Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/1-eVB35GwhTX0zLH3y9zMuYoj9zc.roa
File:                     1-eVB35GwhTX0zLH3y9zMuYoj9zc.roa (raw, json)
Hash identifier:          FAQsnVQoTNVvJqoQ1UFrV42l3M5oDnys+LbF0Abc1Ng=
Subject key identifier:   F9:E5:41:DF:91:B0:85:35:F4:CC:B1:F7:CB:DC:CC:B9:8A:23:F7:37
Certificate issuer:       /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial:       018BD54C6CE1C9097D7054C2F40CCA64D829
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/1-eVB35GwhTX0zLH3y9zMuYoj9zc.roa
Signing time:             Wed 15 Nov 2023 23:23:57 +0000
ROA not before:           Wed 15 Nov 2023 23:23:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        45.150.55.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 20 Nov 2023 22:16:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:d5:4c:6c:e1:c9:09:7d:70:54:c2:f4:0c:ca:64:d8:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
        Validity
            Not Before: Nov 15 23:23:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f9e541df91b08535f4ccb1f7cbdcccb98a23f737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:66:4c:b6:37:c6:cd:66:8e:9c:77:2d:4f:a1:
                    33:cc:4d:69:00:4a:3f:0e:01:37:cc:b2:09:a6:1b:
                    0a:93:7d:50:d8:69:54:c6:35:5a:f6:0d:20:52:1f:
                    3a:c3:31:80:6a:13:68:9a:cf:d8:67:59:7c:06:38:
                    24:f9:57:7b:c6:ea:26:a5:38:9d:b6:98:c2:86:3d:
                    aa:db:2c:8e:b4:d0:e3:2f:c0:27:a3:db:50:e9:82:
                    40:1b:05:ac:8f:e7:27:e5:cd:0b:35:94:c0:0d:0f:
                    18:d9:0a:03:bc:79:3a:f7:10:4a:bb:9d:7e:ba:5e:
                    73:6b:2e:b0:67:ff:23:77:f9:74:68:c2:9f:b5:6c:
                    a8:8e:fe:d0:d2:66:19:da:1e:39:04:1b:37:e2:8b:
                    f9:b4:d2:8e:38:22:2d:44:0d:0b:da:59:3b:97:ad:
                    54:3d:ad:fc:9d:83:2f:0f:68:31:a4:fc:db:3a:b3:
                    d4:ea:d6:35:56:7d:28:ad:80:a7:f6:cd:1d:b4:7b:
                    f3:c6:23:a1:eb:9c:33:06:23:0d:d5:d4:48:64:19:
                    0f:88:be:9a:4a:56:41:91:fc:95:a5:0e:57:c7:2c:
                    e9:cc:10:c0:3a:86:88:61:b3:9d:86:22:ba:37:00:
                    b6:56:d1:7e:c9:f0:05:58:f4:a7:bd:4c:be:a9:53:
                    e3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E5:41:DF:91:B0:85:35:F4:CC:B1:F7:CB:DC:CC:B9:8A:23:F7:37
            X509v3 Authority Key Identifier:
                keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/1-eVB35GwhTX0zLH3y9zMuYoj9zc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:53:b6:15:3c:e0:6b:e9:09:33:ef:7c:ee:0d:32:c9:e3:ad:
         68:ce:93:32:5b:3f:b6:1a:da:10:ce:9d:53:39:fb:9a:73:cc:
         e4:11:19:e9:e2:b2:ca:65:6c:d5:8f:dc:b2:dd:b2:c6:f4:1d:
         aa:df:5b:a7:78:bb:28:a8:da:78:6f:3d:22:25:98:c2:63:59:
         2c:65:84:a4:86:f9:5f:bb:74:46:e6:7a:4e:90:4a:9a:f5:10:
         ce:74:61:2e:53:2e:6c:21:f6:de:2d:ee:85:77:2b:d3:f0:16:
         e4:c1:39:f3:bd:cf:91:2f:09:d8:e3:a0:ab:0d:5f:16:03:15:
         86:aa:4e:8f:18:04:4f:6b:c0:1d:5a:03:bc:9c:2b:53:6c:f1:
         ec:ce:ed:82:c4:8a:76:a4:0b:f1:19:9b:80:83:0f:1a:d0:30:
         59:12:a9:78:d8:87:b5:64:1d:cc:3d:d1:f8:8a:f2:b3:2a:f0:
         04:8d:b7:21:da:b0:7f:5f:fd:16:b4:1c:45:bb:bc:4e:8a:51:
         af:d4:d0:d7:69:3e:0c:cb:14:3b:0a:2b:be:9e:4f:2a:dc:b6:
         a4:b5:d4:14:6c:b3:f4:f0:36:a9:e2:03:1f:6e:9b:7e:d7:50:
         fe:91:1f:35:0e:9b:31:01:aa:67:4a:53:aa:77:49:82:c6:ee:
         f1:ee:ee:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org