Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/bv-jaPDOGL23sp7zvswDyg-Vz0I.roa
File:                     bv-jaPDOGL23sp7zvswDyg-Vz0I.roa (raw, json)
Hash identifier:          +wV8Lo3qpoE2nHhhhkBRaSiQJqWvrifvXjfzPjyVe+w=
Subject key identifier:   6E:FF:A3:68:F0:CE:18:BD:B7:B2:9E:F3:BE:CC:03:CA:0F:95:CF:42
Certificate issuer:       /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial:       0185738FF3C460A367FB53839894EA130BF8
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/bv-jaPDOGL23sp7zvswDyg-Vz0I.roa
Signing time:             Mon 02 Jan 2023 17:38:11 +0000
ROA not before:           Mon 02 Jan 2023 17:38:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61977
IP address blocks:        45.90.145.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 22 Jan 2023 20:19:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:8f:f3:c4:60:a3:67:fb:53:83:98:94:ea:13:0b:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
        Validity
            Not Before: Jan  2 17:38:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6effa368f0ce18bdb7b29ef3becc03ca0f95cf42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:99:64:14:cf:6b:a0:1c:2b:f0:2e:be:d3:41:
                    18:17:c3:7a:c4:a4:ea:72:41:f4:42:de:99:e4:59:
                    31:71:13:36:46:44:2a:f2:66:ef:cf:37:e8:73:59:
                    71:c7:65:cf:8b:80:b3:c7:a8:82:7b:46:8a:a4:f7:
                    bf:54:32:bc:e6:20:a2:59:f8:83:ea:6a:e3:98:59:
                    a1:e5:ac:14:c4:95:d2:dc:a9:39:35:30:3b:fe:d0:
                    e8:99:1f:ac:04:76:b1:54:a2:98:fb:fa:7b:61:ca:
                    f4:fb:66:d1:14:85:86:ca:77:29:f6:a6:f5:5e:ef:
                    1b:6b:92:35:26:8e:2e:94:f2:e6:85:16:16:de:81:
                    9c:c0:a4:8e:79:2f:fc:c9:ff:6d:0e:3b:1a:b4:93:
                    0c:28:8b:53:6f:7d:35:61:04:cd:58:1d:a3:42:42:
                    09:4d:06:ea:e9:9f:73:88:9e:3e:96:be:0d:4f:8c:
                    f3:08:6b:a2:ac:d1:bd:de:8a:5e:15:38:99:a1:3a:
                    ae:1b:a8:51:3c:b6:b0:96:5d:5a:5b:14:5f:a2:ec:
                    35:61:c6:cf:df:e6:51:ce:36:fd:f1:9f:2d:9b:84:
                    4f:a9:45:ec:0a:59:17:0e:ab:89:03:34:1a:38:11:
                    be:d8:15:00:14:84:42:39:06:45:4e:e3:d2:81:8c:
                    7b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:FF:A3:68:F0:CE:18:BD:B7:B2:9E:F3:BE:CC:03:CA:0F:95:CF:42
            X509v3 Authority Key Identifier:
                keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/bv-jaPDOGL23sp7zvswDyg-Vz0I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.90.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:1f:d3:42:a2:9a:1e:c7:9f:ec:0b:82:0d:3a:63:3c:54:0c:
         78:2b:e2:5f:9f:64:e4:5d:ee:af:ce:08:29:44:06:cd:38:fb:
         22:9c:15:bd:47:fd:a2:d6:3b:97:f4:a7:bf:2e:1e:a1:66:cd:
         a7:0b:19:31:36:3d:1c:2f:ef:ad:57:58:0c:c0:ac:d8:a5:86:
         e8:b1:63:fa:8d:85:d9:4b:fa:b2:f4:70:1d:77:20:eb:31:a0:
         04:14:d9:22:6e:3b:74:bd:1c:86:38:65:42:d2:18:e8:44:4e:
         71:27:4f:0a:2a:23:be:a9:59:8c:0d:05:80:37:25:63:d5:c1:
         82:dd:98:68:25:12:0e:53:09:41:44:d9:b3:a8:25:06:53:a2:
         a6:d6:a4:dc:38:7c:e5:b7:a3:31:15:d9:27:23:9c:07:4e:2d:
         0e:b5:88:f6:fa:7d:4e:79:37:1b:e6:15:42:be:9a:9a:a1:93:
         d1:c4:e7:d7:5e:51:40:0a:59:d0:af:28:f8:b0:8a:6b:63:7c:
         ec:f7:b7:02:33:dc:48:16:92:66:fa:b2:f3:1a:1e:59:a6:bd:
         00:b4:c1:e5:7a:31:67:8f:23:1c:fc:81:b9:2d:20:66:34:f8:
         5e:67:36:4a:84:43:38:12:9e:9f:ad:35:ae:dd:62:93:00:0c:
         d7:98:54:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:39 2024 by rpki-client on console-ams.rpki-client.org