Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/e33BXYBolIHNKuw3oaz4c2UpeT0.roa
File:                     e33BXYBolIHNKuw3oaz4c2UpeT0.roa (raw, json)
Hash identifier:          nZa1ExFtgKldFALI0s/iMX13/Ppu6WU8+mT89L1/Ak0=
Subject key identifier:   7B:7D:C1:5D:80:68:94:81:CD:2A:EC:37:A1:AC:F8:73:65:29:79:3D
Certificate issuer:       /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial:       018AAC2266659E66CC33B0A0A27DEBEF58D7
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/e33BXYBolIHNKuw3oaz4c2UpeT0.roa
Signing time:             Tue 19 Sep 2023 06:30:50 +0000
ROA not before:           Tue 19 Sep 2023 06:30:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        45.150.55.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 03 Oct 2023 01:24:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:ac:22:66:65:9e:66:cc:33:b0:a0:a2:7d:eb:ef:58:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
        Validity
            Not Before: Sep 19 06:30:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7b7dc15d80689481cd2aec37a1acf8736529793d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:92:9d:19:cb:f6:31:df:6c:0e:75:c1:57:2a:
                    fc:bf:b3:43:0c:a1:e7:77:19:c3:fa:ec:83:d2:5d:
                    c7:68:9e:e1:78:17:71:cf:56:d7:77:01:b4:ee:6d:
                    7e:6a:56:fd:0e:7a:03:36:d1:7f:46:61:ac:86:2f:
                    a6:00:20:d4:29:a9:81:11:cc:4c:07:01:da:a9:68:
                    da:2a:52:c5:1c:3e:e8:e2:f1:e7:25:7e:fb:1a:6a:
                    46:df:c8:63:cf:2d:03:d5:43:e4:f1:49:95:d0:2f:
                    71:e4:f4:85:2b:e0:77:3b:98:15:74:93:1c:ad:e8:
                    0c:0f:bc:9e:78:80:21:d1:06:c2:24:1c:4c:97:f5:
                    c7:df:d0:9f:d7:0f:e3:b9:25:f8:a2:e3:2c:af:cb:
                    0a:cf:7c:ec:1e:0b:ef:7e:cc:b3:f1:57:42:bc:9d:
                    ec:43:36:63:05:e6:8a:5e:28:3a:03:ab:f1:bf:27:
                    99:43:1a:2d:cd:d8:1d:ef:89:c6:a5:83:1c:37:aa:
                    8a:df:d9:9e:6a:f9:46:ea:03:ef:03:f1:4f:1b:84:
                    bc:fe:c5:54:d5:0c:b6:c4:7e:fd:3c:02:fa:ec:51:
                    b1:ee:ac:a0:20:54:f2:62:c2:9f:78:ba:03:10:e4:
                    26:b5:06:3a:90:32:c3:07:44:f9:88:2a:a4:60:5d:
                    a7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:7D:C1:5D:80:68:94:81:CD:2A:EC:37:A1:AC:F8:73:65:29:79:3D
            X509v3 Authority Key Identifier:
                keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/e33BXYBolIHNKuw3oaz4c2UpeT0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:3d:24:b2:5d:93:22:f3:b5:dd:35:e3:d4:d7:d4:55:88:50:
         1c:e2:fa:65:82:27:45:c1:a8:3e:76:e4:08:fe:74:64:ef:0a:
         54:fa:80:98:9a:9e:e9:c8:18:3a:6a:ac:fd:a2:c4:48:29:0f:
         22:73:51:7f:79:a6:ec:48:7f:8e:33:6f:57:6c:de:65:91:7b:
         59:e5:6c:df:d7:bd:2e:c6:a9:c8:dd:7c:2a:de:a8:2d:48:2b:
         4d:5f:c7:fc:56:94:c5:94:36:2f:95:58:b4:3e:fa:39:d8:ce:
         ae:c0:8a:9c:e8:ec:16:c7:59:51:f5:e8:ab:53:7c:af:bf:67:
         11:ab:54:10:6c:c1:ec:41:34:48:a5:75:0d:a8:6e:b4:0e:5c:
         af:49:a2:85:d7:f3:33:9d:27:e4:f1:3c:44:76:1f:59:7d:20:
         a0:73:b3:c8:eb:12:fb:03:31:59:93:45:18:bd:74:92:1f:95:
         80:e3:b6:9c:c5:df:65:89:b6:17:de:4e:8c:95:22:8b:3a:df:
         8b:a3:e3:19:f8:24:a4:73:34:f8:21:ba:73:62:81:f4:42:76:
         7b:46:71:15:73:3e:3c:d9:02:b0:c1:a1:c3:1b:57:af:da:ba:
         97:b3:ba:32:02:0c:91:b2:ff:15:b1:c0:d1:2e:d6:07:ec:e0:
         06:b1:24:8d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqsImZlnmbMM7Cgon3r71jXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjMwOTE5MDYzMDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjdkYzE1ZDgwNjg5NDgxY2QyYWVjMzdhMWFjZjg3MzY1Mjk3OTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZKdGcv2Md9sDnXBVyr8v7NDDKHn
dxnD+uyD0l3HaJ7heBdxz1bXdwG07m1+alb9DnoDNtF/RmGshi+mACDUKamBEcxM
BwHaqWjaKlLFHD7o4vHnJX77GmpG38hjzy0D1UPk8UmV0C9x5PSFK+B3O5gVdJMc
regMD7yeeIAh0QbCJBxMl/XH39Cf1w/juSX4ouMsr8sKz3zsHgvvfsyz8VdCvJ3s
QzZjBeaKXig6A6vxvyeZQxotzdgd74nGpYMcN6qK39meavlG6gPvA/FPG4S8/sVU
1Qy2xH79PAL67FGx7qygIFTyYsKfeLoDEOQmtQY6kDLDB0T5iCqkYF2nmwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHt9wV2AaJSBzSrsN6Gs+HNlKXk9MB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvZTMzQlhZQm9sSUhOS3V3M29hejRjMlVwZVQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZY3MA0G
CSqGSIb3DQEBCwUAA4IBAQAJPSSyXZMi87XdNePU19RViFAc4vplgidFwag+duQI
/nRk7wpU+oCYmp7pyBg6aqz9osRIKQ8ic1F/eabsSH+OM29XbN5lkXtZ5Wzf170u
xqnI3Xwq3qgtSCtNX8f8VpTFlDYvlVi0Pvo52M6uwIqc6OwWx1lR9eirU3yvv2cR
q1QQbMHsQTRIpXUNqG60DlyvSaKF1/MznSfk8TxEdh9ZfSCgc7PI6xL7AzFZk0UY
vXSSH5WA47acxd9libYX3k6MlSKLOt+Lo+MZ+CSkczT4IbpzYoH0QnZ7RnEVcz48
2QKwwaHDG1ev2rqXs7oyAgyRsv8VscDRLtYH7OAGsSSN
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:43 2024 by rpki-client on console-ams.rpki-client.org