Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/rELsHXFC1PF1aweEInAueRKdVjs.roa
File:                     rELsHXFC1PF1aweEInAueRKdVjs.roa (raw, json)
Hash identifier:          VDgEG+LsoR9YEQnYRzU8SE93hgsxLeMIJh70G8MAoEY=
Subject key identifier:   AC:42:EC:1D:71:42:D4:F1:75:6B:07:84:22:70:2E:79:12:9D:56:3B
Certificate issuer:       /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial:       018C7E1D1C60AE499586D969A8B0ED3C54F0
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/rELsHXFC1PF1aweEInAueRKdVjs.roa
Signing time:             Mon 18 Dec 2023 18:08:06 +0000
ROA not before:           Mon 18 Dec 2023 18:08:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        45.150.55.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 12:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:7e:1d:1c:60:ae:49:95:86:d9:69:a8:b0:ed:3c:54:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
        Validity
            Not Before: Dec 18 18:08:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ac42ec1d7142d4f1756b078422702e79129d563b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d8:c3:1f:d9:47:ce:77:16:21:75:76:3b:6d:
                    1d:7e:16:21:39:ee:2c:e1:e6:61:ad:cd:cd:4b:46:
                    fb:11:ff:9f:9f:1d:34:b0:ae:88:bf:b0:7f:4a:70:
                    51:bb:4a:fb:3a:d5:55:ed:cf:84:1e:08:5f:74:20:
                    d9:31:e2:27:5f:50:8f:2c:19:66:31:81:1c:ce:f7:
                    82:78:23:50:cc:70:03:92:ac:95:b2:7e:92:0f:83:
                    27:3a:63:58:3b:46:a1:44:8e:92:f1:d5:8e:df:44:
                    fe:ef:2f:1a:7a:51:2a:b4:21:88:44:cc:22:db:71:
                    58:38:2f:97:c5:2a:25:26:8e:d4:05:9f:1e:fd:7e:
                    a5:6b:27:c9:0e:38:00:12:3a:dd:fc:e3:ea:fd:8f:
                    2e:db:90:34:e0:aa:c7:a8:7c:ea:01:fe:a8:e3:d0:
                    bf:f7:bf:6e:77:7a:19:65:7a:aa:32:d7:c5:87:4c:
                    c6:1b:ff:02:b8:ab:ee:d5:4f:54:76:ee:20:09:b3:
                    7a:84:53:45:76:03:11:9b:3d:57:01:ab:29:35:ea:
                    fa:7f:f5:36:f2:a7:b2:5c:8a:ea:34:cd:58:cc:b3:
                    66:2a:54:6e:2f:ce:b1:e2:53:ea:e4:ee:50:3c:ce:
                    15:46:65:53:7f:bf:9e:b7:c9:31:58:78:31:4d:27:
                    58:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:42:EC:1D:71:42:D4:F1:75:6B:07:84:22:70:2E:79:12:9D:56:3B
            X509v3 Authority Key Identifier:
                keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/rELsHXFC1PF1aweEInAueRKdVjs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:b1:f6:84:13:8f:68:79:9f:2f:cb:14:02:18:e4:65:18:6e:
         45:53:fc:2a:95:b0:76:ac:67:2d:34:d5:95:51:20:4a:96:85:
         6d:a2:05:b2:86:7e:86:48:32:38:5f:71:ae:5e:5c:07:d6:d5:
         e9:ee:4b:22:4f:cc:00:ed:e3:a1:6f:cf:66:04:f0:1a:6a:99:
         f5:3a:54:dc:4d:1c:1b:38:3c:9b:0f:ee:d1:f2:97:ea:8a:25:
         80:b3:02:19:ff:cd:f1:51:d8:14:fb:4e:c5:38:2a:62:e8:6f:
         e1:fa:bc:5c:7f:24:6d:41:b7:5a:95:c2:68:58:dd:1b:45:77:
         30:8f:4d:d7:ec:f2:d9:7a:79:66:ef:ae:22:38:57:bc:f7:fa:
         2e:40:b8:0c:26:10:52:af:aa:9c:74:36:4e:cb:c0:47:b3:5b:
         3a:dd:15:ef:c9:f6:90:0f:dd:07:56:b6:67:a5:8c:4f:87:8d:
         0f:0b:44:2b:56:01:37:04:5c:e6:11:e6:45:bb:b0:9d:04:2f:
         fc:4e:04:d2:14:67:42:5d:0e:5c:6a:3d:f8:b0:6e:88:9b:ef:
         6e:db:9c:40:97:8d:6e:c7:ca:5b:e7:5a:a4:e5:bb:ba:ad:24:
         bf:a6:66:24:ec:08:44:88:c3:fe:56:11:89:61:20:9e:5c:8f:
         d1:62:3d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:49 2024 by rpki-client on console-ams.rpki-client.org