Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/RqvmKl_KP2243tU2sY7sGKc1458.roa
File:                     RqvmKl_KP2243tU2sY7sGKc1458.roa (raw, json)
Hash identifier:          p4XE6cFjpHc2133qP6CNg+Jfx/7tHcETQxyN4EYdDQE=
Subject key identifier:   46:AB:E6:2A:5F:CA:3F:6D:B8:DE:D5:36:B1:8E:EC:18:A7:35:E3:9F
Certificate issuer:       /CN=bfe57cc3db1840470c73a09605d187d7bd9595cb
Certificate serial:       018A77041AAC422B20FB1888A42509685368
Authority key identifier: BF:E5:7C:C3:DB:18:40:47:0C:73:A0:96:05:D1:87:D7:BD:95:95:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/RqvmKl_KP2243tU2sY7sGKc1458.roa
Signing time:             Fri 08 Sep 2023 22:57:52 +0000
ROA not before:           Fri 08 Sep 2023 22:57:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8075
IP address blocks:        185.245.124.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Sat 09 Sep 2023 10:52:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:77:04:1a:ac:42:2b:20:fb:18:88:a4:25:09:68:53:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfe57cc3db1840470c73a09605d187d7bd9595cb
        Validity
            Not Before: Sep  8 22:57:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=46abe62a5fca3f6db8ded536b18eec18a735e39f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:b2:c3:1c:e7:b2:17:bd:00:b8:68:7c:88:b4:
                    12:e7:b3:4b:d7:20:5e:ac:96:d9:70:e7:a1:63:e8:
                    d9:94:a4:a6:36:3a:1c:c4:36:ce:78:e7:fc:0a:3c:
                    de:16:b2:5d:13:3c:2a:4e:bb:60:9a:93:1b:91:93:
                    43:6e:61:5c:a6:2e:59:dd:bb:b7:1f:e6:1d:8b:c3:
                    2b:65:bc:c6:51:53:19:fd:f0:69:7a:e9:a8:93:55:
                    de:fd:cc:59:9c:e0:76:be:26:75:43:4e:1f:8e:a0:
                    6a:9c:b7:ff:2f:4d:15:fb:27:83:ac:fa:3d:f7:44:
                    0c:43:41:4e:ca:8d:1b:52:a1:ad:85:b0:00:9c:0c:
                    06:8b:12:cb:3b:72:42:4e:1d:a5:fd:4e:6a:ec:3d:
                    72:0b:7b:b4:ee:85:ba:77:b8:be:1c:0f:2b:4a:9a:
                    27:ce:78:8a:a9:93:6f:e8:0e:71:3a:0a:3b:7c:6c:
                    c4:1f:01:94:84:97:ae:23:f5:ed:10:7b:87:4c:2d:
                    99:ae:b0:f8:75:18:1c:4e:6d:8e:6a:e0:5a:d1:71:
                    03:dc:b0:91:24:c5:26:c5:54:9e:4c:a2:0e:b6:8a:
                    60:cc:ac:b3:e5:cf:ad:5c:19:cd:a0:61:ff:7f:08:
                    f7:46:eb:42:ee:eb:7c:84:4d:69:21:b4:4f:72:7a:
                    2d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:AB:E6:2A:5F:CA:3F:6D:B8:DE:D5:36:B1:8E:EC:18:A7:35:E3:9F
            X509v3 Authority Key Identifier:
                keyid:BF:E5:7C:C3:DB:18:40:47:0C:73:A0:96:05:D1:87:D7:BD:95:95:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/RqvmKl_KP2243tU2sY7sGKc1458.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.245.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:42:44:41:60:eb:07:b4:75:6c:d8:87:36:52:98:e1:96:e3:
         5b:b6:98:ac:11:53:4e:7a:68:1a:72:81:a9:a2:f2:b4:eb:cf:
         da:a6:b9:b7:96:85:bb:05:25:03:34:39:0e:73:56:d2:a3:f6:
         2f:db:7d:fb:dc:27:51:4f:6b:91:02:d2:d8:f8:2c:a4:0a:c2:
         44:86:5f:17:d6:3e:fb:19:86:22:09:75:54:7f:4f:77:18:f4:
         8e:a8:d0:c0:ab:e4:4a:6e:78:87:f3:ae:61:2d:86:ae:05:9c:
         77:cf:68:f3:85:7e:3a:d8:6e:f3:19:80:ef:b8:d6:a2:63:8a:
         b8:12:c0:02:20:fc:81:a2:79:67:6a:27:76:2c:de:ce:a4:fc:
         db:a2:db:31:73:bf:8d:9f:28:3b:78:04:b1:fa:6a:30:6f:8f:
         44:fd:4d:a8:ed:e5:d5:57:2c:32:c6:aa:de:90:07:64:b2:9e:
         f2:f6:bc:39:6d:89:cc:90:58:b4:be:5d:82:9c:ca:8a:de:20:
         1f:da:72:4d:7d:35:b2:a4:7a:e0:9a:80:71:cf:16:3a:f1:d8:
         64:0b:f1:33:83:2d:b0:f8:09:75:4b:91:7c:bc:a9:74:1c:36:
         83:0e:77:43:c3:f1:3a:b8:c8:dd:a9:79:e7:44:25:5d:cf:40:
         ff:92:82:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYp3BBqsQisg+xiIpCUJaFNoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZTU3Y2MzZGIxODQwNDcwYzczYTA5NjA1ZDE4N2Q3YmQ5
NTk1Y2IwHhcNMjMwOTA4MjI1NzUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmFiZTYyYTVmY2EzZjZkYjhkZWQ1MzZiMThlZWMxOGE3MzVlMzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8rLDHOeyF70AuGh8iLQS57NL1yBe
rJbZcOehY+jZlKSmNjocxDbOeOf8CjzeFrJdEzwqTrtgmpMbkZNDbmFcpi5Z3bu3
H+Ydi8MrZbzGUVMZ/fBpeumok1Xe/cxZnOB2viZ1Q04fjqBqnLf/L00V+yeDrPo9
90QMQ0FOyo0bUqGthbAAnAwGixLLO3JCTh2l/U5q7D1yC3u07oW6d7i+HA8rSpon
zniKqZNv6A5xOgo7fGzEHwGUhJeuI/XtEHuHTC2ZrrD4dRgcTm2OauBa0XED3LCR
JMUmxVSeTKIOtopgzKyz5c+tXBnNoGH/fwj3RutC7ut8hE1pIbRPcnotzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEar5ipfyj9tuN7VNrGO7BinNeOfMB8GA1UdIwQY
MBaAFL/lfMPbGEBHDHOglgXRh9e9lZXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdi1WOHc5c1lRRWNNYzZDV0JkR0gxNzJWbGNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xN2I3OTctMmU2Ni00MGRmLTg2OGEt
MGEyNzVhNjc2M2NlLzEvUnF2bUtsX0tQMjI0M3RVMnNZN3NHS2MxNDU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8xN2I3OTctMmU2Ni00MGRmLTg2OGEtMGEyNzVhNjc2M2Nl
LzEvdi1WOHc5c1lRRWNNYzZDV0JkR0gxNzJWbGNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufV8MA0G
CSqGSIb3DQEBCwUAA4IBAQBpQkRBYOsHtHVs2Ic2UpjhluNbtpisEVNOemgacoGp
ovK068/aprm3loW7BSUDNDkOc1bSo/Yv23373CdRT2uRAtLY+CykCsJEhl8X1j77
GYYiCXVUf093GPSOqNDAq+RKbniH865hLYauBZx3z2jzhX462G7zGYDvuNaiY4q4
EsACIPyBonlnaid2LN7OpPzbotsxc7+Nnyg7eASx+mowb49E/U2o7eXVVywyxqre
kAdksp7y9rw5bYnMkFi0vl2CnMqK3iAf2nJNfTWypHrgmoBxzxY68dhkC/Ezgy2w
+Al1S5F8vKl0HDaDDndDw/E6uMjdqXnnRCVdz0D/koIg
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:42 2024 by rpki-client on console-ams.rpki-client.org