Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/L6voE-el-xOZ28r5BEsbi5xE1zU.roa
File:                     L6voE-el-xOZ28r5BEsbi5xE1zU.roa (raw, json)
Hash identifier:          PYqdpYT6tS5D9RVCEOsbGkzCfhhWMSgLm76bE5IHCJs=
Subject key identifier:   2F:AB:E8:13:E7:A5:FB:13:99:DB:CA:F9:04:4B:1B:8B:9C:44:D7:35
Certificate issuer:       /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial:       01856C78576FD970A0C5E1440A45B47DA2F7
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/L6voE-el-xOZ28r5BEsbi5xE1zU.roa
Signing time:             Sun 01 Jan 2023 08:35:04 +0000
ROA not before:           Sun 01 Jan 2023 08:35:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     9009
IP address blocks:        45.150.54.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Fri 10 Mar 2023 04:05:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:78:57:6f:d9:70:a0:c5:e1:44:0a:45:b4:7d:a2:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
        Validity
            Not Before: Jan  1 08:35:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2fabe813e7a5fb1399dbcaf9044b1b8b9c44d735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:32:25:5c:5e:0d:61:3d:24:fc:21:a0:b4:93:
                    e7:fc:95:6b:3a:37:2e:97:92:77:29:01:d4:96:24:
                    02:e8:c1:cc:9f:a9:20:dd:f5:d0:16:84:f8:23:9a:
                    20:10:fc:97:64:b1:91:06:27:23:dc:ec:9d:bd:ed:
                    20:79:89:be:7c:2b:b6:aa:cb:d7:7e:c4:4e:09:8f:
                    d4:02:71:63:4e:e3:b5:e6:13:39:67:40:50:cf:d5:
                    94:35:e4:47:9f:e4:54:39:a3:9a:40:5e:4d:fe:36:
                    1e:e8:a4:b7:15:04:0c:6d:45:d8:31:68:4d:7c:3b:
                    1e:89:58:71:e5:cc:da:bb:49:5a:68:00:de:e2:3e:
                    76:1f:28:6f:07:04:7d:4a:0c:14:ef:4a:25:15:19:
                    83:ac:70:ad:d4:10:c9:9c:07:4c:74:b1:4b:b3:28:
                    8c:30:22:8a:01:ce:f8:18:c0:16:8c:5f:e2:c4:3f:
                    9b:56:13:5b:99:0b:37:25:de:bf:86:64:fa:ce:75:
                    17:91:a7:7b:04:87:10:6e:3f:65:7b:5a:80:40:03:
                    f7:a7:73:50:65:df:99:42:5a:6a:fb:e4:1d:9b:4c:
                    9e:2a:d2:3b:3b:15:48:1d:8b:6e:84:87:cb:15:ea:
                    bb:d2:e9:b1:a5:28:96:1e:4f:73:0b:f3:ac:c1:b1:
                    02:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:AB:E8:13:E7:A5:FB:13:99:DB:CA:F9:04:4B:1B:8B:9C:44:D7:35
            X509v3 Authority Key Identifier:
                keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/L6voE-el-xOZ28r5BEsbi5xE1zU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:a6:6f:f6:4c:4f:2c:26:9d:df:aa:13:57:aa:75:c7:cd:ad:
         a6:2d:7f:68:00:2a:dd:fd:d9:0f:83:b3:a0:4f:89:2f:7a:b7:
         98:9d:52:72:a8:5b:df:9a:bd:60:8a:5d:dc:12:0f:51:75:aa:
         92:cc:f0:9c:2f:fa:79:97:62:cb:a5:12:a5:7d:c7:9b:40:14:
         95:1f:08:79:c0:bd:1d:74:15:78:5c:f9:ad:bb:cc:91:d0:ad:
         be:ef:c2:25:e8:1e:de:83:ac:01:51:41:22:24:59:14:90:55:
         26:e6:81:00:5f:7f:df:da:df:0d:c2:ac:8f:ae:a4:ed:27:28:
         10:9f:2d:29:dd:8b:37:85:47:ae:08:44:77:eb:f4:5e:67:ce:
         f7:20:e6:14:18:2c:6f:a1:a4:ee:db:01:42:57:15:18:c3:d9:
         b8:4c:55:84:ce:4c:21:6a:4b:1a:7d:52:8c:b5:cf:96:48:df:
         9f:e1:1d:ca:d3:e8:7e:fa:ce:28:53:12:a4:23:ba:26:23:e7:
         e6:a7:e1:1f:bd:ce:65:04:d0:5e:0d:95:52:12:9b:4f:48:2b:
         5d:ee:c3:98:7d:ff:48:fb:01:d9:3e:64:a8:7d:ab:51:2a:3d:
         14:d0:63:4a:ac:d7:1d:e2:23:a7:53:f1:b3:dd:7a:bb:db:99:
         30:67:3e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:42 2024 by rpki-client on console-ams.rpki-client.org