Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Zvuti41vTKcG8reavxKf-kGFIbk.roa
File:                     Zvuti41vTKcG8reavxKf-kGFIbk.roa (raw, json)
Hash identifier:          ZcmfUpWFCnu+eGkI1pcE0X+Hjt/aR405WnG33LzAXak=
Subject key identifier:   66:FB:AD:8B:8D:6F:4C:A7:06:F2:B7:9A:BF:12:9F:FA:41:85:21:B9
Certificate issuer:       /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial:       018739423AB9A120C8E62EA072E5BE114077
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Zvuti41vTKcG8reavxKf-kGFIbk.roa
Signing time:             Fri 31 Mar 2023 20:00:54 +0000
ROA not before:           Fri 31 Mar 2023 20:00:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48525
IP address blocks:        45.92.173.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:39:42:3a:b9:a1:20:c8:e6:2e:a0:72:e5:be:11:40:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
        Validity
            Not Before: Mar 31 20:00:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=66fbad8b8d6f4ca706f2b79abf129ffa418521b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d8:b4:a5:c5:d4:43:2a:fc:70:de:cb:5e:22:
                    cb:1b:97:4d:25:d2:2d:e2:83:02:48:18:0c:5e:19:
                    1f:87:e3:71:3e:ce:f6:2e:0a:d8:72:25:b2:8f:28:
                    91:9d:be:2f:52:67:12:5c:4b:91:4c:a7:c8:1a:47:
                    c2:b1:00:35:1e:e1:bf:7f:16:57:4e:b5:8f:94:fd:
                    fd:5b:53:36:4a:c3:06:37:64:b0:50:8d:15:0f:61:
                    bf:63:1a:6e:b7:24:72:6d:5e:6b:3d:b9:01:d3:3a:
                    fe:59:13:ac:d5:24:81:fa:26:41:1d:48:92:97:55:
                    27:6c:58:91:f4:d7:49:81:7e:d9:2f:9d:94:27:37:
                    ab:ed:2e:07:98:58:07:37:55:51:7a:46:1d:19:fa:
                    f7:c2:50:8a:0d:7d:f0:1c:e6:09:15:95:8d:1e:77:
                    1b:2d:67:ac:53:60:4c:4d:76:91:c6:08:65:98:9a:
                    6d:21:44:53:df:73:b1:74:87:f3:e0:1b:49:ad:c1:
                    3d:2b:00:50:15:ed:cc:81:1a:58:bc:a7:82:49:cc:
                    0a:e9:71:12:2a:38:f7:0b:9b:88:31:26:31:47:e8:
                    c0:da:62:f6:4a:49:fd:27:8d:5b:94:dd:3d:aa:c2:
                    63:62:b5:c2:c4:e2:6d:af:3c:39:b9:3b:65:27:16:
                    7f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:FB:AD:8B:8D:6F:4C:A7:06:F2:B7:9A:BF:12:9F:FA:41:85:21:B9
            X509v3 Authority Key Identifier:
                keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Zvuti41vTKcG8reavxKf-kGFIbk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.92.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:ab:35:49:b2:a1:81:bc:df:17:96:53:53:22:80:ab:00:c9:
         0e:dd:dc:f3:b2:99:7d:21:9d:e6:0c:dd:a5:5d:e1:48:01:e2:
         c4:1f:87:42:26:98:4b:2d:c9:31:40:b7:d3:2f:60:6f:83:5f:
         ba:fc:ff:96:b5:00:41:91:36:a5:03:3e:7e:54:72:ee:26:2b:
         17:a9:48:11:ba:3c:a5:46:d5:85:35:e0:1f:dc:99:fa:71:e0:
         8a:f4:64:d1:a6:35:37:09:c5:04:44:e9:ec:57:b9:0a:cd:73:
         06:8b:fb:56:38:12:db:27:1b:a8:c7:16:7e:4a:7c:6e:58:47:
         3d:18:88:0c:ce:02:69:3b:29:45:d7:9e:74:d1:51:ee:b7:7a:
         39:af:a0:85:3e:ad:28:e9:5c:96:39:26:55:f4:b8:bc:24:1d:
         9d:59:7c:57:cb:33:92:94:3b:29:70:38:5b:78:96:04:aa:ca:
         4d:ed:2e:ba:46:23:77:a7:cf:b7:c6:5a:05:4f:b7:c9:4d:28:
         34:65:d9:6a:4a:97:52:d2:46:09:2f:2b:3c:f9:4d:61:97:ca:
         a6:36:a5:26:33:05:27:26:f7:ad:73:ed:86:9b:44:00:3e:e2:
         cc:f7:1e:05:09:43:ad:bf:5c:b2:7e:13:2c:7c:81:8c:45:83:
         a4:6f:a4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:38 2024 by rpki-client on console-ams.rpki-client.org