Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/1DDADbIc0ldKi0_h1TMfm2M-K-E.roa
File:                     1DDADbIc0ldKi0_h1TMfm2M-K-E.roa (raw, json)
Hash identifier:          eL2E/TXLhnJAHpTLhU0Rwa1OcGxZLzabRRMLhB0ALjQ=
Subject key identifier:   D4:30:C0:0D:B2:1C:D2:57:4A:8B:4F:E1:D5:33:1F:9B:63:3E:2B:E1
Certificate issuer:       /CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Certificate serial:       01856DA636F22C09C113F96C6773F977E118
Authority key identifier: 6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/1DDADbIc0ldKi0_h1TMfm2M-K-E.roa
Signing time:             Sun 01 Jan 2023 14:04:47 +0000
ROA not before:           Sun 01 Jan 2023 14:04:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211761
IP address blocks:        45.154.207.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:29:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:a6:36:f2:2c:09:c1:13:f9:6c:67:73:f9:77:e1:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
        Validity
            Not Before: Jan  1 14:04:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d430c00db21cd2574a8b4fe1d5331f9b633e2be1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a0:b7:b5:6b:31:9b:6c:7a:99:ae:31:ce:d7:
                    97:24:91:d1:5e:e1:6b:e2:91:27:6b:8c:c2:cf:0d:
                    47:94:5d:1c:90:3e:2a:5c:7e:19:8a:da:e8:86:89:
                    ed:d6:18:2a:55:4a:fd:96:5a:03:cd:74:0e:57:51:
                    0e:0f:97:d3:14:7f:ff:50:75:41:c2:68:07:cd:36:
                    3d:a5:4e:6d:f1:9b:6a:79:66:f5:d1:f1:aa:4f:9d:
                    94:38:87:90:43:ce:11:1e:fd:0b:d0:64:80:29:73:
                    be:ae:c6:d3:c1:c3:47:6c:ae:44:84:ae:c1:25:3a:
                    30:44:75:e1:ed:19:69:37:b6:e6:b2:1d:9f:e5:71:
                    f4:bd:f4:5b:bd:a2:7e:84:d9:9b:be:44:6a:6b:0f:
                    f5:20:d5:a4:d6:c5:13:83:79:52:ca:d3:eb:cd:98:
                    66:eb:44:74:97:01:59:ef:64:70:d4:c3:12:2f:6a:
                    89:cc:93:6f:cb:2c:f5:57:c0:29:c3:ad:17:f0:81:
                    0f:7b:fc:1c:e7:c3:33:fc:0c:51:8c:e2:74:c3:ca:
                    15:d6:30:8e:cd:86:0e:fe:56:1f:e8:64:82:17:7c:
                    ed:26:fd:3e:e3:5f:d2:d0:9f:aa:0f:0e:8b:b9:ee:
                    5e:ca:16:c3:d3:1c:2a:13:3f:b1:8b:03:92:f1:58:
                    83:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:30:C0:0D:B2:1C:D2:57:4A:8B:4F:E1:D5:33:1F:9B:63:3E:2B:E1
            X509v3 Authority Key Identifier:
                keyid:6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/1DDADbIc0ldKi0_h1TMfm2M-K-E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.154.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:19:0f:f3:1f:fa:0d:10:6f:4f:20:e6:25:10:74:ec:e9:3e:
         6b:5c:9b:0e:d1:fc:dc:a3:9f:a9:52:17:9c:ca:bc:01:42:77:
         da:2a:fa:7d:75:1f:ce:df:ed:57:01:68:e4:84:75:63:e0:53:
         15:c0:6e:cc:01:36:cd:af:e8:0b:4d:8e:8c:d8:1b:9b:99:28:
         7a:99:94:af:61:12:a0:df:66:32:3c:a0:ef:3a:bf:33:9e:cb:
         a1:95:5b:76:f4:5b:b2:23:9e:d3:f6:91:d9:f7:5d:9b:95:6f:
         4b:c7:2a:ce:6d:7e:07:95:b1:d7:c0:ec:c5:92:5a:79:83:0b:
         62:de:21:6f:48:d2:9f:41:03:41:c9:02:15:09:e3:a5:f5:0a:
         a8:bf:9d:42:a7:96:ca:cb:73:13:58:5f:68:29:08:9f:29:a2:
         17:6c:68:2c:1b:46:26:89:0e:9c:d1:93:5e:e0:69:df:4c:4c:
         1b:8c:97:0d:0b:8f:c1:21:be:d4:f3:b9:66:9d:47:31:df:b3:
         48:85:71:c4:cd:c2:45:6b:5c:fb:e6:26:44:22:73:14:e3:74:
         1c:c1:20:1f:31:e2:64:f6:93:1a:d7:98:53:08:2d:e1:2d:c9:
         84:b6:1b:28:b3:1a:d3:0a:f6:dc:0f:9f:b5:42:a0:bd:cd:0a:
         f0:ea:47:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:45 2024 by rpki-client on console-fra.rpki-client.org