Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/0f3d_x-HY-pFMRALnFiIUYpXp2o.roa
File:                     0f3d_x-HY-pFMRALnFiIUYpXp2o.roa (raw, json)
Hash identifier:          7uqiO4SmDPpGb51Nka3sk+JrJ9lPUXkjRclkO9VGUbs=
Subject key identifier:   D1:FD:DD:FF:1F:87:63:EA:45:31:10:0B:9C:58:88:51:8A:57:A7:6A
Certificate issuer:       /CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Certificate serial:       018962BF9957B027396988F5ACF984ADF3A4
Authority key identifier: 13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/0f3d_x-HY-pFMRALnFiIUYpXp2o.roa
Signing time:             Mon 17 Jul 2023 07:27:51 +0000
ROA not before:           Mon 17 Jul 2023 07:27:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     64073
IP address blocks:        45.80.50.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Mon 17 Jul 2023 07:34:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:62:bf:99:57:b0:27:39:69:88:f5:ac:f9:84:ad:f3:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
        Validity
            Not Before: Jul 17 07:27:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d1fdddff1f8763ea4531100b9c5888518a57a76a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:81:5d:00:b1:7a:bc:24:19:0f:2d:e6:34:e0:
                    a9:c1:ad:f4:b8:b2:4a:dc:65:99:69:d0:35:cc:82:
                    45:9a:17:b3:3b:d8:7b:d5:26:a8:c4:1a:c2:e5:c5:
                    08:2b:b2:d2:36:b9:c2:63:dc:ef:50:5b:b9:06:91:
                    5e:70:e9:be:9f:85:53:ed:93:8b:92:cb:ee:32:dc:
                    b9:4b:db:0b:7c:28:6e:bd:e9:f4:d2:ff:cb:eb:57:
                    be:52:bb:5f:c8:1d:49:f9:63:1f:99:80:31:c8:cb:
                    3d:1d:c4:ff:7d:42:f8:30:9c:6e:4f:e4:97:43:35:
                    4e:27:d3:4f:10:3a:28:d3:9f:6f:10:2f:03:f2:3e:
                    07:5b:d9:ee:57:61:fe:e4:33:b1:e1:39:90:99:ec:
                    4d:c8:59:21:69:a6:92:1c:91:29:12:e0:5f:16:3f:
                    ff:75:c6:4d:48:f7:7b:71:0e:b5:26:5e:40:0b:ad:
                    32:f9:fa:24:e5:f7:dc:3f:c3:20:d4:89:92:14:9e:
                    b9:65:38:b2:fd:a0:40:0d:79:36:a6:1e:f9:16:c5:
                    dd:5c:d4:4d:06:56:e7:f7:96:02:ea:38:86:27:bc:
                    5f:66:c2:5f:9e:0b:8e:46:90:8c:be:3e:4a:90:e5:
                    a3:4e:af:88:52:cd:7b:a8:f4:69:e4:db:06:7b:e1:
                    62:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:FD:DD:FF:1F:87:63:EA:45:31:10:0B:9C:58:88:51:8A:57:A7:6A
            X509v3 Authority Key Identifier:
                keyid:13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/0f3d_x-HY-pFMRALnFiIUYpXp2o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.80.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:d4:05:7e:41:21:7c:08:f3:85:42:45:c2:50:41:ce:4e:0f:
         ef:b0:94:d4:81:a7:c5:84:35:50:0c:49:86:cc:60:f8:95:ae:
         9f:16:94:03:38:21:09:6f:05:86:54:a2:ec:e6:fd:92:54:66:
         9f:00:c9:6f:fe:c7:87:ba:98:95:5c:2b:4c:57:fa:77:ac:36:
         27:46:1f:32:bc:b6:51:91:78:25:90:6a:69:39:36:99:64:95:
         b0:24:34:e2:58:bf:bb:b4:b0:c8:6e:b5:a9:b1:69:53:e2:3f:
         28:b5:06:f5:c9:f4:36:3f:5d:3e:f5:c0:b3:3f:ca:74:d1:9f:
         32:2d:f6:68:26:d8:58:a3:05:76:dc:9d:21:2f:84:3c:65:f4:
         84:05:2b:cf:89:ce:d4:ef:de:3e:f5:36:50:14:09:62:3e:81:
         00:1e:95:a5:99:b7:0e:93:e3:f9:93:68:b2:a1:08:0a:82:06:
         e4:97:82:63:4b:ab:03:82:66:85:1a:d4:06:54:04:ae:bb:e4:
         fb:db:70:53:d1:8e:84:04:25:a0:93:df:72:1e:f9:aa:52:58:
         24:37:12:06:1f:c3:1f:a5:f2:18:2c:32:3b:22:17:be:3c:d4:
         95:19:2a:cf:be:a3:6b:13:b8:da:c7:17:df:42:7e:4f:dc:c5:
         52:83:ac:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:41 2024 by rpki-client on console-fra.rpki-client.org