Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Yi0F7mp_gSExrn-QjamDSSsyz44.roa
File:                     Yi0F7mp_gSExrn-QjamDSSsyz44.roa (raw, json)
Hash identifier:          wPy96StuM6aPzWSxXheIgWUNyKn7lN8YHSU3XuCtMpU=
Subject key identifier:   62:2D:05:EE:6A:7F:81:21:31:AE:7F:90:8D:A9:83:49:2B:32:CF:8E
Certificate issuer:       /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial:       0189680D588E457760216D803D18FC7612B9
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Yi0F7mp_gSExrn-QjamDSSsyz44.roa
Signing time:             Tue 18 Jul 2023 08:10:52 +0000
ROA not before:           Tue 18 Jul 2023 08:10:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        45.150.55.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 19 Jul 2023 17:56:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:68:0d:58:8e:45:77:60:21:6d:80:3d:18:fc:76:12:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
        Validity
            Not Before: Jul 18 08:10:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=622d05ee6a7f812131ae7f908da983492b32cf8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c9:22:fb:7c:d7:f5:2c:67:f8:11:fc:42:35:
                    e1:3b:84:50:32:8b:ae:ab:ad:cc:e1:dd:fe:d1:b0:
                    07:d9:ed:a3:ad:b8:63:15:7f:15:c3:d4:c0:b8:4c:
                    40:4c:2c:7c:18:9d:d4:21:56:b3:db:0d:c5:5e:fa:
                    c3:b1:d8:35:92:c5:00:7c:93:23:96:04:47:81:d1:
                    91:64:b4:9a:ce:7e:4f:f2:11:f4:26:af:ff:45:bc:
                    e1:c9:f7:42:f8:23:cc:2c:57:c2:5e:29:35:39:f6:
                    10:b7:90:16:3d:1a:23:54:71:89:ab:ba:e9:d5:52:
                    ff:d8:99:c5:34:44:47:f8:82:a6:49:e4:ea:4c:08:
                    a7:de:c6:f7:d4:0f:fc:ba:ae:41:7f:bb:3e:d0:f4:
                    a5:23:34:32:c4:1e:73:1d:3d:98:48:1a:c9:ab:6c:
                    2d:2d:6c:d4:b6:d9:80:9c:02:85:69:90:17:99:b4:
                    8e:1d:e2:b3:d3:43:14:74:a2:87:18:2e:a3:71:41:
                    2d:6b:2d:23:0c:83:73:ce:14:9a:5b:62:4c:5d:9f:
                    58:62:81:1d:ee:70:3d:a3:82:56:5f:d6:21:f6:c5:
                    3e:72:73:d3:82:0c:18:7a:f2:5c:1a:ff:b2:ad:30:
                    b7:be:1a:7f:b8:c7:d5:19:7c:3a:f4:50:87:6a:a3:
                    b7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:2D:05:EE:6A:7F:81:21:31:AE:7F:90:8D:A9:83:49:2B:32:CF:8E
            X509v3 Authority Key Identifier:
                keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Yi0F7mp_gSExrn-QjamDSSsyz44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:79:3d:73:7e:c0:f8:eb:ec:ec:b4:92:2e:80:ff:0f:5e:17:
         87:95:de:c3:2f:8b:3c:8b:92:af:ed:a7:9d:80:f7:b2:13:69:
         41:fa:04:9a:ab:bd:dc:95:23:66:13:67:56:69:07:4a:dd:de:
         a3:c0:0e:10:dd:8e:bf:b1:73:65:7e:8e:6b:35:b0:02:ab:c6:
         40:e4:1c:fe:21:05:f4:e1:f4:5c:04:17:36:60:6c:51:7a:e2:
         b3:77:fb:aa:f3:59:06:5b:9b:43:fd:cb:db:04:df:f4:5f:56:
         4d:77:90:87:60:53:1b:75:e3:6a:58:9b:64:bb:66:db:55:5d:
         31:02:8b:ef:f0:b4:0b:67:f7:42:43:7c:66:a9:94:ab:c6:01:
         aa:9d:86:08:73:bb:89:46:8f:69:31:3e:d4:93:4b:58:69:df:
         28:b3:df:46:1e:a4:7d:68:eb:12:9c:61:9c:dd:5e:f6:aa:f8:
         4e:83:42:f7:d8:2e:38:86:74:fd:06:2a:13:c5:06:4f:cc:78:
         ff:a2:08:19:97:fe:c0:30:25:24:96:cf:e2:03:dd:05:1b:6c:
         06:b4:36:3f:2a:ad:b0:57:18:12:46:e1:99:62:bb:11:cd:16:
         05:61:02:ba:29:ea:34:f8:85:1d:5a:0b:a4:7e:77:90:e6:db:
         85:02:f7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org