e:
                    1e:8c:10:49:1a:a4:66:11:a7:b1:94:da:e6:e0:68:
                    ef:96:60:c4:78:87:ca:d7:52:77:d3:3e:27:02:a6:
                    c7:1c:3a:85:46:af:36:87:b0:18:d9:22:55:25:a8:
                    19:1b:b6:26:b1:68:6c:49:24:91:7a:83:9a:34:bb:
                    e4:83:4c:bd:b5:ca:2b:4b:28:6e:c8:8f:70:82:0d:
                    0f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:7E:AF:FF:49:49:58:E1:92:6B:F6:FC:0B:4A:59:1A:44:5B:5D:95
            X509v3 Authority Key Identifier:
                keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4n6v_0lJWOGSa_b8C0pZGkRbXZU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.82.220.0-45.82.222.255

    Signature Algorithm: sha256WithRSAEncryption
         ca:87:8c:a1:94:ec:44:6d:35:ef:a2:28:46:fb:c3:1d:62:8f:
         91:1b:df:6e:14:4d:35:39:0d:a4:42:52:c9:66:9e:66:d4:14:
         cf:0e:97:60:ab:82:ea:bf:ca:88:96:42:74:6c:02:bd:4b:a0:
         cb:56:1e:15:41:1b:e4:f0:b7:df:75:99:c1:59:34:40:77:c5:
         99:09:db:ce:48:33:3b:ea:3b:df:86:ce:a7:95:0e:40:dd:e7:
         76:12:ea:6b:85:87:8f:39:7c:8c:68:ed:06:a5:65:96:d3:8f:
         83:87:81:d4:9d:f9:9c:78:da:1e:a8:cb:ca:4e:4c:f2:61:b6:
         54:95:53:35:0b:ae:5f:d9:b3:f7:22:2f:72:f8:06:72:42:ea:
         96:76:ed:b1:91:1d:7b:4d:e1:6b:51:12:19:c0:26:19:7c:2b:
         95:08:a8:a3:a8:96:2b:0a:64:00:0f:c0:79:f0:65:e5:16:0d:
         d0:a9:77:58:11:69:8c:33:cc:9a:e5:b0:c8:42:3a:1b:f0:a0:
         e5:79:ca:29:00:0a:a1:81:21:86:6d:e7:3f:7c:67:0a:a8:cf:
         9a:91:6b:22:fc:5e:a1:ed:98:b9:67:2e:bb:09:d5:f5:60:3f:
         a9:91:80:d4:71:ce:7e:9f:c1:b2:fd:c9:77:44:d5:38:38:3f:
         25:fd:ec:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:36 2024 by rpki-client on console-ams.rpki-client.org