Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/ms7CATJBbrTeQSfiyurfQ8Q5vgs.roa
File:                     ms7CATJBbrTeQSfiyurfQ8Q5vgs.roa (raw, json)
Hash identifier:          P0QwYe8Y5aStJjrDn3OHukShzTpy/dhO2aHGU3ru+lw=
Subject key identifier:   9A:CE:C2:01:32:41:6E:B4:DE:41:27:E2:CA:EA:DF:43:C4:39:BE:0B
Certificate issuer:       /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial:       01856C785BEB71D1A9B3CD87E1EC6C1BD44C
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/ms7CATJBbrTeQSfiyurfQ8Q5vgs.roa
Signing time:             Sun 01 Jan 2023 08:35:05 +0000
ROA not before:           Sun 01 Jan 2023 08:35:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     134176
IP address blocks:        45.150.53.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 12 Sep 2023 19:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:78:5b:eb:71:d1:a9:b3:cd:87:e1:ec:6c:1b:d4:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
        Validity
            Not Before: Jan  1 08:35:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9acec20132416eb4de4127e2caeadf43c439be0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:55:99:82:8f:12:63:b4:da:5e:a5:31:cc:72:
                    c2:48:40:cd:19:8c:41:f3:48:22:93:5f:c6:c3:de:
                    09:68:8c:1c:0c:7d:ef:d8:80:1e:6d:18:4d:5c:79:
                    83:d7:83:be:a2:e5:2e:af:d8:a6:b3:6c:d5:ba:84:
                    4c:94:26:38:8a:da:b5:3b:ea:db:0b:c4:59:e3:e3:
                    f3:98:57:81:ed:69:d9:d7:41:2f:c0:90:84:36:41:
                    b9:5f:27:4a:14:17:f4:90:65:48:07:f7:43:4f:73:
                    69:85:a5:3e:d9:78:63:0c:23:ba:f2:04:32:bd:61:
                    ee:82:41:a7:ec:68:34:0b:59:e0:69:99:c3:1d:38:
                    c1:89:77:97:92:f0:a1:81:36:cc:59:19:6a:ac:a9:
                    71:11:d7:0e:14:0a:6a:54:4e:30:ff:63:68:97:3e:
                    ff:95:91:d3:f6:dc:bd:58:40:c9:52:2f:b9:bf:d8:
                    b6:39:34:8b:83:d3:ac:e4:ff:de:9a:f2:b8:3c:09:
                    e9:97:d2:1b:04:08:87:a6:d7:ea:0f:d1:a4:0b:fc:
                    6d:98:ea:fa:00:41:5e:47:a4:cb:5c:31:ac:f3:fe:
                    ae:3d:25:c9:b8:7d:04:50:fb:a1:49:e9:88:97:70:
                    cf:78:d8:62:ab:b7:83:d9:a9:d8:6b:3b:a4:27:f7:
                    ea:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:CE:C2:01:32:41:6E:B4:DE:41:27:E2:CA:EA:DF:43:C4:39:BE:0B
            X509v3 Authority Key Identifier:
                keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/ms7CATJBbrTeQSfiyurfQ8Q5vgs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:f1:20:5b:90:e6:84:5d:cc:a9:a5:16:33:fe:11:5f:8d:dc:
         4c:0e:3c:cc:58:67:cb:6e:8e:b6:18:80:15:d3:c7:2c:80:99:
         9c:f8:a7:59:5a:9e:ff:8e:e2:89:a7:6a:56:c6:78:44:27:e1:
         ee:64:36:ee:08:6f:9c:36:d7:a5:ad:b9:bb:fb:17:b9:29:4b:
         be:16:25:ee:c6:4b:98:a4:ed:da:b8:f7:3c:14:d0:8e:fd:03:
         2c:5c:a5:01:74:86:24:29:b2:74:3e:db:4c:29:86:67:8c:5a:
         52:b8:1b:eb:5d:8e:4f:79:ce:c9:e0:67:23:a5:c7:a2:4e:2f:
         ce:5c:7d:11:45:6e:75:62:eb:3e:31:b1:9d:b3:40:fb:51:97:
         6f:61:8b:84:a3:39:37:3e:d4:35:73:36:1d:09:16:db:ce:6f:
         ea:30:cd:73:0f:ad:b3:ea:b8:07:d0:60:3e:70:17:90:27:00:
         08:dd:00:3f:01:ef:82:df:1d:9b:ca:07:50:18:25:c5:13:be:
         6f:9a:5e:bf:88:a2:6f:8c:b8:42:0c:50:aa:cf:56:9e:2f:a5:
         ae:d0:41:2d:e3:f9:a6:48:37:73:bb:01:5a:51:e3:5e:35:c8:
         2a:08:d7:c4:7a:58:0c:b8:b2:de:98:35:bb:8c:4c:dd:70:8c:
         48:e1:63:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:49 2024 by rpki-client on console-ams.rpki-client.org