Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/E3BhqoVYj4zbvfe2z2hXcReImdM.roa
File:                     E3BhqoVYj4zbvfe2z2hXcReImdM.roa (raw, json)
Hash identifier:          d1/+gl3htN4ySQAxv+QWuq3WwQjxnhiKLtdkbthyPHM=
Subject key identifier:   13:70:61:AA:85:58:8F:8C:DB:BD:F7:B6:CF:68:57:71:17:88:99:D3
Certificate issuer:       /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial:       018CC80135A9C3DA5227021D296A70E5C25A
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/E3BhqoVYj4zbvfe2z2hXcReImdM.roa
Signing time:             Tue 02 Jan 2024 02:29:31 +0000
ROA not before:           Tue 02 Jan 2024 02:29:31 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     57844
IP address blocks:        45.83.136.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Fri 16 Feb 2024 14:36:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c8:01:35:a9:c3:da:52:27:02:1d:29:6a:70:e5:c2:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
        Validity
            Not Before: Jan  2 02:29:31 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=137061aa85588f8cdbbdf7b6cf685771178899d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:47:d3:b0:e3:f2:5a:00:b1:a1:7a:c1:b6:17:
                    5e:d2:1f:51:f8:22:78:42:20:10:86:4d:70:b7:45:
                    63:7f:ce:ea:6e:47:d2:25:fa:81:21:54:ae:52:de:
                    68:d3:98:f4:b1:e2:ce:99:42:b2:f9:c9:0d:3d:74:
                    97:6a:04:5e:f7:e4:3e:d5:aa:3d:f2:af:6f:3e:65:
                    86:af:31:56:43:0a:dc:58:05:e2:fd:69:52:52:18:
                    dc:43:4a:f4:ca:34:53:93:65:04:e3:3f:06:cc:0d:
                    f5:94:63:f0:3a:8b:a6:fa:88:32:17:c3:80:4e:b5:
                    be:a2:92:61:f1:7d:67:b4:28:5e:08:8e:d9:fc:54:
                    ce:8d:ff:c4:5e:27:34:a4:89:b9:fb:89:f4:5d:da:
                    37:c1:5e:3e:bf:36:cf:79:c3:c3:f7:87:ed:a7:71:
                    2c:60:08:b4:01:42:67:ca:d6:d9:fa:4e:16:81:ae:
                    e0:82:65:76:81:54:d0:d6:5a:86:d9:2f:72:9d:30:
                    f6:15:f8:75:f5:5b:4a:6d:8f:d3:7d:14:49:c4:bb:
                    33:9d:98:2e:8a:02:76:68:15:5f:50:ce:ad:fd:4d:
                    e9:93:ba:71:e4:f3:e4:8d:c3:06:74:87:bc:1b:10:
                    4c:a1:87:bc:e1:77:1b:22:c7:e7:ce:7a:8f:60:f7:
                    a8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:70:61:AA:85:58:8F:8C:DB:BD:F7:B6:CF:68:57:71:17:88:99:D3
            X509v3 Authority Key Identifier:
                keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/E3BhqoVYj4zbvfe2z2hXcReImdM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.83.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:b2:c8:50:39:a7:f5:72:9e:60:b6:a8:34:4b:bf:e2:a0:fe:
         08:f0:7a:6b:58:49:cd:04:4b:d4:46:32:36:05:89:2e:27:61:
         ad:9f:38:a2:05:b3:9c:c3:a2:1f:a1:b6:3e:79:bf:af:07:58:
         3a:ff:06:23:a6:27:d8:a9:70:e2:1e:a1:d3:d4:e3:23:00:b6:
         cc:8c:ad:04:aa:dd:e5:0e:25:db:aa:67:21:a2:0d:be:06:bc:
         eb:63:52:cf:d6:6d:00:ba:84:22:70:bf:22:59:d2:5b:ec:c5:
         0f:82:ce:6b:ee:1e:69:5d:cb:35:49:bf:ea:e6:30:34:38:3f:
         14:3d:5b:c5:72:44:d8:4c:6f:95:08:bc:9c:9e:6c:ac:2d:9d:
         0c:ba:53:99:28:44:9c:e7:f6:2d:a9:67:c5:1c:0d:6c:68:8d:
         69:90:fb:eb:33:51:49:c6:dd:1a:1a:eb:a7:02:22:a4:ba:9f:
         c9:a5:22:5f:5a:1f:f1:b6:ec:fe:8f:bf:d4:0f:7c:70:6f:a7:
         9c:1f:40:fe:2b:0b:1b:61:21:1d:f5:77:b0:b9:c9:9a:97:47:
         7b:dd:cf:ba:68:44:e6:25:77:f0:36:ca:b1:fe:77:3d:b1:3a:
         8d:2a:bd:de:4b:04:94:f5:ec:9a:51:ab:db:03:dd:f3:9e:c1:
         fa:bf:2f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 16 17:41:22 2024 by rpki-client on console-fra.rpki-client.org