Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/8aD9wr9-tfxxplVuARpLqvxa1k0.roa
File:                     8aD9wr9-tfxxplVuARpLqvxa1k0.roa (raw, json)
Hash identifier:          iNh+yQoDV8g5a3tl6MhxE+9uHZAGg5FfX27S5FcgqnQ=
Subject key identifier:   F1:A0:FD:C2:BF:7E:B5:FC:71:A6:55:6E:01:1A:4B:AA:FC:5A:D6:4D
Certificate issuer:       /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial:       0186A852C16A127FD34C077356A9447FE6CC
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/8aD9wr9-tfxxplVuARpLqvxa1k0.roa
Signing time:             Fri 03 Mar 2023 16:34:01 +0000
ROA not before:           Fri 03 Mar 2023 16:34:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50809
IP address blocks:        45.158.46.0/24 maxlen: 24
                          77.83.73.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:a8:52:c1:6a:12:7f:d3:4c:07:73:56:a9:44:7f:e6:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
        Validity
            Not Before: Mar  3 16:34:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f1a0fdc2bf7eb5fc71a6556e011a4baafc5ad64d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d6:45:65:f8:21:5c:3f:4c:2e:01:8f:f1:d4:
                    a9:f9:b1:88:0b:21:43:19:07:33:69:d1:02:1d:53:
                    82:a2:1b:bb:34:34:9e:03:34:59:60:bd:5e:7b:98:
                    26:04:af:30:f0:d3:51:9f:aa:75:16:86:d6:9d:b7:
                    95:20:0e:f4:18:8b:63:1f:ad:fd:c3:1b:a1:ce:fe:
                    f9:e4:2d:21:8e:f6:8d:4b:a8:ec:9d:32:95:14:53:
                    3e:d1:53:2c:39:9b:38:46:39:ef:73:63:94:aa:b6:
                    13:4e:d2:0b:20:4e:bf:6b:b2:47:3b:e1:d7:2a:3c:
                    e7:41:aa:d6:11:a3:14:b7:1d:7b:eb:d6:5e:77:2a:
                    7c:02:9f:8e:78:b9:86:9f:b4:a9:a8:10:a0:72:6d:
                    a9:36:9c:47:f7:43:17:ef:ee:16:4c:89:de:0a:d3:
                    a4:b6:38:b8:bb:53:14:82:c5:bf:44:20:24:9a:b4:
                    6e:85:8f:64:82:e8:f1:f9:00:56:1b:cf:ae:64:6a:
                    fc:e9:b8:64:a3:1d:66:50:f2:93:95:7e:38:2d:be:
                    18:db:d7:c1:ba:31:2b:c8:de:10:b9:9f:9f:81:6b:
                    cf:bf:8d:19:97:df:d4:ce:c6:19:4c:18:d5:05:a6:
                    a0:b7:a8:e5:15:97:07:dc:4b:51:d3:5d:e6:d3:6a:
                    86:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A0:FD:C2:BF:7E:B5:FC:71:A6:55:6E:01:1A:4B:AA:FC:5A:D6:4D
            X509v3 Authority Key Identifier:
                keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/8aD9wr9-tfxxplVuARpLqvxa1k0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.158.46.0/24
                  77.83.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:ca:f5:c1:78:94:ca:b2:29:0d:1b:10:b0:6b:de:63:a4:17:
         1f:35:fd:4e:85:cb:31:7c:5e:65:69:e1:da:40:20:22:19:14:
         05:77:1e:95:bc:ce:94:9e:6f:97:30:34:73:49:96:4c:09:4b:
         3f:48:b8:96:a6:84:14:20:54:70:75:b1:eb:3c:9b:86:5a:2a:
         85:cd:4c:59:ff:17:63:52:0d:c9:b9:63:e7:03:6b:8b:af:4d:
         1f:28:7d:a0:e2:0c:c5:c5:3f:2d:2b:ed:73:cd:10:a7:3a:6c:
         06:65:df:50:bf:6d:51:49:11:a0:b2:1c:10:0a:98:f1:be:e3:
         f2:8e:2d:f5:f6:2d:e0:09:a4:56:5a:ad:ba:f0:46:1b:49:96:
         80:4c:4a:a5:d2:de:8f:47:56:11:54:9f:87:28:7a:3d:51:c1:
         77:12:92:f1:77:d6:d6:b0:ca:e0:7a:4d:e7:78:84:88:5f:02:
         b2:2e:9b:4d:16:c4:56:5c:5d:b9:f0:81:e5:33:c5:56:7b:2d:
         9a:18:8b:ef:1e:9e:2a:43:0e:3f:c4:94:1a:e0:19:a1:2b:26:
         0a:91:88:f5:c1:8c:c9:73:d9:51:ef:b2:d1:30:1b:71:55:8a:
         d8:e2:23:09:87:67:23:2f:32:30:d8:51:29:f6:98:62:8e:ac:
         2e:f7:07:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:38 2024 by rpki-client on console-ams.rpki-client.org