Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/CvuWxuEi55cPsnJ_xjejxW6bwTw.roa
File:                     CvuWxuEi55cPsnJ_xjejxW6bwTw.roa (raw, json)
Hash identifier:          J13YuRuYT4hMMJ9IQOvogpPOFnuyRHkWXNywIl2R33U=
Subject key identifier:   0A:FB:96:C6:E1:22:E7:97:0F:B2:72:7F:C6:37:A3:C5:6E:9B:C1:3C
Certificate issuer:       /CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
Certificate serial:       01875CF96C0758E91A2EE4A45729DA0C8B45
Authority key identifier: 4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/CvuWxuEi55cPsnJ_xjejxW6bwTw.roa
Signing time:             Fri 07 Apr 2023 18:27:42 +0000
ROA not before:           Fri 07 Apr 2023 18:27:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211680
IP address blocks:        45.156.129.0/24 maxlen: 24
                          45.156.128.0/24 maxlen: 24
                          185.180.140.0/24 maxlen: 24
                          185.180.143.0/24 maxlen: 24
                          2a10:3c0:1::/48 maxlen: 48

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 10:30:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:5c:f9:6c:07:58:e9:1a:2e:e4:a4:57:29:da:0c:8b:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
        Validity
            Not Before: Apr  7 18:27:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0afb96c6e122e7970fb2727fc637a3c56e9bc13c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e1:43:02:4f:c6:32:2f:7b:bc:65:ab:2a:b3:
                    af:74:02:0c:56:32:db:a5:b4:ea:e9:f3:8b:71:eb:
                    59:62:23:ee:f8:01:ef:2d:ca:20:d9:5d:7a:79:7f:
                    29:bc:a9:d1:20:35:e6:30:f1:d0:9f:e8:13:f2:ea:
                    94:fe:79:8a:cf:98:73:0a:af:1d:76:ed:98:8d:1f:
                    4c:ee:9c:0b:e6:18:a2:c3:93:f7:90:1a:4b:a9:2f:
                    13:95:09:fc:5f:80:8a:28:43:72:06:9b:71:07:8a:
                    68:ec:02:bb:6c:b0:b6:5f:73:4a:ec:4b:38:7c:4e:
                    24:2f:07:28:5f:8a:3d:5b:85:97:63:e7:a9:be:eb:
                    96:91:03:34:ec:37:b7:7a:0d:13:5d:4e:b3:55:b1:
                    44:2b:ae:7d:23:d8:5e:a2:b5:20:7a:0d:a4:f5:9a:
                    77:8d:54:4c:5b:2d:7f:b3:4d:c9:33:c7:74:fe:6f:
                    1d:0b:b0:23:ac:e4:c0:e9:33:1c:34:99:3f:25:41:
                    f9:ee:6f:28:d7:c9:29:05:d0:0e:71:0d:bb:49:a3:
                    79:53:cd:fd:0c:a7:da:e6:eb:14:7b:d2:fa:e2:12:
                    b5:1d:44:ae:8e:9f:88:e2:cd:27:d8:c0:a5:40:a0:
                    7a:82:b5:bc:6c:2c:d7:10:f0:14:a0:70:38:81:d0:
                    11:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:FB:96:C6:E1:22:E7:97:0F:B2:72:7F:C6:37:A3:C5:6E:9B:C1:3C
            X509v3 Authority Key Identifier:
                keyid:4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/CvuWxuEi55cPsnJ_xjejxW6bwTw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.156.128.0/23
                  185.180.140.0/24
                  185.180.143.0/24
                IPv6:
                  2a10:3c0:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:ff:fc:06:b9:cd:18:69:d6:fe:12:c5:61:09:f8:fe:56:02:
         07:f5:f4:a3:34:2a:32:13:c1:cd:c3:15:dc:82:6f:db:0e:7a:
         31:27:5a:0f:23:a6:7d:88:6b:a3:c8:75:ff:62:f6:71:75:a1:
         02:b5:7d:9c:7f:6f:15:5e:52:38:61:f5:80:fe:36:0a:fb:a2:
         2a:ac:62:11:b5:c0:90:85:72:76:96:db:25:8b:81:ce:f6:ac:
         1c:7b:49:c6:24:c6:70:f8:9c:b5:d4:cb:e8:f1:14:17:f1:87:
         0c:e1:10:f0:d6:77:28:29:29:47:c1:4d:95:65:fc:e6:7d:1f:
         0a:b0:96:b5:a1:7b:06:be:19:11:ec:b7:db:8c:89:68:94:a4:
         38:79:e9:16:4f:a7:d4:25:0c:98:1c:e0:fb:71:04:f9:64:b9:
         89:25:df:a8:78:23:9f:24:26:f6:00:7a:8e:6c:9c:87:8b:f0:
         bf:7e:fb:d7:ec:1d:e2:de:3e:bf:ad:4f:73:55:f2:3c:5d:e4:
         2d:e2:5a:af:55:42:56:60:a7:4c:2e:d7:0b:f6:2d:43:af:7c:
         6d:38:16:24:4e:d8:ce:24:c6:ed:55:07:0b:16:21:ad:bd:56:
         ac:68:6e:6a:7c:e2:7a:7e:6c:33:af:4d:04:9d:d0:28:1d:41:
         b3:ff:35:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:39 2024 by rpki-client on console-fra.rpki-client.org