Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS61135.roa
File:                     AS61135.roa (raw, json)
Hash identifier:          CJs3XDA6ia09pjr7IEKHRs/T/uwABr2yaTNmthHgi1U=
Subject key identifier:   72:A6:10:C9:AA:C6:F0:E4:01:15:23:0F:5E:AE:8E:79:FC:66:1A:69
Certificate issuer:       /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial:       198CE99C38E2B9365C86DF33E1A1B9831A58A142
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS61135.roa
Signing time:             Thu 21 Dec 2023 09:48:49 +0000
ROA not before:           Thu 21 Dec 2023 09:43:49 +0000
ROA not after:            Thu 19 Dec 2024 09:48:49 +0000
asID:                     61135
IP address blocks:        45.154.104.0/24 maxlen: 24
                          185.155.221.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 18 Jan 2024 00:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:8c:e9:9c:38:e2:b9:36:5c:86:df:33:e1:a1:b9:83:1a:58:a1:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
        Validity
            Not Before: Dec 21 09:43:49 2023 GMT
            Not After : Dec 19 09:48:49 2024 GMT
        Subject: CN=72A610C9AAC6F0E40115230F5EAE8E79FC661A69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8c:53:84:c6:15:4b:f8:68:70:1f:52:84:e2:
                    ee:8b:e8:55:03:87:7f:c3:36:20:81:e3:f8:86:11:
                    a5:eb:dc:7a:93:01:39:c3:f8:75:4c:de:74:a5:ac:
                    77:89:69:81:1e:e0:fc:ec:16:0f:f3:34:31:b2:d5:
                    f5:f4:3c:94:d5:fa:e9:b5:37:d3:80:7f:66:06:a0:
                    6a:ea:c2:e5:55:6d:97:ba:53:15:9f:51:8c:4f:51:
                    a1:63:53:4e:99:4b:a5:93:2a:d7:a6:53:21:2f:88:
                    75:77:58:6a:17:93:cd:6f:03:e3:f2:ee:73:e1:ec:
                    b9:f2:6c:8e:93:c9:29:0d:70:d8:86:74:29:5a:aa:
                    51:a3:2a:7f:98:84:2b:86:78:e2:fd:2c:44:9c:1d:
                    65:f9:c3:f4:db:38:23:25:20:49:14:f8:98:35:58:
                    15:63:e8:25:db:37:46:4f:4b:7a:ea:12:31:3d:f6:
                    8b:37:fb:a3:c4:fb:4c:14:0e:87:f2:ea:46:50:3b:
                    81:fe:76:c4:b2:cd:99:df:83:de:3a:38:df:ce:cc:
                    31:bb:74:2f:22:69:bf:83:a9:ba:ac:4f:31:9b:80:
                    9f:24:f4:be:9f:34:f1:c0:28:52:1d:e2:c7:d0:8a:
                    94:67:b4:c0:2e:c5:f8:c9:c0:0d:a7:0b:6f:b9:cf:
                    09:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A6:10:C9:AA:C6:F0:E4:01:15:23:0F:5E:AE:8E:79:FC:66:1A:69
            X509v3 Authority Key Identifier:
                keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS61135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.154.104.0/24
                  185.155.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:1e:59:b1:e6:ac:f3:c8:be:01:ce:1f:f7:8e:94:4c:4d:e9:
         1a:3c:4f:c8:53:9a:d3:4e:a3:41:aa:9d:62:b8:db:ab:96:28:
         d7:34:f8:b3:af:d8:75:83:2e:99:cb:2b:23:77:36:6c:da:9a:
         b2:10:19:39:76:c0:1e:16:d6:e6:27:51:3b:02:70:5d:dd:14:
         8d:0b:24:8c:ca:8b:3b:b3:d5:b0:a5:83:a9:e6:29:f0:67:9d:
         10:a1:4a:33:ee:9a:a6:dc:b8:38:06:50:3c:e5:00:5a:2e:12:
         4a:20:46:f9:11:74:0c:2f:de:93:97:10:07:45:79:61:ba:8b:
         2f:91:6c:ab:bc:6b:f8:54:77:24:72:b1:19:59:9f:ff:7e:21:
         90:1e:b2:db:1b:a1:7c:4c:5b:4d:9d:42:31:42:82:e6:d0:7d:
         77:cd:0a:16:d7:d9:9a:d4:fa:7a:3f:f8:90:23:98:76:5b:64:
         67:73:01:f8:49:9d:cf:e9:41:2b:5b:b6:cd:4a:5b:c5:8b:be:
         56:89:af:a8:fb:c4:29:49:59:9b:be:77:3f:64:75:1b:31:1d:
         17:56:c2:14:65:0d:ca:d2:51:ad:15:6c:c7:18:a2:dd:6b:58:
         d4:f2:25:37:2a:ac:e6:95:d1:7e:68:a4:b5:de:4e:98:cf:5d:
         11:9d:53:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 27 01:01:53 2024 by rpki-client on console.sobornost.net