Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/Dxu-RIQ-qAtJzULkj-6GWDrweUw.roa
File:                     Dxu-RIQ-qAtJzULkj-6GWDrweUw.roa (raw, json)
Hash identifier:          dow29/40r6WRbGVfuOCRTZO4JZnljFjeJa+fPjklt/I=
Subject key identifier:   0F:1B:BE:44:84:3E:A8:0B:49:CD:42:E4:8F:EE:86:58:3A:F0:79:4C
Certificate issuer:       /CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Certificate serial:       018678F5C218833EFB6D15227C3F11595437
Authority key identifier: 25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/Dxu-RIQ-qAtJzULkj-6GWDrweUw.roa
Signing time:             Wed 22 Feb 2023 11:50:17 +0000
ROA not before:           Wed 22 Feb 2023 11:50:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        45.143.132.0/24 maxlen: 24
                          45.143.133.0/24 maxlen: 24
                          45.143.134.0/24 maxlen: 24
                          45.143.135.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 02:30:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:78:f5:c2:18:83:3e:fb:6d:15:22:7c:3f:11:59:54:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
        Validity
            Not Before: Feb 22 11:50:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0f1bbe44843ea80b49cd42e48fee86583af0794c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6c:5d:22:25:9d:f9:59:f0:88:66:2b:a9:cf:
                    5d:8f:ae:6a:87:3d:08:30:0c:19:e1:72:8b:81:5b:
                    38:00:1c:20:54:44:92:90:1f:9a:22:cb:fa:08:ff:
                    d0:b7:dd:30:39:b7:8f:e1:cd:cf:27:97:30:09:b9:
                    5c:4d:63:f0:13:e4:ab:1e:9b:73:c1:2a:af:77:ec:
                    e2:49:33:f9:6b:d3:be:b8:e3:a9:05:8c:eb:b9:89:
                    67:76:33:83:b8:ae:59:1d:6c:6c:06:fb:dc:ef:dd:
                    d3:d1:43:8b:f2:e0:b6:5e:01:67:d0:45:52:47:8d:
                    a3:92:bb:1d:0f:0e:3b:af:ed:6f:b0:e3:46:e2:02:
                    43:9f:2d:3f:a9:1b:5c:b5:df:9e:e7:c4:52:4a:52:
                    de:5d:f8:24:16:43:e3:1c:39:ce:1a:30:8d:cb:ee:
                    01:ce:88:95:77:ac:60:eb:90:96:05:94:a7:13:1b:
                    27:3b:5d:10:6c:31:2b:d5:29:65:9b:5b:e9:f1:c7:
                    f2:d0:29:69:dc:51:62:89:8d:29:76:5c:3c:48:42:
                    52:b8:1f:83:c7:e7:3d:7b:6c:4e:81:81:f3:40:fc:
                    80:8d:aa:78:a0:1a:4b:bf:5c:f9:79:92:d8:a4:a4:
                    42:11:b8:e8:9c:41:16:63:9f:ce:d6:fc:3f:63:4a:
                    d7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:1B:BE:44:84:3E:A8:0B:49:CD:42:E4:8F:EE:86:58:3A:F0:79:4C
            X509v3 Authority Key Identifier:
                keyid:25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/Dxu-RIQ-qAtJzULkj-6GWDrweUw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.143.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:3c:d6:7f:39:26:44:93:6b:43:59:7c:de:da:1b:82:e8:27:
         ec:c1:72:60:de:cf:64:02:84:6d:e9:0e:c9:8d:37:33:bf:b0:
         f4:53:39:db:19:90:8d:79:6a:c0:46:cd:a8:7f:aa:7b:50:36:
         b5:4b:3d:6c:1f:a1:c4:3b:8e:0f:de:12:c1:cd:9b:89:96:78:
         31:2f:f8:c2:1b:98:b3:aa:70:c6:04:ca:7d:a6:4e:de:1d:09:
         1b:77:e2:c5:79:27:79:eb:59:79:f3:27:ab:b2:ba:3c:22:e4:
         91:94:c9:a8:cf:da:00:cb:e9:08:3c:be:b0:9a:60:eb:f5:2d:
         b6:84:91:6a:71:3b:21:ff:1d:0d:58:9a:54:3d:bd:34:a3:d6:
         ba:61:f6:75:d0:37:fc:17:ae:8e:86:60:a3:7b:9c:27:28:49:
         ad:87:cc:d9:10:64:7c:64:9a:ae:9f:4e:75:e3:0b:dd:c7:19:
         4d:05:7b:49:af:11:ec:eb:e4:c9:00:ed:df:15:b6:23:5b:d4:
         aa:04:2d:3c:c0:c9:ed:ca:bd:a9:a2:35:b5:a3:f8:6a:ca:bf:
         7f:9a:93:66:5e:30:16:30:5d:ec:bf:e4:9e:59:81:ca:44:ae:
         a0:bb:b9:35:b7:2b:96:8e:7c:f9:2f:eb:29:65:c8:1e:1c:a1:
         fc:85:e2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:00 2024 by rpki-client on console-ams.rpki-client.org