Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/_uYJ_EvmlvET_RXmofeOwHfGCis.roa
File:                     _uYJ_EvmlvET_RXmofeOwHfGCis.roa (raw, json)
Hash identifier:          RmUFsGgiqNKEdvHQvwi4v9XXuC3Z/7buJabbXqpRmdg=
Subject key identifier:   FE:E6:09:FC:4B:E6:96:F1:13:FD:15:E6:A1:F7:8E:C0:77:C6:0A:2B
Certificate issuer:       /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial:       0186DC11B85A8EB5628183C3EA9BD3037541
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/_uYJ_EvmlvET_RXmofeOwHfGCis.roa
Signing time:             Mon 13 Mar 2023 17:43:14 +0000
ROA not before:           Mon 13 Mar 2023 17:43:14 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207560
IP address blocks:        45.135.167.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:dc:11:b8:5a:8e:b5:62:81:83:c3:ea:9b:d3:03:75:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
        Validity
            Not Before: Mar 13 17:43:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fee609fc4be696f113fd15e6a1f78ec077c60a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:17:f5:9d:71:da:94:41:c1:1e:33:5d:d4:a6:
                    6b:a3:fa:6c:cf:57:84:d9:5f:df:b1:fb:79:85:b0:
                    5c:13:8e:12:1c:54:ef:05:0b:e2:d2:bb:a9:58:8d:
                    54:0a:57:2e:51:07:7f:5b:8f:12:17:fc:23:0a:9a:
                    c2:48:fa:f0:5b:b1:78:8c:0a:3e:dd:df:2a:02:1f:
                    69:72:c5:b8:d2:d5:81:6d:88:da:17:26:e1:d2:af:
                    87:30:a6:11:96:34:ad:cd:0c:a5:00:b7:a8:8e:40:
                    2b:03:7e:85:30:b3:d2:69:66:0c:76:8b:46:85:54:
                    48:74:24:c0:f5:4b:da:cc:b6:24:66:d0:e8:c5:30:
                    5c:56:78:e1:48:3a:c4:db:0c:26:b0:cd:85:2c:19:
                    97:cf:55:a2:f4:fe:8a:75:ef:9f:a0:3c:e1:47:1e:
                    22:c7:71:cf:fb:6b:c7:cf:56:61:c0:2b:c8:bd:9a:
                    26:45:38:10:c4:e2:73:d8:85:d0:b3:fe:d3:9c:13:
                    a9:42:40:79:e8:bd:23:78:6e:e0:52:a8:d2:60:5b:
                    31:26:f3:3a:8e:72:a5:7c:73:8b:a4:40:e3:1e:32:
                    09:32:66:06:11:72:52:1e:52:90:a1:f1:8a:0d:e5:
                    60:82:b7:01:e1:7c:ec:69:b8:b4:93:bc:85:6d:e5:
                    2b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E6:09:FC:4B:E6:96:F1:13:FD:15:E6:A1:F7:8E:C0:77:C6:0A:2B
            X509v3 Authority Key Identifier:
                keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/_uYJ_EvmlvET_RXmofeOwHfGCis.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:92:ab:e5:ae:8f:95:38:4b:91:57:b3:c5:9b:96:60:43:2a:
         e4:5a:9b:1e:f9:df:7b:a7:5f:4f:09:32:7f:d0:2e:dc:5c:0b:
         da:aa:f1:dc:be:3a:7c:bc:27:e6:71:31:1d:b0:95:29:6e:cc:
         61:07:f7:38:a2:ed:b6:bd:08:f7:4a:f1:e4:c8:80:c5:26:bc:
         f0:8b:a6:c3:b5:90:ad:73:3f:f7:e5:0b:18:fc:ec:a8:25:12:
         69:aa:a8:86:1d:22:c7:f7:50:3d:85:51:cd:5b:b9:00:99:35:
         d0:46:ff:30:74:20:71:d4:a2:7e:d4:54:5c:4a:53:d5:fb:93:
         b5:1d:70:a8:ba:af:b9:d3:64:c8:44:b6:63:5f:7c:2e:ab:45:
         9c:bc:bb:66:4e:e1:4e:b0:47:b9:a1:74:77:ac:23:f3:d6:64:
         74:7f:2e:43:93:99:7d:c9:61:f5:32:d0:24:7a:64:3b:c2:32:
         b2:d0:c2:b4:85:fd:5c:79:9a:b3:58:07:bc:6e:1e:a1:16:15:
         ba:b2:ee:95:01:4d:4b:ab:cb:af:37:31:1a:42:78:7a:c9:4b:
         e1:4e:fd:47:a1:e2:12:0c:82:15:a3:d5:ba:79:a5:c1:8a:7c:
         39:24:d4:28:89:4e:ee:59:3e:a7:c4:0e:18:a2:7a:4e:29:df:
         84:8e:c6:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYbcEbhajrVigYPD6pvTA3VBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjMwMzEzMTc0MzE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWU2MDlmYzRiZTY5NmYxMTNmZDE1ZTZhMWY3OGVjMDc3YzYwYTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRf1nXHalEHBHjNd1KZro/psz1eE
2V/fsft5hbBcE44SHFTvBQvi0rupWI1UClcuUQd/W48SF/wjCprCSPrwW7F4jAo+
3d8qAh9pcsW40tWBbYjaFybh0q+HMKYRljStzQylALeojkArA36FMLPSaWYMdotG
hVRIdCTA9UvazLYkZtDoxTBcVnjhSDrE2wwmsM2FLBmXz1Wi9P6Kde+foDzhRx4i
x3HP+2vHz1ZhwCvIvZomRTgQxOJz2IXQs/7TnBOpQkB56L0jeG7gUqjSYFsxJvM6
jnKlfHOLpEDjHjIJMmYGEXJSHlKQofGKDeVggrcB4Xzsabi0k7yFbeUrBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP7mCfxL5pbxE/0V5qH3jsB3xgorMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvX3VZSl9Fdm1sdkVUX1JYbW9mZU93SGZHQ2lzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYenMA0G
CSqGSIb3DQEBCwUAA4IBAQAwkqvlro+VOEuRV7PFm5ZgQyrkWpse+d97p19PCTJ/
0C7cXAvaqvHcvjp8vCfmcTEdsJUpbsxhB/c4ou22vQj3SvHkyIDFJrzwi6bDtZCt
cz/35QsY/OyoJRJpqqiGHSLH91A9hVHNW7kAmTXQRv8wdCBx1KJ+1FRcSlPV+5O1
HXCouq+502TIRLZjX3wuq0WcvLtmTuFOsEe5oXR3rCPz1mR0fy5Dk5l9yWH1MtAk
emQ7wjKy0MK0hf1ceZqzWAe8bh6hFhW6su6VAU1Lq8uvNzEaQnh6yUvhTv1HoeIS
DIIVo9W6eaXBinw5JNQoiU7uWT6nxA4YonpOKd+Ejsa3
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:38 2024 by rpki-client on console-ams.rpki-client.org