Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/pmeSFbw-4qSLknWKwKCMaoMqka0.roa
File:                     pmeSFbw-4qSLknWKwKCMaoMqka0.roa (raw, json)
Hash identifier:          vxuhAJq/PRusPjv7ehlmF8ObN0MBfsw3Gg1dh9XjyjE=
Subject key identifier:   A6:67:92:15:BC:3E:E2:A4:8B:92:75:8A:C0:A0:8C:6A:83:2A:91:AD
Certificate issuer:       /CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Certificate serial:       01856DA6365D024BD643C706608468CC6733
Authority key identifier: 6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/pmeSFbw-4qSLknWKwKCMaoMqka0.roa
Signing time:             Sun 01 Jan 2023 14:04:47 +0000
ROA not before:           Sun 01 Jan 2023 14:04:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48357
IP address blocks:        45.154.206.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:29:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:a6:36:5d:02:4b:d6:43:c7:06:60:84:68:cc:67:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
        Validity
            Not Before: Jan  1 14:04:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a6679215bc3ee2a48b92758ac0a08c6a832a91ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:07:1d:98:0d:5c:90:bc:d8:70:39:60:b1:fd:
                    7f:58:67:17:d1:7a:0f:eb:0b:b7:28:ca:fd:6a:ab:
                    8b:b1:a8:3e:ad:a8:86:10:c6:aa:1e:d9:5d:ab:ee:
                    ee:10:0b:35:8b:db:5d:5a:d7:22:4d:ff:18:f4:60:
                    5f:3a:2a:87:0a:5b:7c:3e:41:b4:9e:ca:ba:a7:97:
                    2c:29:e6:6f:7f:c8:67:23:ec:66:69:12:34:99:8e:
                    18:19:a5:0c:93:e2:f6:c0:7a:8f:26:1c:16:05:0a:
                    3e:58:55:ac:5a:4b:63:52:c2:b2:ce:56:0f:d5:f7:
                    dc:a4:ab:cc:8b:b1:84:cb:b9:62:8e:9b:a5:de:9e:
                    34:52:d3:2f:54:2b:83:f7:34:27:d7:92:5c:af:d3:
                    b3:07:24:60:ae:5f:28:6b:f9:28:4b:13:44:6d:eb:
                    19:27:21:64:1c:8f:fd:58:05:c0:f7:8e:38:8d:f0:
                    cd:f5:ab:fb:e1:9b:13:16:e8:e7:05:0a:0b:2b:4a:
                    1a:ea:f4:d4:c2:ab:9b:a7:d1:e9:1f:11:99:7c:f6:
                    f4:76:be:4c:e7:7c:0b:88:86:18:7d:f9:80:0c:66:
                    a4:56:42:c1:9e:3c:49:5e:3f:9c:bc:5e:7b:8c:70:
                    7d:67:3c:df:2d:b1:95:5b:96:d4:15:ed:74:cb:77:
                    78:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:67:92:15:BC:3E:E2:A4:8B:92:75:8A:C0:A0:8C:6A:83:2A:91:AD
            X509v3 Authority Key Identifier:
                keyid:6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/pmeSFbw-4qSLknWKwKCMaoMqka0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.154.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:d0:f3:d0:b0:b4:e6:37:bc:da:d4:b3:bb:d0:14:bd:1c:fb:
         e5:76:a4:33:15:1b:13:c8:5f:b3:16:91:c3:3c:77:a4:76:c8:
         ee:cd:6f:d6:a0:9b:ba:e6:35:b3:0b:9e:30:fa:5b:60:c4:19:
         82:9a:88:b2:5e:34:39:1e:b8:88:56:a3:22:73:26:ac:e0:0f:
         3a:27:15:83:a3:48:a6:38:49:a7:9a:a5:35:d2:31:11:fd:1f:
         d4:b4:bb:cf:70:ed:bb:d8:69:f4:e4:9d:e2:b3:34:23:cb:71:
         00:9d:84:ef:c9:f0:42:75:6a:81:18:87:eb:fe:56:75:2d:89:
         ff:b8:62:5f:a7:fb:0f:06:38:02:52:f3:a8:f5:82:8d:21:cf:
         4e:3f:d4:6b:a4:4c:6d:11:5e:33:f1:da:0d:97:f4:a5:8f:52:
         30:e6:21:5f:4e:c9:0b:85:b2:2b:f1:4f:d9:51:5f:48:13:2a:
         84:1e:5c:d5:e2:af:68:6e:8b:e5:ee:82:8e:bf:7a:ea:9a:0a:
         0d:e2:70:11:3d:6a:9a:48:83:af:88:56:04:6e:3e:7d:1d:d1:
         5e:5e:b6:31:c1:67:58:86:8b:95:36:b7:73:17:b0:77:33:94:
         2f:ff:5f:1a:00:33:b4:cf:c2:fe:a9:e3:dc:1f:1d:1f:c4:7d:
         22:cf:7a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:17 2024 by rpki-client on console-ams.rpki-client.org