Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/7ju04fFJAvDuF-RV0TjP31OfQL0.roa
File:                     7ju04fFJAvDuF-RV0TjP31OfQL0.roa (raw, json)
Hash identifier:          01n8o17s/ElmFc4E7UMCvvOqOM/iRaobpElEmzkp7vo=
Subject key identifier:   EE:3B:B4:E1:F1:49:02:F0:EE:17:E4:55:D1:38:CF:DF:53:9F:40:BD
Certificate issuer:       /CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Certificate serial:       0187379352A8085E01FEF42160A5CCE03495
Authority key identifier: 13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/7ju04fFJAvDuF-RV0TjP31OfQL0.roa
Signing time:             Fri 31 Mar 2023 12:10:14 +0000
ROA not before:           Fri 31 Mar 2023 12:10:14 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        45.80.51.0/24 maxlen: 24
                          45.80.50.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jul 2023 19:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:37:93:52:a8:08:5e:01:fe:f4:21:60:a5:cc:e0:34:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
        Validity
            Not Before: Mar 31 12:10:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ee3bb4e1f14902f0ee17e455d138cfdf539f40bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1e:fd:dd:c8:46:f7:03:dc:fa:35:39:b9:30:
                    01:b2:03:c8:30:d8:b0:ec:32:1a:ce:d1:c9:fd:77:
                    91:8a:a9:ef:0e:cb:f3:3a:c5:ff:7e:72:91:97:5f:
                    d4:ba:35:0b:57:09:5b:b1:cb:1e:c7:a1:51:68:76:
                    9f:ef:ee:e4:d3:e8:4b:79:83:2f:3d:b6:04:2c:51:
                    ef:5e:ca:78:d4:77:2d:37:04:1b:11:f3:a3:42:35:
                    e9:76:ef:10:e9:3f:5c:cb:3f:9c:81:93:39:a5:39:
                    c4:c1:4c:8e:3c:a8:16:4a:09:16:18:61:e2:3d:14:
                    fa:72:73:fb:8c:83:36:d7:c0:ad:4d:2a:0f:c7:10:
                    ac:d3:82:e4:86:f6:16:f8:19:ab:96:14:58:92:44:
                    d7:dc:8f:5f:44:6d:f0:b4:eb:49:5b:74:bb:b1:82:
                    b2:d1:f9:8b:1e:32:52:7c:e7:6e:a9:1c:5b:1e:1c:
                    a6:99:ad:fb:f5:c7:8d:d2:aa:a5:e4:2e:16:bb:97:
                    2d:79:ab:39:b9:2c:1e:a7:1f:fe:40:3f:68:72:23:
                    30:25:eb:ec:8b:1b:81:76:fe:df:e2:c0:45:d5:98:
                    e1:c5:a6:0a:6e:22:d2:c5:f7:1a:01:5d:1f:f1:b6:
                    87:b8:e0:9b:3b:01:50:67:38:32:4b:73:b9:12:b2:
                    00:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3B:B4:E1:F1:49:02:F0:EE:17:E4:55:D1:38:CF:DF:53:9F:40:BD
            X509v3 Authority Key Identifier:
                keyid:13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/7ju04fFJAvDuF-RV0TjP31OfQL0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.80.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:2d:47:a6:e5:fd:7c:97:ac:4a:63:94:bc:b9:08:b1:76:ca:
         7f:24:7e:e0:bb:52:11:7b:81:ff:a3:8b:45:1a:60:6d:08:54:
         10:d4:dc:3b:6a:14:76:eb:ac:1e:2d:18:2b:cd:08:79:9d:32:
         c2:d5:fd:8b:52:cd:22:74:ac:74:aa:cd:61:c8:b3:4e:7f:94:
         7b:3a:ae:5c:95:8c:08:0d:cc:50:3a:37:74:fe:48:c1:ee:41:
         98:de:b3:58:17:12:77:85:38:b5:6b:2a:18:8a:a9:20:81:d4:
         61:fc:ed:7e:f6:34:6d:86:d3:b6:7c:62:f8:73:26:7e:e2:ae:
         00:f5:5e:63:0f:96:0d:f0:24:1a:dc:f0:a3:be:2e:a2:3f:b6:
         2b:a7:ce:03:06:72:da:9f:e2:d1:67:38:aa:31:8e:d6:0d:a2:
         0d:72:84:43:a2:62:5d:e8:8e:7d:b0:2b:e9:62:33:3a:f5:23:
         03:ce:23:45:1d:56:60:f3:e9:7f:04:10:37:03:58:66:e0:db:
         39:e7:c2:f5:fb:b2:b8:c8:f9:54:64:0e:9a:bc:59:14:b9:d3:
         95:46:bc:fe:8f:41:fc:6c:39:53:1e:32:3a:3e:9e:5d:a3:49:
         cf:91:c7:0f:ad:f7:23:c7:78:c3:73:b6:bd:1c:77:41:3e:ac:
         9a:38:36:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:41 2024 by rpki-client on console-fra.rpki-client.org