Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/7alBlc779diSwcDbZ56QEtA8ZBA.roa
File:                     7alBlc779diSwcDbZ56QEtA8ZBA.roa (raw, json)
Hash identifier:          gruQPBokPqUAFyiC9chKiEHO4FVwpp0jtt9sKfmcolU=
Subject key identifier:   ED:A9:41:95:CE:FB:F5:D8:92:C1:C0:DB:67:9E:90:12:D0:3C:64:10
Certificate issuer:       /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial:       0189CF4737E67320718EB4F83B15C60AA758
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/7alBlc779diSwcDbZ56QEtA8ZBA.roa
Signing time:             Mon 07 Aug 2023 09:14:58 +0000
ROA not before:           Mon 07 Aug 2023 09:14:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     197071
IP address blocks:        45.134.39.0/24 maxlen: 24
                          185.117.0.0/24 maxlen: 24
                          45.67.139.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:cf:47:37:e6:73:20:71:8e:b4:f8:3b:15:c6:0a:a7:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
        Validity
            Not Before: Aug  7 09:14:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eda94195cefbf5d892c1c0db679e9012d03c6410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:22:37:a2:cd:d5:34:82:d5:b8:96:04:e7:8f:
                    24:61:b8:0c:75:21:c1:6e:43:20:a8:f9:77:29:11:
                    cd:7f:bf:f4:d1:a7:53:dc:30:1a:bd:c9:56:64:8f:
                    91:47:02:17:8c:f6:27:bf:4b:0c:6f:7d:2d:b4:63:
                    ee:33:66:b9:48:85:fb:59:90:4c:bd:7b:2d:e3:e9:
                    eb:47:5f:c2:7e:eb:5f:fc:87:aa:fd:2d:99:4c:a6:
                    da:fe:a0:e1:3f:1e:21:60:5b:2b:aa:95:cc:2e:b5:
                    08:31:dc:d0:f6:99:59:f5:f2:58:8d:2f:61:0f:e7:
                    b0:51:ed:5c:15:a4:f0:44:ff:21:ad:f7:cd:df:01:
                    95:3a:22:e8:d8:a4:e3:2a:c3:80:7f:a1:6a:52:24:
                    f2:f5:1d:6f:46:de:f7:96:dc:c3:aa:98:f6:cc:e4:
                    45:a7:c0:f5:9c:d9:d3:83:2a:03:81:1a:f0:cc:cb:
                    36:85:c1:93:ec:aa:b8:29:48:51:bb:89:cc:ef:8e:
                    ab:66:20:aa:8d:50:d2:c2:e2:4f:de:6a:9b:b3:90:
                    19:aa:b0:50:21:71:8f:3f:b5:67:9f:0b:9d:ef:4e:
                    7f:60:97:60:51:52:08:a1:aa:ce:2c:c1:b2:68:8e:
                    8e:d3:9f:ec:2b:38:38:5d:0c:44:19:f8:07:c5:77:
                    78:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A9:41:95:CE:FB:F5:D8:92:C1:C0:DB:67:9E:90:12:D0:3C:64:10
            X509v3 Authority Key Identifier:
                keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/7alBlc779diSwcDbZ56QEtA8ZBA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.67.139.0/24
                  45.134.39.0/24
                  185.117.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:1b:63:63:05:09:26:0f:53:05:d0:d9:83:94:b5:a7:b2:ef:
         13:2d:73:66:68:48:2b:ee:b1:7f:e3:e6:16:54:89:e6:44:19:
         e5:5f:c6:e5:2e:48:66:c7:8c:db:22:07:b5:1b:e1:1c:f5:26:
         bf:6e:2a:1e:46:e6:db:50:d0:1d:57:2f:57:fc:45:f2:57:36:
         b6:00:ee:8e:01:75:3f:01:2e:72:ff:c6:05:e3:b6:8f:38:7a:
         51:08:fb:c3:19:95:63:35:cd:45:4b:4f:cd:b0:8b:0d:3d:68:
         01:91:29:3c:6f:76:f7:16:29:37:e6:16:53:91:71:fa:ed:32:
         87:f2:f8:68:4c:1b:98:d2:80:11:6d:0b:11:a7:9e:b7:be:2a:
         7a:ce:1e:88:14:50:4f:5d:e5:a7:e2:96:e7:0f:20:65:61:db:
         7e:0c:61:96:ac:ad:da:c3:ac:9f:37:dd:18:37:7c:c1:6e:8c:
         b2:61:1a:9b:f1:ff:33:20:a6:02:d8:4a:44:23:13:73:24:17:
         b4:f8:56:23:da:7b:4a:8d:ed:d8:fe:3a:36:01:ee:60:b1:b3:
         07:a4:ab:56:61:79:e6:2f:c2:00:0a:0b:5d:df:e2:98:41:9f:
         65:bb:69:68:a6:15:f1:0e:4f:7d:1b:6c:f9:e3:cb:7a:72:f0:
         dd:4d:b3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 14 09:04:57 2023 by rpki-client on console-fra.rpki-client.org