Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/x_VC5cMcFWtNpcndVyRh7O8h8PY.roa
File:                     x_VC5cMcFWtNpcndVyRh7O8h8PY.roa (raw, json)
Hash identifier:          mXzQIbRm6fyowvurUmjM7dQz2Ppt7B9My0g84KfIGKQ=
Subject key identifier:   C7:F5:42:E5:C3:1C:15:6B:4D:A5:C9:DD:57:24:61:EC:EF:21:F0:F6
Certificate issuer:       /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial:       0185729EC5BE84ADEB3B20CB3DD019662E09
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/x_VC5cMcFWtNpcndVyRh7O8h8PY.roa
Signing time:             Mon 02 Jan 2023 13:14:45 +0000
ROA not before:           Mon 02 Jan 2023 13:14:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57844
IP address blocks:        45.10.150.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:29:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:9e:c5:be:84:ad:eb:3b:20:cb:3d:d0:19:66:2e:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
        Validity
            Not Before: Jan  2 13:14:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c7f542e5c31c156b4da5c9dd572461ecef21f0f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8c:12:33:d6:a4:83:0b:be:a1:84:a6:15:04:
                    01:62:61:8c:64:05:9d:38:7a:64:9a:c8:1e:06:67:
                    92:e5:97:22:54:27:d1:77:72:9e:40:18:89:25:e4:
                    87:f3:87:a1:60:3e:9f:98:28:79:b4:68:c2:34:bd:
                    5b:c5:df:0e:f9:f2:88:23:bc:ef:5a:64:83:30:4b:
                    ea:e5:46:22:dc:a0:31:48:30:99:8d:13:09:19:93:
                    88:9e:bf:2b:cf:8b:9a:a9:2e:dc:25:a1:43:b5:12:
                    32:e5:88:78:a0:a0:71:df:b6:42:c1:39:f1:7e:74:
                    b9:2d:65:d0:5a:05:d2:5a:57:b9:93:8f:08:6f:ce:
                    cd:17:08:e1:23:2b:e4:f6:ff:42:3d:38:7a:a1:90:
                    24:a0:41:cd:e3:e4:f7:61:2c:15:60:eb:5e:2e:15:
                    9b:e8:60:73:61:3e:57:58:17:cb:1a:e1:97:ad:c4:
                    44:63:d0:80:f6:ba:4a:7e:ef:04:a3:a9:8f:46:5b:
                    82:bc:0c:98:2a:5b:28:6d:a5:89:72:ea:ce:b2:9b:
                    3c:d9:ff:19:2d:95:e1:75:46:9a:da:3b:25:b2:f6:
                    a0:98:ca:08:45:d6:1b:5c:31:3b:d6:6e:07:5d:7b:
                    92:f2:2a:da:88:68:4f:3e:b8:14:20:1e:41:cf:81:
                    5b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:F5:42:E5:C3:1C:15:6B:4D:A5:C9:DD:57:24:61:EC:EF:21:F0:F6
            X509v3 Authority Key Identifier:
                keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/x_VC5cMcFWtNpcndVyRh7O8h8PY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.10.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:7f:30:08:3e:63:94:d6:31:d1:60:e9:96:9a:ea:4c:28:d0:
         b0:64:36:05:4f:2d:53:0c:5b:6a:77:7a:b4:1d:5e:ba:61:b7:
         74:12:d6:24:61:80:27:d9:9e:21:a1:1a:79:4a:a1:48:35:03:
         9a:4e:1a:4a:dd:92:fc:a4:d9:09:01:4e:07:64:a7:82:94:b4:
         be:c4:dc:0b:e8:41:5d:41:9e:13:55:2b:3b:56:92:52:84:fb:
         c0:1c:66:51:cd:e5:62:b3:25:8f:98:c7:54:66:95:e8:b1:b2:
         45:31:b9:ce:79:7e:13:c6:35:73:0c:83:6a:c7:d0:49:36:2b:
         5e:90:7b:43:29:82:44:4d:f9:44:0d:43:52:ab:71:e4:70:21:
         c2:42:fc:b7:36:1d:18:ba:65:9e:d1:6d:54:e3:3c:dc:7d:89:
         90:1b:b9:c5:d2:a9:42:8e:60:ad:64:c6:bf:34:48:7d:1b:05:
         81:a6:3b:b6:5b:ac:85:3f:2f:c9:aa:eb:6d:5c:33:86:e4:3c:
         ca:6c:04:c5:10:f7:a4:ae:5f:7f:8a:1e:6b:78:7a:35:7c:e0:
         1f:88:31:69:f5:ab:bd:2e:d0:9d:3a:af:7e:34:b6:db:8f:27:
         f1:6a:55:ac:0e:9b:c9:61:92:6d:2c:57:4a:89:26:c3:ba:f4:
         3f:69:de:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:45 2024 by rpki-client on console-ams.rpki-client.org