Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d0c809-a95b-4f61-8ca7-f03f9686d206/1/e6y9duyxkT-H5xJjosi4Yqti9MU.roa
File:                     e6y9duyxkT-H5xJjosi4Yqti9MU.roa (raw, json)
Hash identifier:          7EF+igyTBfI7k6aUqUaHnDhxuzwZpv0RVAosVMxi5bY=
Subject key identifier:   7B:AC:BD:76:EC:B1:91:3F:87:E7:12:63:A2:C8:B8:62:AB:62:F4:C5
Certificate issuer:       /CN=bb32d3e2da170835e4df9bc35dd64658e349796d
Certificate serial:       01856C78422D2379EF16044095451BC971EA
Authority key identifier: BB:32:D3:E2:DA:17:08:35:E4:DF:9B:C3:5D:D6:46:58:E3:49:79:6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uzLT4toXCDXk35vDXdZGWONJeW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/d0c809-a95b-4f61-8ca7-f03f9686d206/1/e6y9duyxkT-H5xJjosi4Yqti9MU.roa
Signing time:             Sun 01 Jan 2023 08:34:58 +0000
ROA not before:           Sun 01 Jan 2023 08:34:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     24904
IP address blocks:        45.15.60.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 12:30:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:78:42:2d:23:79:ef:16:04:40:95:45:1b:c9:71:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb32d3e2da170835e4df9bc35dd64658e349796d
        Validity
            Not Before: Jan  1 08:34:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7bacbd76ecb1913f87e71263a2c8b862ab62f4c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0a:14:9e:b3:c7:01:6a:b0:6b:5c:a4:1b:8c:
                    31:76:a0:77:29:a5:80:3f:c1:30:7c:22:e8:a7:28:
                    ea:3b:de:57:ff:a6:1a:04:29:67:ca:d3:83:b3:e1:
                    b1:a7:c3:42:18:61:9c:e0:43:46:a7:cd:61:0e:be:
                    ea:19:80:6c:1d:94:2e:c2:2f:c1:49:fc:52:4a:dd:
                    2d:da:33:68:5b:01:13:5d:2b:05:93:2d:b3:9f:e9:
                    5f:58:ce:35:6c:d7:b6:99:30:4b:4f:ee:8a:93:a8:
                    e7:f1:bc:f8:94:eb:ce:6e:15:ab:a0:b9:af:05:4f:
                    3d:a6:a3:51:05:ca:1a:4f:bf:02:a2:30:91:d4:41:
                    5f:96:bd:89:3a:86:21:1f:2a:6d:f0:03:5a:50:d2:
                    d1:45:b0:13:fd:f9:7a:ec:1a:42:dd:a4:81:d9:50:
                    8f:a7:2f:f3:cf:7b:bd:f3:15:6c:42:ce:07:fb:8d:
                    a1:9a:04:23:a3:ac:89:70:96:4f:81:f6:7c:6a:c3:
                    93:e1:cc:d3:8b:48:57:5b:bb:fd:87:b9:14:54:64:
                    c3:8d:7b:e6:e6:a1:8f:6e:9d:54:05:67:5d:0c:b4:
                    c2:bf:a8:ec:e3:e6:37:6d:fc:9c:36:a7:a4:7a:a5:
                    9e:8f:ac:f7:bc:16:e9:a1:46:70:84:66:18:a6:d6:
                    b3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:AC:BD:76:EC:B1:91:3F:87:E7:12:63:A2:C8:B8:62:AB:62:F4:C5
            X509v3 Authority Key Identifier:
                keyid:BB:32:D3:E2:DA:17:08:35:E4:DF:9B:C3:5D:D6:46:58:E3:49:79:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uzLT4toXCDXk35vDXdZGWONJeW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d0c809-a95b-4f61-8ca7-f03f9686d206/1/e6y9duyxkT-H5xJjosi4Yqti9MU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d0c809-a95b-4f61-8ca7-f03f9686d206/1/uzLT4toXCDXk35vDXdZGWONJeW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.15.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:d1:4c:82:2b:11:8e:71:58:7f:d5:d0:6d:73:1d:52:5e:55:
         fe:4d:c4:cb:33:d4:e8:93:78:63:8e:92:0c:42:cd:1d:5b:2f:
         23:5c:57:76:e4:65:50:dc:8d:09:3e:98:82:66:51:b6:ca:df:
         b9:f2:87:32:15:a9:46:4a:a8:1b:15:a2:6a:30:38:68:a8:a6:
         68:d5:f2:77:53:66:02:87:4f:7f:da:0f:1c:71:29:d3:2c:12:
         49:8c:9d:32:d8:3c:ad:c0:3f:ca:35:b0:50:9e:1b:b4:fd:87:
         c3:d6:3d:20:0b:00:f1:6f:4e:0a:2a:55:33:5f:2b:17:e6:a9:
         83:d4:9b:49:ad:10:6e:3b:a5:dd:97:17:16:ca:73:b3:0d:1c:
         c0:51:df:57:87:76:c8:85:ea:30:e0:f6:36:c1:d7:ec:1c:ff:
         71:24:03:c1:00:37:fe:4e:3a:9d:67:46:0a:99:df:f8:e2:02:
         70:e1:57:6b:bb:16:44:e0:1d:5f:d5:50:07:9a:a9:bb:f9:6c:
         ef:86:cf:37:0b:40:c7:36:ad:c2:97:b6:fd:d8:0c:03:21:d3:
         98:e4:d9:52:ae:16:74:cd:eb:2e:8e:a1:a0:a0:25:74:5d:9d:
         61:c7:c6:3d:bf:d2:a7:e1:56:b0:1e:79:49:14:8e:1b:45:07:
         6d:5b:46:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:55 2024 by rpki-client on console-fra.rpki-client.org