Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/dI9q64i_hs-86w9BW8m_elXwzoo.roa
File:                     dI9q64i_hs-86w9BW8m_elXwzoo.roa (raw, json)
Hash identifier:          18r5dWcxIIombC0d8akmwP0SWQbMEQvZuqv2G/Iyftk=
Subject key identifier:   74:8F:6A:EB:88:BF:86:CF:BC:EB:0F:41:5B:C9:BF:7A:55:F0:CE:8A
Certificate issuer:       /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial:       01888A47F6558A7045AF8B4302A5D40F4F36
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/dI9q64i_hs-86w9BW8m_elXwzoo.roa
Signing time:             Mon 05 Jun 2023 06:39:11 +0000
ROA not before:           Mon 05 Jun 2023 06:39:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        45.150.55.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 23 Jun 2023 11:16:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:8a:47:f6:55:8a:70:45:af:8b:43:02:a5:d4:0f:4f:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
        Validity
            Not Before: Jun  5 06:39:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=748f6aeb88bf86cfbceb0f415bc9bf7a55f0ce8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4a:46:ea:41:40:f0:d2:bf:f5:de:ef:71:87:
                    7e:81:11:61:bc:9e:e5:bc:35:8c:f4:a1:2d:5a:e3:
                    b2:05:1d:02:8c:83:49:ef:e9:1b:59:d6:ef:9d:2e:
                    90:6e:ad:e3:6b:ba:f8:a5:7f:c4:2c:9e:64:bb:15:
                    7b:2b:a4:aa:b6:50:9b:ca:73:b0:d6:fc:2e:de:3b:
                    bf:16:ea:dd:98:de:9a:a1:d4:e7:1f:01:9c:d0:c1:
                    d1:92:9e:ed:67:f5:1e:96:b1:98:da:e1:1e:cd:94:
                    f0:71:3e:ca:58:82:11:21:ac:cc:ab:6d:54:bb:94:
                    dc:31:ca:f3:43:89:9e:29:f7:e1:64:82:83:5d:e8:
                    5a:3f:51:0f:46:5d:08:99:5f:12:20:23:5f:29:2b:
                    33:df:b2:bb:6f:5e:aa:8f:86:08:b2:8a:e1:6e:f9:
                    e4:e1:10:73:ec:c2:c5:8f:0f:86:5d:0e:85:d5:ad:
                    d8:60:4c:e1:e9:24:60:2c:f2:95:f4:0e:cd:33:3d:
                    67:cb:cd:29:6e:16:df:96:ea:ba:f5:6c:3a:e5:3c:
                    00:54:97:ad:c6:e0:7f:4d:93:dd:6f:2d:74:6c:c6:
                    e7:41:f7:f1:90:93:a6:2a:53:13:03:77:ac:85:b8:
                    21:33:71:e0:63:6d:eb:fa:1c:cc:a5:0f:87:3a:9e:
                    fa:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:8F:6A:EB:88:BF:86:CF:BC:EB:0F:41:5B:C9:BF:7A:55:F0:CE:8A
            X509v3 Authority Key Identifier:
                keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/dI9q64i_hs-86w9BW8m_elXwzoo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:51:53:86:57:f3:3e:08:0a:d0:bb:20:c9:a8:57:f6:f4:33:
         91:c5:a7:ea:69:6b:18:be:ee:c1:0d:9d:76:97:6d:c0:98:69:
         f8:b9:0f:0d:a2:8b:c1:c0:b4:d8:e7:a5:98:d6:86:db:05:2e:
         9a:d2:6e:7c:af:b8:59:03:d8:87:3c:c3:75:3c:94:a6:1e:3f:
         d6:e3:c6:54:ff:14:84:11:cb:4c:51:ab:1d:a1:db:ed:9a:d0:
         f8:4f:db:3e:c0:b5:a9:0c:08:2f:c6:51:f4:39:69:35:90:b2:
         41:4c:eb:64:41:bd:45:0a:77:1f:9b:4c:fb:c0:0e:8d:89:66:
         3f:3c:56:5a:0d:48:01:7e:1f:01:55:18:ff:a2:9b:1f:49:cc:
         8b:18:de:1a:6e:ac:44:69:be:1f:7a:75:78:c0:bc:12:4e:b9:
         cf:81:ac:6e:cd:24:23:5a:8a:88:e4:3d:71:93:45:fd:c5:e2:
         09:cf:22:aa:ba:e2:ca:7a:a2:53:9a:b1:7d:6c:33:01:39:6d:
         22:e9:20:a3:b3:8b:60:ca:4d:93:67:32:b6:5c:77:d8:0e:a2:
         09:5c:10:17:c6:e2:40:63:09:5a:40:a5:61:17:c1:04:a9:d4:
         ee:a5:3c:a5:2f:36:7b:14:a3:0d:43:ef:5a:ee:d9:a6:1f:79:
         e8:51:95:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:43 2024 by rpki-client on console-ams.rpki-client.org