Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/G5zN7ZwwoZaD9i2v8ORmY9mQqGQ.roa
File:                     G5zN7ZwwoZaD9i2v8ORmY9mQqGQ.roa (raw, json)
Hash identifier:          wGnyCDKurzFGHP5KJnpiKz+PQ0gpaNYYbRGCvBy/uKc=
Subject key identifier:   1B:9C:CD:ED:9C:30:A1:96:83:F6:2D:AF:F0:E4:66:63:D9:90:A8:64
Certificate issuer:       /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial:       018BB9BF342E5B0875DDEC67E4C0B6DF7966
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/G5zN7ZwwoZaD9i2v8ORmY9mQqGQ.roa
Signing time:             Fri 10 Nov 2023 14:59:57 +0000
ROA not before:           Fri 10 Nov 2023 14:59:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        45.150.55.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 13 Nov 2023 01:46:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b9:bf:34:2e:5b:08:75:dd:ec:67:e4:c0:b6:df:79:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
        Validity
            Not Before: Nov 10 14:59:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1b9ccded9c30a19683f62daff0e46663d990a864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ad:2f:ac:10:25:87:84:09:2c:25:03:8a:58:
                    59:8d:64:0a:ad:fe:70:66:07:ec:f7:34:b0:d4:9e:
                    78:80:45:eb:cc:37:55:30:b6:f0:87:8b:5e:18:00:
                    18:a7:2e:72:65:45:4c:cf:71:a5:f6:85:94:e2:40:
                    b7:df:64:db:29:1b:fc:86:2c:94:00:b7:69:fb:50:
                    53:7e:40:3a:ea:44:2b:4e:ad:9e:ba:5c:5d:f6:2d:
                    d1:e3:6f:15:70:15:b2:bd:f5:61:1d:50:fc:97:c5:
                    6f:72:0e:74:9b:97:61:93:15:1a:15:a4:6b:0d:9b:
                    2c:22:65:1f:9b:48:9d:e7:79:61:80:14:ef:c4:72:
                    4a:b1:42:be:30:4c:cc:4d:27:63:31:c7:9e:e5:ad:
                    ae:05:bd:79:90:82:00:d5:ef:d8:10:1f:d2:34:5f:
                    54:76:ae:16:1e:c7:60:91:1b:4f:45:7c:a0:32:59:
                    d5:0b:dd:53:41:54:8f:85:cf:cf:94:d5:b7:51:0a:
                    60:ec:d3:f6:a6:07:20:84:e8:fe:31:79:dd:a2:04:
                    89:34:c8:d5:1c:78:23:58:c8:01:e7:e3:41:45:cf:
                    01:d2:06:a5:7f:1a:8f:9e:21:2b:47:0c:5b:4b:9c:
                    ee:c5:d3:dd:69:70:46:7b:d7:9b:86:46:4a:5c:1b:
                    31:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:9C:CD:ED:9C:30:A1:96:83:F6:2D:AF:F0:E4:66:63:D9:90:A8:64
            X509v3 Authority Key Identifier:
                keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/G5zN7ZwwoZaD9i2v8ORmY9mQqGQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:77:4b:50:83:6d:fc:27:da:0f:9e:75:0c:d7:5e:23:68:67:
         f3:2a:7a:ff:74:94:0d:11:42:15:d6:1e:23:47:57:1c:d0:78:
         0c:03:c3:d3:b8:fb:73:dd:0a:e6:35:ec:45:60:c6:52:df:19:
         bb:b4:e2:c9:df:72:d2:8d:30:e4:0a:3a:ad:76:bc:47:90:dd:
         d1:3f:3e:df:65:3f:68:11:22:05:c3:9d:03:76:a3:0a:b6:13:
         75:46:44:17:ea:c4:1f:c9:02:b6:2f:61:c3:d4:b1:19:6d:ab:
         71:fe:31:83:91:45:a2:3f:dc:3a:bd:7a:cf:1c:a7:5b:30:c5:
         56:c9:79:f9:82:7a:36:4a:6e:77:7a:38:06:14:84:40:ec:4c:
         77:54:9d:e2:a2:0d:c1:37:07:2a:94:26:d9:6c:b9:25:48:51:
         b3:a7:bc:24:db:3f:5c:3d:2d:27:5f:73:3d:a2:ce:dd:6e:dd:
         99:36:4a:d0:a1:b9:69:84:27:96:51:d0:64:f0:a8:6c:37:94:
         15:7b:38:33:af:68:dd:ef:8d:dc:60:69:32:3f:04:16:eb:c0:
         91:52:eb:43:67:e5:fe:b5:58:2e:db:95:3a:46:c0:6f:7f:5c:
         13:59:9e:d3:9d:68:59:db:bd:47:d7:8e:c3:cc:b7:a4:47:c2:
         1b:85:5c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org