Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/lwhgaIuQ8Jmm4hnU_xe6ufnYFHU.roa
File:                     lwhgaIuQ8Jmm4hnU_xe6ufnYFHU.roa (raw, json)
Hash identifier:          URrf3cSHYQGhTJVbcfHczDVbVgOBgfy/XQG1dMsCy6k=
Subject key identifier:   97:08:60:68:8B:90:F0:99:A6:E2:19:D4:FF:17:BA:B9:F9:D8:14:75
Certificate issuer:       /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial:       0190EF033ABAD0DCC6F8BFAFF1811D5DDB18
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/lwhgaIuQ8Jmm4hnU_xe6ufnYFHU.roa
Signing time:             Fri 26 Jul 2024 12:28:04 +0000
ROA not before:           Fri 26 Jul 2024 12:28:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     152700
IP address blocks:        45.149.6.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 26 Oct 2024 11:39:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:ef:03:3a:ba:d0:dc:c6:f8:bf:af:f1:81:1d:5d:db:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
        Validity
            Not Before: Jul 26 12:28:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=970860688b90f099a6e219d4ff17bab9f9d81475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9c:d6:81:40:5c:4e:8c:35:51:55:9a:57:52:
                    71:5c:a2:e7:e7:96:ab:30:62:56:e8:c9:cf:35:24:
                    d8:ae:f7:3f:10:b2:b3:10:70:74:0a:9d:4b:64:bd:
                    0a:65:5a:00:22:98:b4:38:23:53:e0:41:ca:d4:cd:
                    24:ad:14:15:46:ce:13:fe:17:09:9f:73:a9:f3:1f:
                    7b:d9:b9:84:20:93:34:0e:99:76:62:1c:91:4c:be:
                    43:61:c3:a4:29:a8:54:f9:b6:5d:41:23:ae:52:47:
                    e5:68:f4:f8:8e:7b:bd:71:8b:e9:09:98:7f:c6:74:
                    1a:31:36:e1:94:17:27:a1:3f:dd:bb:20:e5:b4:c3:
                    84:28:7e:94:23:ef:c6:72:6a:93:d9:78:57:f6:67:
                    b9:34:c6:20:90:c7:fa:08:c5:83:d6:12:e9:e5:98:
                    53:1f:99:a1:3b:a3:15:e4:4e:b7:96:bc:d6:40:11:
                    3b:f2:d8:93:e4:d8:25:98:7b:32:ec:75:d7:7d:c6:
                    3e:46:25:4a:0d:6f:d6:dd:e8:5a:f9:a2:c1:c9:27:
                    61:c1:a4:91:cb:12:e4:e8:59:a7:50:79:6d:0a:8c:
                    9f:a0:1e:15:e9:de:5c:1d:91:a1:44:1c:09:23:83:
                    a0:eb:0a:8b:00:c8:db:d4:b3:bf:31:83:a7:f5:50:
                    4f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:08:60:68:8B:90:F0:99:A6:E2:19:D4:FF:17:BA:B9:F9:D8:14:75
            X509v3 Authority Key Identifier:
                keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/lwhgaIuQ8Jmm4hnU_xe6ufnYFHU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.149.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:41:77:7c:8d:a9:a5:ee:d5:a8:cb:b0:46:0d:45:90:c5:8c:
         b4:fb:6e:c9:96:ab:db:42:2e:69:bb:f5:c9:15:63:0b:c7:26:
         70:cb:b3:f0:55:c2:07:8e:58:c8:1c:c0:2d:b6:93:27:0c:11:
         00:c3:a0:55:32:52:2a:ed:a3:7b:76:3a:8d:37:ff:6c:a7:64:
         12:78:84:4e:7d:20:e6:b7:62:3c:85:f1:a5:41:3e:64:f1:90:
         4d:79:8e:4b:b8:fb:74:d4:ad:e9:0a:54:34:48:16:cc:94:95:
         e6:f5:ca:fc:42:c5:91:9e:77:74:04:45:ba:b6:92:17:f2:b0:
         b7:3f:a4:64:e2:0c:24:b1:3b:d8:28:70:0c:17:6c:ad:bb:a2:
         bf:73:42:b3:64:c7:52:e1:8c:c2:7d:db:a8:8b:fd:45:1f:08:
         fc:51:e9:01:c4:1a:38:2c:4c:2f:20:f2:c0:33:1c:ed:9b:83:
         da:70:87:02:aa:83:27:d6:a7:2e:8c:f2:a3:eb:d3:5b:9f:3e:
         5b:ce:0f:ed:52:c8:05:a3:03:30:06:8d:cf:38:3c:d2:6a:a5:
         d2:fc:22:3a:52:c1:09:8c:be:f8:64:7a:b9:6a:a8:32:05:7f:
         a1:29:41:a8:c7:43:f2:9a:58:4b:6a:54:de:c2:6b:8e:99:ba:
         86:97:7e:6e
-----BEGIN CERTIFICATE-----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Generated at Sat Oct 26 13:24:30 2024 by rpki-client on console-fra.rpki-client.org