Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/1rKWIDp6OtPb6R1CSdIAJfK3hC8.roa
File:                     1rKWIDp6OtPb6R1CSdIAJfK3hC8.roa (raw, json)
Hash identifier:          WBzShpluQ7UKBcLnwacinuJ2NB9nT2wZn++7Aq2nEkE=
Subject key identifier:   D6:B2:96:20:3A:7A:3A:D3:DB:E9:1D:42:49:D2:00:25:F2:B7:84:2F
Certificate issuer:       /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial:       01882F9F121F8CD92248273B3D43F2250873
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/1rKWIDp6OtPb6R1CSdIAJfK3hC8.roa
Signing time:             Thu 18 May 2023 16:08:53 +0000
ROA not before:           Thu 18 May 2023 16:08:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        45.150.55.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 02 Jun 2023 04:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:2f:9f:12:1f:8c:d9:22:48:27:3b:3d:43:f2:25:08:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
        Validity
            Not Before: May 18 16:08:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d6b296203a7a3ad3dbe91d4249d20025f2b7842f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6d:dc:de:78:34:7f:58:a0:d8:69:64:68:6f:
                    12:fb:a9:e6:12:84:05:29:0d:77:57:fd:4a:bd:97:
                    81:e7:75:5c:b4:e0:96:e6:0c:95:b0:b9:d8:67:ff:
                    88:4b:03:57:63:7b:a4:4c:a2:05:38:42:a3:7c:9e:
                    35:4e:e4:95:0f:4f:ec:1d:6f:50:f1:82:d7:52:b1:
                    6d:a5:de:9e:fb:21:82:27:da:20:27:73:38:84:67:
                    42:cf:53:a0:a7:0f:72:ab:e2:75:28:ab:95:18:9f:
                    91:b1:60:ad:ed:15:c9:c9:ef:35:d7:2c:90:a0:bf:
                    53:dd:be:99:9d:fe:a3:94:87:aa:d2:85:da:b9:ee:
                    43:20:96:4d:79:d9:34:c3:90:e3:e5:11:71:b5:c5:
                    ce:7f:d1:7b:5c:6a:0d:b3:34:d2:a4:9d:1d:ce:0e:
                    69:37:0a:b5:c6:10:fd:37:80:2b:49:27:44:94:39:
                    2d:da:27:43:a1:2b:8a:c0:f4:bf:6f:d0:91:95:d2:
                    72:6f:68:9f:d5:ab:35:ab:37:2d:8a:ac:43:67:e5:
                    3f:82:30:74:71:6f:50:b1:0b:24:d1:4c:e1:15:e3:
                    f4:2c:84:8f:25:a7:1d:97:69:c5:5f:e9:9b:15:0b:
                    95:ef:d8:bb:36:36:79:3f:7c:db:f7:3a:b4:f1:2c:
                    e9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B2:96:20:3A:7A:3A:D3:DB:E9:1D:42:49:D2:00:25:F2:B7:84:2F
            X509v3 Authority Key Identifier:
                keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/1rKWIDp6OtPb6R1CSdIAJfK3hC8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:26:4f:60:c2:56:63:45:c2:79:6c:85:08:51:d1:a4:d5:83:
         e7:7e:95:6e:1b:ab:64:2e:3f:7a:dd:7d:8c:ca:5b:86:52:db:
         e1:36:79:9b:cd:c8:ce:d4:e4:65:fd:e1:24:8c:88:fd:d6:26:
         33:fa:af:0f:1f:aa:03:66:63:8e:11:ef:8f:9c:5f:fb:27:62:
         57:64:2d:83:2f:37:6c:20:c5:12:1a:1d:73:48:2b:73:8b:55:
         0a:09:57:12:bb:9b:cb:c8:0f:48:19:f2:e3:09:81:1a:29:d2:
         b6:2b:a7:9d:e3:30:32:83:6b:e2:2b:b1:ce:b2:99:70:75:de:
         55:48:9a:f3:7c:85:40:26:81:b8:31:c2:23:71:74:d2:2b:c7:
         9d:22:d3:f8:b8:ed:6e:c4:2e:20:38:43:38:26:d3:8f:ce:d4:
         f6:c5:d7:9a:d3:8e:32:4b:45:ce:12:91:05:af:85:47:2b:bf:
         b9:2c:13:93:92:59:37:49:0e:bf:33:28:ef:3e:87:d7:cc:c2:
         ee:fb:e7:ef:74:91:da:4f:34:91:a1:c4:4d:ca:83:e3:94:48:
         fd:03:46:cc:0b:7c:3e:d5:b3:69:e0:3d:6d:a4:4e:2d:50:3c:
         21:f6:d3:81:34:c4:6c:0f:7f:14:30:06:4f:2d:73:8c:26:8e:
         68:26:ef:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org