Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/eWULVJpCqKk0Ly-wAsDQJpOXuhA.roa
File:                     eWULVJpCqKk0Ly-wAsDQJpOXuhA.roa (raw, json)
Hash identifier:          NuH2t0rrk7ci2aSTsWT32PK2oOdmS0QVy298m3+rvfo=
Subject key identifier:   79:65:0B:54:9A:42:A8:A9:34:2F:2F:B0:02:C0:D0:26:93:97:BA:10
Certificate issuer:       /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial:       019424B39F0427F69F9F417F21D35DA22AC2
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/eWULVJpCqKk0Ly-wAsDQJpOXuhA.roa
Signing time:             Thu 02 Jan 2025 01:48:58 +0000
ROA not before:           Thu 02 Jan 2025 01:48:58 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     62390
IP address blocks:        45.155.88.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 17 Jan 2025 06:54:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:24:b3:9f:04:27:f6:9f:9f:41:7f:21:d3:5d:a2:2a:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
        Validity
            Not Before: Jan  2 01:48:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=79650b549a42a8a9342f2fb002c0d0269397ba10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ce:6f:32:7c:33:70:82:16:06:91:eb:bf:0a:
                    a2:7e:df:b6:17:29:2d:c7:d4:19:8d:e3:1d:c9:74:
                    71:88:99:3e:17:8b:9f:7d:ba:5a:e6:66:6b:48:75:
                    4c:f7:74:3d:4a:66:a3:d8:6a:0c:8a:6b:6c:e4:6b:
                    86:b9:da:fb:dc:9c:3e:5a:8f:94:ba:6b:17:ce:99:
                    8e:de:ed:04:8d:b4:5f:37:88:fc:81:41:13:8c:7f:
                    f5:e2:96:52:ad:fe:3a:e1:71:23:ec:ff:4e:74:3f:
                    f0:97:ba:8d:13:d7:b9:4e:c5:2a:b0:67:4d:c1:58:
                    fe:67:4d:a6:7f:6c:0d:ee:04:7b:3e:8b:eb:73:35:
                    ba:5e:3a:c8:ed:e8:d1:f0:a4:21:e3:9f:73:75:09:
                    1b:f2:29:3e:3b:85:ce:32:09:df:9c:88:bf:95:22:
                    c1:d6:95:c9:31:1c:d8:d7:ac:50:fa:14:00:1c:f3:
                    2b:c2:08:73:94:a3:85:e2:b5:6d:4e:a8:85:0e:be:
                    77:69:49:51:9d:1a:0f:d9:3d:05:0c:b0:54:c7:a4:
                    2d:03:6d:79:d8:09:f0:eb:03:4f:4d:32:57:34:98:
                    05:5e:0d:15:ae:b6:9e:61:c8:58:e3:a8:fd:c2:74:
                    fc:18:3c:ff:91:48:df:2b:9b:3e:3e:72:2c:a3:00:
                    09:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:65:0B:54:9A:42:A8:A9:34:2F:2F:B0:02:C0:D0:26:93:97:BA:10
            X509v3 Authority Key Identifier:
                keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/eWULVJpCqKk0Ly-wAsDQJpOXuhA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:d8:28:5c:d2:ef:75:5d:eb:d7:fe:09:45:04:10:4d:cc:58:
         43:79:6b:57:21:55:bc:bc:ac:40:6e:10:71:c1:2f:16:86:18:
         ee:e5:17:bd:87:42:ab:48:80:54:3c:e6:d3:03:17:c1:de:21:
         20:e1:4a:6e:3e:6b:b4:9b:96:e4:c2:12:91:aa:86:6b:3f:eb:
         bd:a4:7e:60:c4:ad:71:8d:50:9f:13:1f:ad:ce:6f:c8:bc:6b:
         89:2d:0c:4b:2f:4c:b5:63:64:13:8d:71:20:45:90:11:86:57:
         07:47:bd:23:18:32:13:e2:4c:75:1c:89:0e:a7:38:8b:e6:60:
         c3:82:d6:b5:8e:d3:a8:f6:0b:42:9f:15:46:a7:7a:02:0b:3c:
         9c:91:94:a0:a4:78:b3:d5:cd:68:80:8a:5f:c5:0e:9b:2d:68:
         4e:21:97:1c:26:9f:65:a1:c4:58:e9:76:fa:f1:ca:c4:97:10:
         9c:4c:d6:f7:a0:47:a6:0e:3a:94:bd:92:77:a1:40:ef:68:1d:
         28:2a:d3:24:cf:d2:c5:5b:48:c6:4e:82:ae:4a:5d:75:9a:f4:
         43:58:5e:37:98:20:ea:38:1a:da:27:75:c9:c1:9c:9a:fe:4d:
         c6:f0:91:dd:cb:b9:25:01:27:01:da:15:d0:2f:5a:8d:f6:f8:
         26:7f:d4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 05:08:22 2025 by rpki-client