Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/77PFclF5tEWZ9QuASxRZjWg-sZk.roa
File:                     77PFclF5tEWZ9QuASxRZjWg-sZk.roa (raw, json)
Hash identifier:          /SIA6bixXH/U9bQWKDVfEFJx6g0p9BSw/GnpnqcgtGs=
Subject key identifier:   EF:B3:C5:72:51:79:B4:45:99:F5:0B:80:4B:14:59:8D:68:3E:B1:99
Certificate issuer:       /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial:       0188202B516E4E368DF62A7544D1CB8B6A2E
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/77PFclF5tEWZ9QuASxRZjWg-sZk.roa
Signing time:             Mon 15 May 2023 16:08:09 +0000
ROA not before:           Mon 15 May 2023 16:08:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     63902
IP address blocks:        45.150.54.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 12:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:20:2b:51:6e:4e:36:8d:f6:2a:75:44:d1:cb:8b:6a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
        Validity
            Not Before: May 15 16:08:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=efb3c5725179b44599f50b804b14598d683eb199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a3:00:ce:b1:0a:49:bb:17:61:08:68:ce:3a:
                    9b:ad:df:df:8f:13:1e:76:ac:08:47:c2:f9:59:a7:
                    94:da:18:f8:98:e2:32:98:8f:fc:63:00:19:b3:aa:
                    0b:68:fb:79:2e:3f:5e:0a:f3:d8:83:5a:7d:10:8d:
                    27:70:42:61:8d:5e:98:3e:5f:e4:31:d7:0c:ab:c0:
                    6e:fe:e5:04:39:6d:db:96:0c:23:2e:fd:d2:e4:b8:
                    16:76:eb:bc:7c:39:70:fe:01:0d:4e:20:68:80:1b:
                    32:99:47:a9:d2:13:c7:56:d9:d8:7a:5f:a8:ee:47:
                    76:2a:51:38:c2:ca:da:ad:d5:2a:f1:72:2d:49:33:
                    28:b0:e9:81:47:6e:66:c8:b7:26:e8:19:e4:d2:01:
                    48:74:11:3b:91:61:6c:71:cb:fe:b4:3c:ae:88:7f:
                    c3:21:21:c7:ab:15:54:df:9c:81:a5:89:73:c6:72:
                    a5:94:08:df:e6:d8:83:38:cc:38:55:da:77:46:a3:
                    8f:6e:6d:c2:6e:1e:f3:3e:9c:e6:2e:19:b3:ee:b8:
                    be:a2:51:10:1d:de:04:da:8c:92:91:7e:55:6b:b4:
                    e7:29:9d:c8:c2:71:04:0a:24:69:94:a9:a1:91:4b:
                    1c:3c:d0:9c:a5:9f:78:c2:7d:ae:37:f7:79:65:8f:
                    5c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B3:C5:72:51:79:B4:45:99:F5:0B:80:4B:14:59:8D:68:3E:B1:99
            X509v3 Authority Key Identifier:
                keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/77PFclF5tEWZ9QuASxRZjWg-sZk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:7b:4f:29:10:ec:de:02:c6:4b:6c:54:26:19:e6:f7:3e:34:
         b8:28:da:6b:19:7f:bb:d3:b6:6c:73:59:c5:77:12:7c:0e:26:
         ec:e9:d3:d4:57:ec:e4:30:86:50:d8:41:4f:fc:88:f2:2b:bb:
         b1:70:c9:a9:4d:4a:ad:ec:43:1f:63:84:c4:c1:1b:7c:06:ab:
         cd:e1:06:85:c6:10:f3:af:75:0c:97:63:c0:9b:3a:70:bd:60:
         a1:26:72:c7:dd:f3:06:78:4a:d9:bd:2e:9f:5c:68:30:ea:cf:
         0e:03:37:07:92:62:2e:72:7a:96:a6:92:35:ad:d1:12:2c:a4:
         d8:64:e9:f1:ee:23:ec:ac:00:ae:96:d7:98:a9:c8:c4:b4:b5:
         53:45:14:6b:aa:3f:21:32:5d:84:41:3c:47:f8:7f:b0:a4:ce:
         92:4c:1b:31:4d:35:9d:35:48:9a:a1:4a:c2:5d:1a:84:3a:42:
         55:d2:43:85:08:89:d3:8b:23:92:eb:bc:92:48:1b:a8:cd:81:
         96:c9:02:f5:11:13:d1:f4:a9:b3:3b:05:d1:94:5f:7c:ea:62:
         63:d6:6c:4f:e7:29:e1:af:88:a5:7f:53:a7:22:5c:78:a2:f3:
         5c:89:96:2a:6e:e1:53:e3:cf:9d:3d:d2:bd:60:c6:da:e8:d8:
         f7:1e:74:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:42 2024 by rpki-client on console-ams.rpki-client.org