Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/b6Lz3MZDycMLXQ7E154LzQaY6TI.roa
File:                     b6Lz3MZDycMLXQ7E154LzQaY6TI.roa (raw, json)
Hash identifier:          NKkKbsb4dfHNn6MeBAzOxY8TIht9Y1LMknJ3ZpsS/Ho=
Subject key identifier:   6F:A2:F3:DC:C6:43:C9:C3:0B:5D:0E:C4:D7:9E:0B:CD:06:98:E9:32
Certificate issuer:       /CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
Certificate serial:       01857246BA6B368626DD39E5539C69B375A3
Authority key identifier: 25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/b6Lz3MZDycMLXQ7E154LzQaY6TI.roa
Signing time:             Mon 02 Jan 2023 11:38:35 +0000
ROA not before:           Mon 02 Jan 2023 11:38:35 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        45.143.132.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 23 Jan 2023 12:28:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:46:ba:6b:36:86:26:dd:39:e5:53:9c:69:b3:75:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=250e7df43c82d120a13d3c865f1f06f49644b1e1
        Validity
            Not Before: Jan  2 11:38:35 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6fa2f3dcc643c9c30b5d0ec4d79e0bcd0698e932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c8:57:42:d7:5a:4b:6b:c6:da:92:ab:c6:74:
                    0b:e5:52:8a:9a:a3:b6:0a:04:1c:3e:48:20:d4:8c:
                    e0:77:4e:86:1d:ab:df:26:f2:06:66:3e:c2:44:25:
                    17:5d:64:a5:3d:23:07:90:c2:bb:42:45:8b:42:08:
                    70:9b:77:af:7c:89:39:85:1f:95:0b:7f:2b:20:79:
                    65:96:f6:c9:95:27:8f:a3:7a:fa:7d:b7:92:09:17:
                    56:27:10:ae:ee:f8:a0:05:fd:20:ba:41:fc:6a:8d:
                    ff:4c:0d:2b:b9:15:8c:f9:30:e3:9c:dd:ce:41:48:
                    dd:95:f1:9e:a3:33:38:3d:94:d2:f7:e4:b6:08:15:
                    a1:94:f6:9b:25:ef:6d:74:71:78:5a:f3:1e:99:9a:
                    24:21:95:f1:84:95:44:74:c7:6c:94:d7:21:39:c1:
                    77:96:db:da:0a:cb:00:9b:2b:09:63:2d:2b:58:04:
                    49:16:cd:da:8f:2c:1f:a0:0c:41:85:b2:51:97:da:
                    31:21:0b:08:08:12:00:d4:c5:d0:e8:ee:8e:94:5a:
                    fe:87:24:cd:de:af:8e:fc:46:b7:ec:af:bc:bb:a6:
                    71:ad:32:15:bf:22:95:81:d2:94:48:93:67:77:22:
                    b6:73:3d:40:57:2e:87:14:e3:c3:bd:97:63:d7:18:
                    b4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A2:F3:DC:C6:43:C9:C3:0B:5D:0E:C4:D7:9E:0B:CD:06:98:E9:32
            X509v3 Authority Key Identifier:
                keyid:25:0E:7D:F4:3C:82:D1:20:A1:3D:3C:86:5F:1F:06:F4:96:44:B1:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JQ599DyC0SChPTyGXx8G9JZEseE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/b6Lz3MZDycMLXQ7E154LzQaY6TI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7d2e64-10d9-4a4e-a4c6-4a9bb2fe7331/1/JQ599DyC0SChPTyGXx8G9JZEseE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.143.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:08:0f:4d:bc:f0:b2:12:05:9c:6e:f4:50:de:a3:e8:d2:ad:
         32:e8:9a:fc:93:05:7a:f4:a5:d1:72:53:ed:1c:8a:6e:c9:df:
         37:c1:bf:fd:71:82:3f:42:7d:d1:dc:c0:6f:49:4c:4b:b2:15:
         f1:90:ad:af:95:17:73:54:f4:4e:7a:1f:21:7c:07:70:ec:12:
         e2:4b:29:dd:1b:7e:12:24:b0:f2:13:48:e5:86:5d:f7:d1:c6:
         54:e9:8d:18:b3:7a:03:9f:5b:c1:d4:d8:9e:7c:cc:35:8b:43:
         72:7c:35:10:04:48:5b:89:ff:2f:c6:f0:36:dc:4c:45:62:3f:
         71:cf:dc:9d:38:54:fb:fe:e3:d7:5a:f5:26:21:0c:ef:ff:12:
         29:b5:8c:94:bb:20:d2:f6:b6:d2:9f:a1:23:db:0b:db:f0:3c:
         be:e7:9d:a7:42:ad:d9:8c:fd:f0:a1:1e:6e:cd:4a:37:d1:73:
         71:0a:7b:b8:83:d1:dc:52:92:49:eb:12:b1:c4:d2:c5:97:dc:
         d4:b4:82:81:2a:25:4c:5f:a1:f2:48:54:a8:8c:e4:f9:d8:fd:
         3c:32:8f:3e:ce:ba:1e:32:0c:e8:71:f7:de:a6:15:30:55:3e:
         f2:f7:7d:7a:60:a2:7f:8c:47:37:87:6f:25:0e:2c:3c:b0:ac:
         45:19:a7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:30 2024 by rpki-client on console-fra.rpki-client.org