Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/Zh98SUyyUDdXmB5taUpV_1MsdnQ.roa
File:                     Zh98SUyyUDdXmB5taUpV_1MsdnQ.roa (raw, json)
Hash identifier:          q3VrtEBX/netNSV+DztWIUlBgUP4cck2D0FEyB1W47U=
Subject key identifier:   66:1F:7C:49:4C:B2:50:37:57:98:1E:6D:69:4A:55:FF:53:2C:76:74
Certificate issuer:       /CN=83286fa6da7d252e7828f84923f55919142b007f
Certificate serial:       01856F5478DA49C92199DB4EA4EDBD278912
Authority key identifier: 83:28:6F:A6:DA:7D:25:2E:78:28:F8:49:23:F5:59:19:14:2B:00:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gyhvptp9JS54KPhJI_VZGRQrAH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/Zh98SUyyUDdXmB5taUpV_1MsdnQ.roa
Signing time:             Sun 01 Jan 2023 21:54:44 +0000
ROA not before:           Sun 01 Jan 2023 21:54:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207871
IP address blocks:        45.151.166.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:30:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:54:78:da:49:c9:21:99:db:4e:a4:ed:bd:27:89:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83286fa6da7d252e7828f84923f55919142b007f
        Validity
            Not Before: Jan  1 21:54:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=661f7c494cb2503757981e6d694a55ff532c7674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:53:9d:f0:99:4d:96:2d:6c:6e:76:18:9c:e9:
                    18:7d:09:c3:0c:ae:3e:0b:8e:55:70:83:ca:f1:52:
                    7c:fa:f6:e0:d3:7d:35:2f:22:02:e4:d7:13:69:2c:
                    2a:27:b4:a8:4a:0b:7f:b5:70:3d:bb:ae:3b:16:0e:
                    7e:8e:7f:2c:99:7e:58:14:28:de:e9:4f:ae:02:4c:
                    ff:76:dd:b1:3c:60:a9:e4:c6:5c:d7:59:43:6c:c6:
                    3d:52:d4:f8:83:eb:80:86:cd:2e:05:ee:44:76:65:
                    a3:9b:d6:78:c3:68:0e:c0:f4:75:ac:71:ba:0e:5d:
                    04:3a:58:f8:2f:58:21:82:23:d7:16:bb:66:9a:b5:
                    bd:74:38:88:22:a7:56:ab:59:bb:53:54:bd:3c:b8:
                    90:af:77:96:d0:34:2f:c0:6b:1a:5a:e2:aa:35:75:
                    92:50:78:7b:f7:2f:dd:a0:6a:91:96:56:8b:c4:55:
                    c6:66:fe:25:4f:54:00:87:f2:c0:48:57:f3:32:e0:
                    ab:3a:bb:fa:96:3f:5e:e9:a2:01:71:8c:cb:21:f2:
                    8b:48:d5:1d:53:f0:f9:98:a7:4f:77:38:59:8d:f7:
                    bd:ee:39:ab:be:e6:e1:2a:f2:90:4e:47:4f:c8:31:
                    05:ea:b1:6f:af:70:2f:3b:a1:6b:f6:1e:34:f5:ca:
                    67:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:1F:7C:49:4C:B2:50:37:57:98:1E:6D:69:4A:55:FF:53:2C:76:74
            X509v3 Authority Key Identifier:
                keyid:83:28:6F:A6:DA:7D:25:2E:78:28:F8:49:23:F5:59:19:14:2B:00:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gyhvptp9JS54KPhJI_VZGRQrAH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/Zh98SUyyUDdXmB5taUpV_1MsdnQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ec583d-1aba-4798-8817-d6c9c6e86923/1/gyhvptp9JS54KPhJI_VZGRQrAH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.151.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:28:ac:e0:92:28:3d:03:55:b6:d7:73:7c:48:1e:8c:c8:f0:
         57:af:60:86:a6:d0:e0:49:61:dc:f7:3b:90:ae:89:73:de:0a:
         35:b1:92:35:63:3d:34:1d:1a:95:82:6b:f4:c8:7d:a5:06:f2:
         5b:3f:b4:61:e2:c3:d1:0a:07:57:ac:b8:85:be:41:3e:49:04:
         67:90:b7:ee:b5:4a:b5:a4:ac:13:84:70:c7:8b:e3:9a:7c:35:
         72:fd:9b:27:1a:82:86:0d:b3:14:96:a2:ae:98:1f:50:3c:61:
         0f:04:3b:bd:1b:f6:59:28:ff:5f:33:20:00:02:18:ae:7d:9d:
         94:0a:e5:f7:8a:10:08:77:8a:c6:44:43:90:e2:56:b2:58:71:
         0d:b8:ad:cb:97:32:24:b1:af:54:d5:17:fa:7b:fb:4f:58:92:
         29:b4:87:ac:d7:4f:ce:92:01:26:e1:9d:67:a1:cf:fd:51:29:
         0b:4e:1a:e3:65:2d:e2:28:79:8e:59:7d:b9:ca:2a:df:69:d1:
         22:3e:77:71:35:7a:10:f6:8d:5b:3d:f5:43:67:93:d4:a8:de:
         30:39:d0:1d:e5:8a:0e:12:a1:c1:31:ba:bb:9e:49:0e:e4:c2:
         f4:e2:f3:2b:70:4a:50:3e:36:9f:c3:10:75:d4:af:2e:3b:f6:
         85:70:5f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:56 2024 by rpki-client on console-fra.rpki-client.org