Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/66d980-d817-41cb-a03d-4354c47889b7/1/VLbWCY9NJ9El-dulAxYHzNDhmvo.roa
File:                     VLbWCY9NJ9El-dulAxYHzNDhmvo.roa (raw, json)
Hash identifier:          I4HQCo2leQ3vUSFpxuX8hrr6DAE9Yziy5TGknjFks3A=
Subject key identifier:   54:B6:D6:09:8F:4D:27:D1:25:F9:DB:A5:03:16:07:CC:D0:E1:9A:FA
Certificate issuer:       /CN=b18b79133b3b0a11d52d99e1b7c172207fe4578c
Certificate serial:       01856FB1248F5DA46C343445B25C53E9A4C2
Authority key identifier: B1:8B:79:13:3B:3B:0A:11:D5:2D:99:E1:B7:C1:72:20:7F:E4:57:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sYt5Ezs7ChHVLZnht8FyIH_kV4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/66d980-d817-41cb-a03d-4354c47889b7/1/VLbWCY9NJ9El-dulAxYHzNDhmvo.roa
Signing time:             Sun 01 Jan 2023 23:35:58 +0000
ROA not before:           Sun 01 Jan 2023 23:35:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48551
IP address blocks:        45.150.150.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:31:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:b1:24:8f:5d:a4:6c:34:34:45:b2:5c:53:e9:a4:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b18b79133b3b0a11d52d99e1b7c172207fe4578c
        Validity
            Not Before: Jan  1 23:35:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=54b6d6098f4d27d125f9dba5031607ccd0e19afa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5a:1d:07:e7:22:dc:f0:91:c4:6f:81:19:91:
                    6f:a7:7e:e8:98:6f:4e:a0:24:20:99:d1:c4:02:3e:
                    dd:25:fe:20:57:3c:c6:30:31:1b:11:5d:e2:4f:0f:
                    24:e3:5e:70:06:e2:23:ea:9a:54:4a:67:e0:39:99:
                    db:f9:d3:c9:a9:90:eb:ab:68:b9:60:1d:2c:8b:d5:
                    d3:89:e5:72:e0:0b:39:16:2f:de:a3:fa:96:e2:00:
                    9b:03:5a:84:01:50:ad:e3:dc:97:a1:87:84:d2:20:
                    24:0f:e7:8a:f6:9b:a1:2b:ca:8e:ea:1a:7c:b3:a5:
                    03:09:5e:c6:08:20:bb:cf:c4:ce:4b:2e:c1:16:6c:
                    45:41:15:1c:2b:8b:1d:23:cb:66:dc:65:d5:a6:74:
                    07:14:f4:0f:24:32:a7:2e:f3:18:aa:10:21:4b:bc:
                    2b:87:69:7f:6f:d1:7f:86:69:6c:50:69:b4:e5:58:
                    ac:75:ad:59:2c:e2:fa:6f:6a:47:03:a1:e9:31:43:
                    64:95:f2:66:cc:eb:b8:e9:e3:5f:13:27:c8:7a:19:
                    b4:1f:dc:b5:df:63:1a:d8:a0:d0:10:4b:14:77:9a:
                    2d:ac:f8:32:bd:a0:ba:8a:7d:3a:36:0e:82:1c:70:
                    10:41:7e:20:62:4c:ff:60:0b:54:df:8e:8e:3e:a0:
                    bc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B6:D6:09:8F:4D:27:D1:25:F9:DB:A5:03:16:07:CC:D0:E1:9A:FA
            X509v3 Authority Key Identifier:
                keyid:B1:8B:79:13:3B:3B:0A:11:D5:2D:99:E1:B7:C1:72:20:7F:E4:57:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYt5Ezs7ChHVLZnht8FyIH_kV4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/66d980-d817-41cb-a03d-4354c47889b7/1/VLbWCY9NJ9El-dulAxYHzNDhmvo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/66d980-d817-41cb-a03d-4354c47889b7/1/sYt5Ezs7ChHVLZnht8FyIH_kV4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:6d:b2:1e:d7:29:c0:55:d3:0f:65:d3:5e:36:ec:17:26:2a:
         fa:09:a1:c8:6a:8a:1c:13:2b:5b:d4:49:e2:b5:8f:05:2c:ef:
         f4:79:0b:c2:61:52:c9:9a:e8:dc:12:91:51:de:3e:3d:6c:c2:
         25:d3:8c:95:b2:bf:32:73:97:4d:4e:a7:05:43:e3:d9:50:02:
         32:d6:48:dc:5a:30:3e:97:0a:32:33:b4:aa:66:26:8a:5c:57:
         53:79:8c:81:b0:e8:47:65:ca:7e:fb:ee:ef:19:62:dd:96:33:
         65:8a:1c:6e:4e:fb:ae:45:21:3c:f8:fb:a4:3f:8e:b1:c6:9a:
         fb:4e:63:b7:c9:52:53:28:54:a9:6f:9f:0e:1e:08:aa:9c:55:
         7d:c4:03:20:68:ff:b3:33:e6:33:29:89:05:43:4f:64:e7:31:
         05:f4:31:c6:48:88:7e:28:22:42:2a:0b:43:87:72:4d:c9:00:
         6c:a1:1f:8d:8e:8b:24:e9:8d:11:a6:2f:6a:8b:d0:dd:2b:cf:
         73:fd:4a:54:b7:6d:d2:c7:8e:4e:67:c9:e6:40:2b:54:f6:44:
         ad:ba:59:2a:f3:eb:48:28:c3:81:17:6d:4a:b2:20:ad:54:42:
         4c:26:ad:f1:de:c0:13:61:df:54:84:e3:63:8b:a6:4d:f5:6f:
         08:e3:a2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:44 2024 by rpki-client on console-ams.rpki-client.org