Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/J-sR2Lmhv4tHvuUhV-MAxriBYwA.roa
File:                     J-sR2Lmhv4tHvuUhV-MAxriBYwA.roa (raw, json)
Hash identifier:          Iabmnx+7BHKbQhHzAUMX7oa3jjr4iWIf70o6AMJm12Q=
Subject key identifier:   27:EB:11:D8:B9:A1:BF:8B:47:BE:E5:21:57:E3:00:C6:B8:81:63:00
Certificate issuer:       /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial:       0186F34408D3509398199337511044B8017B
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/J-sR2Lmhv4tHvuUhV-MAxriBYwA.roa
Signing time:             Sat 18 Mar 2023 05:49:27 +0000
ROA not before:           Sat 18 Mar 2023 05:49:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        45.149.61.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 01 Jun 2023 16:37:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:f3:44:08:d3:50:93:98:19:93:37:51:10:44:b8:01:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
        Validity
            Not Before: Mar 18 05:49:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=27eb11d8b9a1bf8b47bee52157e300c6b8816300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1d:95:88:7d:13:73:30:c7:43:31:c2:b7:35:
                    fd:65:fb:4a:db:d4:41:8a:14:4c:c1:41:d4:04:bf:
                    b9:67:9d:8b:1d:d8:90:91:2c:af:a4:a1:6f:90:c6:
                    8e:94:b8:74:33:0d:ce:5a:c1:72:a0:cc:45:b8:b9:
                    68:fa:4d:c6:b6:7b:be:38:39:b0:7e:6f:25:12:62:
                    9b:ce:e8:ac:a0:8a:52:17:07:6d:50:e1:69:6c:5b:
                    5f:9c:c1:9d:16:43:16:94:72:16:c5:64:7b:a2:0f:
                    96:62:51:6a:7c:4f:70:eb:96:1c:f3:0f:04:c9:25:
                    bd:c4:d0:98:d0:a0:08:65:8b:c0:0c:15:1a:2d:d3:
                    04:16:3c:6b:b1:90:43:56:92:5a:cb:8b:3c:e9:f9:
                    d5:ec:97:f4:e1:5d:b4:36:fb:82:0d:fd:21:04:c0:
                    a8:5c:29:aa:c4:cd:dc:7a:70:b6:e1:54:54:88:b4:
                    f1:f1:3e:69:fc:5c:ec:c8:a3:9f:3a:de:60:08:0d:
                    b4:a9:84:a5:e8:3e:0a:fb:b3:ad:65:6c:e8:bb:21:
                    e4:31:6f:18:e2:e5:c1:5b:24:e1:24:b9:19:c7:1c:
                    9f:a6:65:33:c8:f9:64:83:65:37:9f:e5:a9:cf:c7:
                    8d:9a:04:13:38:da:c8:b3:da:0f:24:29:b1:9a:ea:
                    35:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EB:11:D8:B9:A1:BF:8B:47:BE:E5:21:57:E3:00:C6:B8:81:63:00
            X509v3 Authority Key Identifier:
                keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/J-sR2Lmhv4tHvuUhV-MAxriBYwA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.149.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:42:4a:e4:84:66:5b:e2:f4:1c:5b:8f:5d:e9:b3:8b:85:52:
         bf:31:8c:10:b7:43:60:2d:d2:52:34:1d:95:b1:a4:a5:1a:89:
         b4:73:71:55:d2:4f:43:b1:b3:13:dd:8c:1c:97:80:43:c2:5b:
         8e:31:e7:e0:bc:a1:74:c5:b5:a6:fd:33:7d:b2:f1:74:d3:b5:
         93:75:d1:3a:2a:c0:a9:6c:ae:c7:07:ec:25:68:f8:8f:52:62:
         9b:8b:dd:3b:69:41:24:39:14:fa:b3:42:d7:7e:52:85:65:cf:
         fa:91:d6:53:a2:d2:f2:1e:29:1a:74:55:50:74:31:d4:e6:91:
         f7:bc:de:af:7f:dd:ff:43:c9:ee:b0:a9:50:e9:28:e9:28:86:
         ae:5a:c2:10:49:6f:ff:27:ab:21:04:2f:ba:b4:2a:08:73:dc:
         aa:6f:5b:37:32:79:bc:9d:20:1c:95:ab:60:58:e4:1e:21:34:
         e1:98:4c:67:03:76:18:ff:4a:ef:8a:27:e3:b8:81:f2:c6:24:
         62:fd:8a:f7:d3:1d:f9:0f:55:18:05:75:f9:20:98:09:d3:bb:
         c7:92:59:b6:e4:35:6a:cb:da:94:e7:b4:23:f1:54:2f:e1:41:
         87:94:4d:b9:72:1a:7b:16:f4:06:a0:16:23:43:35:20:00:6a:
         69:63:6a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:18 2024 by rpki-client on console-ams.rpki-client.org