Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/1h9WgXZqCLZx4Y3aNHO8sPYlX4Y.roa
File:                     1h9WgXZqCLZx4Y3aNHO8sPYlX4Y.roa (raw, json)
Hash identifier:          HdIBlc9ovOLBFBLZ9Plt20WdEyyKTh/aKfNlOreIUkY=
Subject key identifier:   D6:1F:56:81:76:6A:08:B6:71:E1:8D:DA:34:73:BC:B0:F6:25:5F:86
Certificate issuer:       /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial:       018C7BDF13458A68C1EB54F806D7AAA061BC
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/1h9WgXZqCLZx4Y3aNHO8sPYlX4Y.roa
Signing time:             Mon 18 Dec 2023 07:41:06 +0000
ROA not before:           Mon 18 Dec 2023 07:41:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        45.155.243.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 25 Dec 2023 17:56:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:7b:df:13:45:8a:68:c1:eb:54:f8:06:d7:aa:a0:61:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
        Validity
            Not Before: Dec 18 07:41:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d61f5681766a08b671e18dda3473bcb0f6255f86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2c:51:fb:92:60:98:0d:0a:39:51:77:e1:f5:
                    0d:a2:9c:98:6b:2f:54:3f:43:74:8f:e4:d0:7e:03:
                    db:ae:88:ea:12:ca:3b:5e:30:de:c2:5c:87:de:61:
                    6b:a2:87:01:f8:e2:be:02:e7:7d:9c:5b:63:57:a2:
                    db:01:0f:62:8a:fc:b2:80:43:66:d3:e2:12:3f:52:
                    a3:72:6a:37:5a:b7:d1:15:3d:3a:1f:e3:75:31:b5:
                    8e:49:7a:8f:73:d7:1a:cc:17:ce:eb:65:6c:06:1c:
                    13:93:07:1d:f8:47:60:21:43:94:48:fe:d3:28:68:
                    f2:a0:be:dd:b9:d7:ea:9d:5b:b3:6c:07:a7:fa:88:
                    ea:ae:55:fa:08:6b:e1:9a:c8:72:b2:5e:57:b2:50:
                    2a:23:ba:22:34:76:b0:22:42:60:f7:04:92:08:8e:
                    8e:10:19:90:c0:fc:a3:3c:c9:2f:84:0b:41:89:95:
                    8c:50:7b:96:6d:c0:82:b8:9b:3e:e4:74:d1:6a:9a:
                    60:f6:0d:56:d6:62:bf:e9:a8:7b:21:cc:9e:f8:d3:
                    8e:a9:f4:11:98:cf:09:f8:b2:73:07:e2:e3:6d:85:
                    36:70:07:97:d3:ba:5d:33:4c:a3:f3:4e:bf:e6:b5:
                    77:b0:96:e2:b6:28:17:44:40:27:f4:17:33:19:28:
                    c4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:1F:56:81:76:6A:08:B6:71:E1:8D:DA:34:73:BC:B0:F6:25:5F:86
            X509v3 Authority Key Identifier:
                keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/1h9WgXZqCLZx4Y3aNHO8sPYlX4Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:a2:f6:cf:98:9c:48:df:24:45:51:f4:d2:df:08:9d:18:a2:
         e1:4e:a7:ef:a1:76:11:a9:64:fe:7d:fc:02:a6:5f:04:d7:d4:
         df:6b:18:fa:25:53:ed:a7:18:da:88:b0:5f:c4:9c:1a:c8:6b:
         89:1b:86:5e:d4:14:a5:fe:ec:ee:f3:6e:c7:ba:a7:5c:74:4b:
         20:12:d3:f7:bf:50:15:3e:90:b2:5c:45:05:d2:cc:ae:31:76:
         89:f0:04:7f:2c:f3:5a:d0:22:43:f3:5f:c4:cf:f5:09:1d:e0:
         91:f0:15:91:60:2f:62:02:8b:64:50:da:1f:cc:0a:8b:70:c1:
         b7:c2:55:51:6a:06:d5:3e:79:c9:d1:c4:18:2c:6f:22:54:57:
         4d:3a:2e:01:0d:75:5a:fb:08:e7:18:e1:82:7c:81:a2:da:64:
         57:40:dc:af:04:2b:70:be:bd:37:f6:7e:b8:ac:e1:66:c4:07:
         32:18:5f:1a:d4:18:00:d3:fc:fa:41:48:93:be:a3:fb:ad:29:
         49:03:a6:57:0c:a2:0d:0d:ec:fd:ac:2e:28:e1:7e:d3:cb:cd:
         f2:e0:f2:0b:e0:e2:67:0e:da:8b:97:0d:53:b7:7f:d7:7d:cf:
         ee:24:7d:9a:8e:fb:9b:37:ee:ce:b4:1f:f6:ee:02:5d:4e:63:
         4f:b2:02:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:40 2024 by rpki-client on console-ams.rpki-client.org