Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/d12pYuRY9fyIOETjmRyQhtTAdug.roa
File:                     d12pYuRY9fyIOETjmRyQhtTAdug.roa (raw, json)
Hash identifier:          hCNyO4rsMaVXurp47qc0NhDM57dIBhKs6seEkxz7PR0=
Subject key identifier:   77:5D:A9:62:E4:58:F5:FC:88:38:44:E3:99:1C:90:86:D4:C0:76:E8
Certificate issuer:       /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial:       01874EEB950AFA763FCB933867D418CA6394
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/d12pYuRY9fyIOETjmRyQhtTAdug.roa
Signing time:             Wed 05 Apr 2023 00:57:54 +0000
ROA not before:           Wed 05 Apr 2023 00:57:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43260
IP address blocks:        176.105.230.0/24 maxlen: 24
                          45.150.55.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 17 Apr 2023 13:14:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:4e:eb:95:0a:fa:76:3f:cb:93:38:67:d4:18:ca:63:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
        Validity
            Not Before: Apr  5 00:57:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=775da962e458f5fc883844e3991c9086d4c076e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:89:bd:57:11:3b:59:d1:59:9f:80:3d:7c:74:
                    91:35:0b:20:2d:21:1f:f3:59:42:b2:b5:51:8f:18:
                    50:83:5d:86:6d:72:2a:8c:72:62:a1:0e:4c:d1:82:
                    22:71:6c:47:25:01:b7:34:d9:8b:99:15:23:d8:b6:
                    49:a0:99:56:3c:5a:b1:0b:5a:a2:66:9f:37:37:29:
                    02:93:4c:b1:6f:61:07:36:15:d9:19:b9:34:e2:49:
                    96:86:74:c8:91:ad:cc:f2:5f:db:73:ed:fe:f2:af:
                    51:d1:11:dc:dd:f2:7e:1f:a4:68:49:e3:7f:cd:52:
                    16:9b:bf:1a:ba:d1:c6:fe:12:41:7a:fa:ee:ac:a4:
                    33:f6:09:54:a2:63:6b:42:c9:ae:3b:33:f6:a8:16:
                    97:16:28:47:58:56:bc:82:15:7e:6c:d8:5a:2f:5c:
                    34:6b:ae:7c:02:0e:63:41:ac:e6:14:6c:23:b2:2a:
                    cb:8f:cd:6d:3c:24:11:bc:5a:a9:b1:3c:49:89:df:
                    64:58:96:cc:af:c0:ab:16:6b:20:c5:77:01:9c:48:
                    8b:10:36:ee:3b:c9:e8:4b:6b:0e:ed:2e:e6:40:33:
                    8c:a1:88:ff:6c:08:d9:d2:1f:9d:e6:f7:b8:22:1d:
                    52:08:aa:54:e5:dd:d1:b9:f8:05:95:19:28:2b:ec:
                    ce:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:5D:A9:62:E4:58:F5:FC:88:38:44:E3:99:1C:90:86:D4:C0:76:E8
            X509v3 Authority Key Identifier:
                keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/d12pYuRY9fyIOETjmRyQhtTAdug.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.55.0/24
                  176.105.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:13:f5:25:e2:ad:68:63:8c:7b:3f:61:1a:90:0b:e9:4d:7a:
         72:de:b4:57:88:df:bb:c1:13:8e:65:4d:e7:54:90:c4:e2:d2:
         9b:11:e4:e7:53:81:70:c5:20:db:35:72:5d:33:2f:61:dd:37:
         71:b0:dd:de:ef:2d:bf:da:b1:2b:b7:d2:e3:8b:b1:01:b7:42:
         80:b2:e6:7c:67:67:5c:bf:80:82:cb:21:ac:75:75:ae:1e:ac:
         8e:b9:ee:9a:37:06:b2:89:2f:b8:de:7c:aa:b3:1d:21:02:b2:
         26:ac:82:8b:d0:98:8e:5e:b9:00:eb:3b:03:ae:db:ca:b7:6f:
         b2:de:27:5f:6d:a4:fb:09:e1:0c:ac:fb:7e:3e:e2:c8:2b:c3:
         6a:0d:cf:57:97:88:f7:1b:b1:8d:fa:f8:c5:67:77:96:14:f4:
         52:1b:58:6b:0c:90:7d:55:ea:07:17:17:ef:ec:c2:c5:c7:35:
         43:32:6c:c2:fb:5e:1a:f4:62:3a:53:95:bd:d5:ed:9d:32:7b:
         72:87:12:10:10:0c:23:63:2d:90:21:3c:0f:ff:e7:a9:e1:1b:
         4d:3e:9a:94:c0:b8:6b:ad:b5:37:11:10:e5:92:de:e2:22:0c:
         ca:b7:22:0c:0f:71:63:8c:3b:27:82:18:59:35:ad:cd:c4:df:
         2e:44:f9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:43 2024 by rpki-client on console-ams.rpki-client.org