Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/srLZ1oCODKFsjZPMhXEgfx8dLWg.roa
File:                     srLZ1oCODKFsjZPMhXEgfx8dLWg.roa (raw, json)
Hash identifier:          2AvvK4PuS2CVPs8wXgN6NDOxXtdzQOyVJR8zb8cTmos=
Subject key identifier:   B2:B2:D9:D6:80:8E:0C:A1:6C:8D:93:CC:85:71:20:7F:1F:1D:2D:68
Certificate issuer:       /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial:       0188FDCFD69C488CD1F7A88241DF60C068FB
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/srLZ1oCODKFsjZPMhXEgfx8dLWg.roa
Signing time:             Tue 27 Jun 2023 17:03:56 +0000
ROA not before:           Tue 27 Jun 2023 17:03:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        45.150.55.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:fd:cf:d6:9c:48:8c:d1:f7:a8:82:41:df:60:c0:68:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
        Validity
            Not Before: Jun 27 17:03:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b2b2d9d6808e0ca16c8d93cc8571207f1f1d2d68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:46:3e:c7:e2:84:65:82:36:88:bc:4b:db:10:
                    71:40:02:c6:0b:02:85:8d:c7:34:ec:4c:8e:ae:49:
                    14:79:6a:7f:ba:11:c1:1e:21:18:5f:ec:17:77:27:
                    d7:c7:43:ed:3a:63:d3:5b:3f:28:83:a9:a9:86:2e:
                    2b:04:78:51:4b:69:64:de:83:b3:25:10:7f:69:94:
                    7c:82:a8:af:74:c6:16:82:2a:85:89:2e:28:2b:02:
                    6b:3a:d5:c5:e7:00:f3:32:25:3c:64:92:08:ae:1c:
                    93:00:b6:2e:69:d0:fb:42:0e:fa:e3:a4:a4:bc:ac:
                    a6:a5:94:6e:d4:4c:d6:7a:58:1c:f2:7a:09:70:f9:
                    4c:95:86:a7:31:0f:a6:22:0c:c2:fc:a2:6e:e0:b5:
                    40:eb:ca:56:69:3a:a0:d6:25:a1:19:30:c8:7c:2b:
                    24:96:42:b4:78:f7:b8:e2:e4:d2:a6:28:0a:5c:e7:
                    8b:dc:d2:9c:0c:86:45:e6:de:a5:fd:d4:56:16:9c:
                    05:81:c4:37:ac:ef:a1:65:15:0a:46:25:73:6a:1a:
                    5a:ad:a6:80:ff:5d:64:5d:10:29:37:c5:e2:f9:2a:
                    bf:f2:c2:10:a7:6f:a6:c4:e9:e0:1b:54:44:4d:21:
                    b2:cf:67:22:06:aa:c2:ce:be:05:94:4d:60:31:6e:
                    ae:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B2:D9:D6:80:8E:0C:A1:6C:8D:93:CC:85:71:20:7F:1F:1D:2D:68
            X509v3 Authority Key Identifier:
                keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/srLZ1oCODKFsjZPMhXEgfx8dLWg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:41:55:da:23:6f:af:fc:24:bd:e6:36:a4:9e:0d:b9:79:ad:
         cf:b0:4f:c7:1d:81:71:98:90:ef:c7:ae:43:96:9c:e8:b4:39:
         ca:b5:e1:55:b5:38:27:49:08:8d:e4:d5:42:9c:5b:96:31:dc:
         f9:bd:bc:5f:ab:98:c9:17:d1:40:f2:2e:22:fd:a5:cb:c0:3e:
         57:fc:b3:98:24:87:76:77:a1:47:ea:e7:3b:45:f3:a9:29:99:
         d7:4b:ef:93:c2:ea:c3:7d:e2:86:64:65:98:19:b3:d6:07:d9:
         80:e0:25:d9:2e:ab:6a:6e:bb:cf:8c:d8:e7:1f:95:1f:34:0f:
         6a:a5:a3:4f:a0:a0:c9:97:99:94:d2:4b:9d:f7:bb:12:3f:49:
         7b:bd:74:82:bc:19:bb:09:cd:eb:1f:5a:0d:5a:25:ca:83:a1:
         66:ed:38:ef:3d:25:27:35:31:64:5c:70:ae:53:b8:ac:e8:d4:
         9d:97:71:b2:55:5a:1f:c2:a9:4b:6b:3a:ca:07:66:b4:28:7e:
         f0:45:b1:a0:e1:7c:c9:1a:a0:98:1f:0b:05:22:59:15:4a:2a:
         e6:a7:2d:ad:8f:08:c2:c6:f1:b5:e5:ab:a4:f9:0c:35:01:8a:
         d3:df:eb:16:2f:72:2e:e7:54:ba:d5:8a:e1:3f:f0:79:03:2f:
         37:fa:d6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:01 2023 by rpki-client on console.sobornost.net