Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/9Y3ZLHvRk5WoHK4-_IBt-FIjqFc.roa
File:                     9Y3ZLHvRk5WoHK4-_IBt-FIjqFc.roa (raw, json)
Hash identifier:          RUjdN46OIp3yfMlM/xt/PfxoLL2W3oIqUzls6HpN07g=
Subject key identifier:   F5:8D:D9:2C:7B:D1:93:95:A8:1C:AE:3E:FC:80:6D:F8:52:23:A8:57
Certificate issuer:       /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial:       0186938842677B25B17D09A4908731D6278A
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/9Y3ZLHvRk5WoHK4-_IBt-FIjqFc.roa
Signing time:             Mon 27 Feb 2023 15:40:25 +0000
ROA not before:           Mon 27 Feb 2023 15:40:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50225
IP address blocks:        45.137.197.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 27 Mar 2023 06:59:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:93:88:42:67:7b:25:b1:7d:09:a4:90:87:31:d6:27:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
        Validity
            Not Before: Feb 27 15:40:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f58dd92c7bd19395a81cae3efc806df85223a857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b2:12:a7:a5:26:f2:04:a9:98:82:df:60:00:
                    72:3c:d8:1a:94:a4:e8:3a:cf:d2:22:0f:8a:9b:63:
                    75:54:eb:92:48:a6:d0:43:13:db:58:8b:ac:0b:0f:
                    2a:be:8a:69:34:68:8d:b1:d7:87:16:88:39:60:49:
                    63:81:32:2f:be:d0:58:fb:ab:04:81:55:31:b3:c9:
                    c8:b6:b3:74:e1:c4:8e:ec:3d:46:45:4a:e7:74:3e:
                    49:2b:96:94:e6:18:96:83:0a:f9:10:19:08:f3:d1:
                    11:cf:26:63:23:60:1d:f1:35:8f:9b:f8:dd:1b:73:
                    93:27:39:e3:3d:7b:53:3b:bc:22:26:6c:9b:cb:54:
                    96:a6:24:74:66:77:6e:7c:77:c7:4b:39:f1:71:3a:
                    56:f8:8c:f8:79:f1:19:58:f9:69:c8:a0:e5:b1:8d:
                    4f:2c:97:71:56:31:dd:c4:41:e6:d2:5c:d5:0f:c9:
                    57:7f:cb:1b:ed:3e:c2:ef:51:a2:d8:94:00:86:1d:
                    11:90:e0:24:7d:67:ee:95:31:72:d5:72:71:05:94:
                    bf:62:dc:2a:0b:f2:d7:07:8c:b0:6c:86:29:d8:b9:
                    d7:a2:8c:e6:39:a7:9f:7c:5e:9a:12:17:8c:00:34:
                    5c:8c:a6:c2:dc:16:ee:63:30:af:8a:2f:bd:3f:e4:
                    ef:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:8D:D9:2C:7B:D1:93:95:A8:1C:AE:3E:FC:80:6D:F8:52:23:A8:57
            X509v3 Authority Key Identifier:
                keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/9Y3ZLHvRk5WoHK4-_IBt-FIjqFc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:55:91:96:d5:56:bb:75:02:ae:29:23:54:08:62:b4:05:1d:
         25:13:79:cb:98:6e:90:86:20:f2:22:18:b4:df:b3:e6:60:9f:
         42:b4:bd:d3:fa:a0:d0:db:de:fe:13:96:f0:ab:12:1e:2c:82:
         9f:c7:16:70:54:44:5b:94:71:02:2e:d7:31:55:66:4a:12:5d:
         0b:9f:45:41:c7:d8:15:b2:4f:74:a3:cc:44:4f:a1:6e:26:51:
         5a:39:cc:4c:a8:7e:c4:ef:36:51:cd:33:97:2c:7c:34:f3:8f:
         85:6c:52:d3:98:22:7d:59:4d:05:74:89:a8:c4:9a:8b:f5:4c:
         76:7d:cd:da:31:70:9d:76:a2:3b:96:3e:ab:cd:eb:ba:b9:7c:
         77:36:ea:a9:34:03:e8:c9:38:6c:85:5e:fa:cc:ce:55:ce:78:
         89:55:2b:f6:93:b3:b1:64:d7:aa:ea:7a:3f:31:bb:02:a8:2c:
         fe:ba:11:80:8e:ec:82:69:31:95:5e:a9:9c:8e:25:7d:59:0d:
         d7:5a:b4:6c:3a:08:ed:e0:f0:8e:ce:a7:21:34:53:a1:d1:36:
         ab:6f:a2:bf:f8:b4:7c:59:07:4a:78:92:11:fc:1b:42:98:48:
         9a:bb:d0:5a:b4:a5:fb:21:2e:8a:ee:1b:2e:ac:5b:08:a3:2b:
         6a:ee:b4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:51 2024 by rpki-client on console-fra.rpki-client.org