Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/4t-WnEeNsnvyFrHk8irJt-ai6NU.roa
File:                     4t-WnEeNsnvyFrHk8irJt-ai6NU.roa (raw, json)
Hash identifier:          SvHONF1nisu0myhSCpH1plxP9+TeZSWpfsqm+e6icvk=
Subject key identifier:   E2:DF:96:9C:47:8D:B2:7B:F2:16:B1:E4:F2:2A:C9:B7:E6:A2:E8:D5
Certificate issuer:       /CN=7d43b0ec79951d5d5580133e5329a90f2fee1c5b
Certificate serial:       0185723A255395D873BDE4BB4602FB529070
Authority key identifier: 7D:43:B0:EC:79:95:1D:5D:55:80:13:3E:53:29:A9:0F:2F:EE:1C:5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fUOw7HmVHV1VgBM-UympDy_uHFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/4t-WnEeNsnvyFrHk8irJt-ai6NU.roa
Signing time:             Mon 02 Jan 2023 11:24:51 +0000
ROA not before:           Mon 02 Jan 2023 11:24:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29470
IP address blocks:        185.45.80.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:31:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:3a:25:53:95:d8:73:bd:e4:bb:46:02:fb:52:90:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d43b0ec79951d5d5580133e5329a90f2fee1c5b
        Validity
            Not Before: Jan  2 11:24:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e2df969c478db27bf216b1e4f22ac9b7e6a2e8d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:2c:2e:44:b8:07:f3:fb:1f:24:c5:f4:e3:c0:
                    f0:16:b4:bd:6d:ad:cf:8b:73:02:18:6b:4c:22:64:
                    6e:dc:86:56:76:9e:f7:b5:d0:8d:23:ca:21:c9:ac:
                    c4:15:78:c8:82:b7:23:0c:a0:74:f5:f3:a6:40:02:
                    47:40:6f:a9:11:45:f5:2b:9a:0d:cd:bd:39:47:0e:
                    4b:5a:72:f9:cb:9e:f8:06:16:60:e7:65:dc:a0:af:
                    a4:4b:4a:af:91:35:5e:1a:e5:61:1c:9c:e0:89:b4:
                    f4:b9:ec:70:af:b3:a2:8a:62:58:68:a7:b6:b7:33:
                    c2:90:ac:1f:3a:48:5f:54:0d:91:e0:b8:a7:ef:2d:
                    c3:b0:e3:f2:fc:d3:6d:10:26:31:6f:93:d0:01:cb:
                    91:92:ea:76:00:fa:c5:d2:03:9f:81:96:8b:29:88:
                    98:1d:a5:86:40:b7:5d:2e:f2:67:6a:d3:e2:7d:a4:
                    bc:4d:aa:05:bd:c2:af:b9:60:46:29:32:7d:87:2a:
                    2f:71:9b:30:0a:a9:c7:ef:28:98:31:27:56:b4:f1:
                    a9:f3:7b:09:16:55:83:56:ba:69:f6:1b:44:a0:12:
                    94:13:2c:58:35:93:de:d1:57:28:d5:1e:bd:38:e4:
                    12:9c:3c:39:63:74:87:0e:88:55:30:48:32:2b:31:
                    8e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:DF:96:9C:47:8D:B2:7B:F2:16:B1:E4:F2:2A:C9:B7:E6:A2:E8:D5
            X509v3 Authority Key Identifier:
                keyid:7D:43:B0:EC:79:95:1D:5D:55:80:13:3E:53:29:A9:0F:2F:EE:1C:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUOw7HmVHV1VgBM-UympDy_uHFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/4t-WnEeNsnvyFrHk8irJt-ai6NU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2604e0-91fa-4fe9-bb28-93a6192b1785/1/fUOw7HmVHV1VgBM-UympDy_uHFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.45.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:a1:17:7d:f8:72:41:68:74:96:f4:8a:07:cf:55:dc:cf:83:
         18:87:9a:b8:ec:26:f2:e3:1c:10:93:d1:6d:22:8b:a9:90:92:
         05:fd:32:66:f5:d9:4d:24:86:14:fd:76:c9:9c:b6:0f:5b:a1:
         ef:44:42:c9:bd:a4:20:c4:4a:8c:e9:ba:51:62:9c:59:5e:f6:
         a3:13:90:67:1f:dc:59:02:e5:dc:4d:39:27:2f:60:d7:ef:4c:
         f7:e9:73:fe:7a:90:68:ab:27:c1:75:4d:7e:22:c9:b0:82:af:
         2b:43:ee:5e:12:3d:a1:43:e9:a8:78:6c:d8:c5:5e:65:f0:a0:
         5a:f2:c8:42:bf:ae:46:8a:1b:42:11:06:f0:7d:3b:26:37:e5:
         e5:e3:65:4b:b5:b0:87:49:3b:8c:c0:00:03:40:b3:da:b8:09:
         c1:da:e3:40:95:07:91:48:d3:93:6e:a8:96:06:49:2c:2f:8f:
         16:31:e6:3e:56:9a:2e:8b:a8:c8:76:31:83:ce:9b:e7:cd:81:
         aa:11:9b:db:b3:f7:89:17:7c:74:38:68:4f:23:a0:43:0f:6b:
         c8:e5:d2:39:7f:c5:72:e1:38:46:ff:5e:05:42:94:ab:51:fe:
         73:d7:de:aa:1b:82:7c:26:ea:89:18:53:51:c5:4a:52:cd:9a:
         90:58:cd:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:14 2024 by rpki-client on console-fra.rpki-client.org