Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/q6OMLjeuwWdksEu_J3gwZXKgSyM.roa
File:                     q6OMLjeuwWdksEu_J3gwZXKgSyM.roa (raw, json)
Hash identifier:          IKEQps44F52XOilK7pEIUsEex9xwOIyPqXdS12gS7cY=
Subject key identifier:   AB:A3:8C:2E:37:AE:C1:67:64:B0:4B:BF:27:78:30:65:72:A0:4B:23
Certificate issuer:       /CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Certificate serial:       01856CEF354D8EC429908830689F3BF53883
Authority key identifier: 33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/q6OMLjeuwWdksEu_J3gwZXKgSyM.roa
Signing time:             Sun 01 Jan 2023 10:44:54 +0000
ROA not before:           Sun 01 Jan 2023 10:44:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     21859
IP address blocks:        45.134.80.0/24 maxlen: 24
                          45.134.81.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:34:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:ef:35:4d:8e:c4:29:90:88:30:68:9f:3b:f5:38:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=333361fba8409174fb3c482b8ca26f235ebd22c2
        Validity
            Not Before: Jan  1 10:44:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=aba38c2e37aec16764b04bbf2778306572a04b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1a:ce:33:b5:23:78:2d:9d:d2:e4:b9:2b:18:
                    94:cb:93:aa:90:7e:c5:1c:c0:4d:11:cc:f6:8c:3d:
                    d3:e9:bd:ff:5b:ea:6d:0e:48:b5:3b:d3:7e:17:5a:
                    81:c8:15:70:f7:f5:65:71:9d:df:04:a6:6a:fe:8a:
                    1d:77:c9:fb:4c:c3:2e:78:09:7a:8d:db:f2:fe:9f:
                    05:ee:44:09:33:5a:a4:b7:8b:32:d5:2b:d8:19:99:
                    ee:8a:22:3e:b5:20:f9:31:9c:04:41:39:6d:d7:c0:
                    2a:4a:dc:77:9a:94:68:38:c1:8c:96:6e:46:64:14:
                    2e:e4:dd:ae:2c:2c:fe:62:cc:47:a7:69:5c:94:de:
                    97:7b:5d:19:9c:ff:c9:a0:49:67:88:e0:db:bd:01:
                    cc:16:56:51:6d:f2:f6:ef:53:eb:7b:e4:c4:79:6e:
                    86:85:cb:03:16:3c:d3:e0:80:72:3e:46:db:c1:70:
                    7c:8f:4d:5a:b7:78:f6:b1:97:b0:bb:62:a6:f5:6f:
                    38:ff:10:5e:03:8e:25:6a:2c:f8:96:b8:21:91:e6:
                    c7:e4:8c:69:3f:87:87:3b:31:0e:12:d9:39:5f:a5:
                    0a:5b:51:b2:7d:39:1f:45:8c:75:89:3a:d8:d4:8f:
                    3d:a8:f8:65:6e:bf:7f:10:8b:b9:92:0f:47:89:bc:
                    23:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A3:8C:2E:37:AE:C1:67:64:B0:4B:BF:27:78:30:65:72:A0:4B:23
            X509v3 Authority Key Identifier:
                keyid:33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/q6OMLjeuwWdksEu_J3gwZXKgSyM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.134.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:08:4d:2d:57:e1:73:da:87:3c:af:7f:7d:41:7b:f1:7c:bc:
         b1:d0:0a:ef:17:5a:51:d5:25:5f:fb:93:f3:a8:52:4f:1d:92:
         16:4e:9b:56:e1:69:d8:83:25:92:cf:d7:36:58:45:f8:74:ea:
         a7:e6:a5:de:1f:cc:ec:b4:1f:60:58:92:0c:38:d9:19:09:42:
         47:ca:28:9d:98:32:7a:48:40:bd:01:f3:b7:af:f1:cf:61:14:
         62:64:76:1c:75:f7:85:d1:cb:2f:3f:70:b3:b3:34:4e:72:f4:
         bf:31:b5:0b:21:c3:08:dc:a1:18:30:3a:96:a1:d2:fd:e7:c5:
         23:29:77:91:d0:90:14:b8:f9:fc:a4:92:01:19:8a:5c:74:80:
         06:de:55:a9:b1:1b:3c:15:8a:29:4d:1c:02:c3:c8:c7:94:83:
         98:4d:66:ee:3c:87:46:e8:68:4f:58:d9:cb:4f:ba:7c:5a:c1:
         8c:10:7a:b9:c0:4a:95:04:85:78:46:94:0b:97:72:00:a1:0b:
         54:0b:f9:52:a4:7e:07:1d:29:4a:b1:f1:b9:28:c4:4b:84:9a:
         5f:9c:ff:c9:78:d0:82:d5:17:9a:64:f3:b7:b4:d3:35:42:db:
         a3:49:ac:e8:0c:01:60:7a:86:c4:4f:ab:64:5b:a3:07:60:7e:
         7e:18:94:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:32 2024 by rpki-client on console-ams.rpki-client.org