Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/cUnQ4nmq99mTBSJvP7xVPfwdCq4.roa
File:                     cUnQ4nmq99mTBSJvP7xVPfwdCq4.roa (raw, json)
Hash identifier:          3FZaGeypQ4Y7RyDPpUbkKEG462mb3ABn3u9IYSkVQEo=
Subject key identifier:   71:49:D0:E2:79:AA:F7:D9:93:05:22:6F:3F:BC:55:3D:FC:1D:0A:AE
Certificate issuer:       /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial:       018572E83438367BCB437B492B4C45B864E1
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/cUnQ4nmq99mTBSJvP7xVPfwdCq4.roa
Signing time:             Mon 02 Jan 2023 14:34:58 +0000
ROA not before:           Mon 02 Jan 2023 14:34:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207713
IP address blocks:        45.82.13.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:e8:34:38:36:7b:cb:43:7b:49:2b:4c:45:b8:64:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
        Validity
            Not Before: Jan  2 14:34:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7149d0e279aaf7d99305226f3fbc553dfc1d0aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e1:cc:94:8a:e1:9b:3a:52:93:4f:e2:74:82:
                    c2:e7:f7:66:81:26:10:b2:68:75:1c:6d:8e:e6:8d:
                    fb:37:3a:17:42:bd:92:09:2b:a7:14:95:75:75:36:
                    4c:b9:42:bd:eb:8d:75:8e:11:43:51:f9:02:1b:7a:
                    31:cc:d7:d0:57:83:b8:97:ea:15:a3:5c:4c:57:63:
                    ba:e0:73:91:10:2c:d0:7e:53:93:1e:9a:f1:0d:de:
                    6a:2f:ca:a4:50:f7:7a:72:bc:f6:0c:58:b4:d5:fd:
                    4d:c0:ca:fa:a7:09:ed:be:a0:94:20:3e:10:2e:41:
                    37:d5:66:5a:f8:98:2f:f1:ef:db:a0:fc:c9:8d:41:
                    9f:1f:98:85:ef:36:03:dd:b7:10:e2:7d:60:ae:4b:
                    cd:f6:50:91:6a:4e:6f:44:dd:75:d1:60:69:95:a5:
                    ad:28:20:a3:16:da:73:65:4b:b7:e6:7c:e8:ab:eb:
                    52:a3:4b:f9:5d:41:21:80:e2:7b:f8:15:62:80:02:
                    a6:ef:0f:a7:4e:40:0f:94:05:a6:85:a7:e2:ea:3f:
                    5c:3f:cb:99:d9:a9:33:5e:c0:23:f2:e5:cd:e0:25:
                    33:a5:5d:b4:da:3a:60:23:05:f0:10:c2:14:b9:62:
                    f0:08:c6:57:34:6a:0e:df:4c:45:03:8f:bc:30:16:
                    80:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:49:D0:E2:79:AA:F7:D9:93:05:22:6F:3F:BC:55:3D:FC:1D:0A:AE
            X509v3 Authority Key Identifier:
                keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/cUnQ4nmq99mTBSJvP7xVPfwdCq4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.82.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:9b:d2:eb:ee:82:90:22:a5:ef:fb:21:c8:6f:89:bf:33:4a:
         5d:88:83:f6:6b:27:77:77:68:f2:3b:33:57:2c:60:b6:1a:28:
         2b:64:69:cf:19:84:64:b4:3c:78:82:c6:cc:96:da:75:2a:c2:
         ee:a5:7a:6d:a7:7c:77:fd:d0:05:c8:09:09:76:05:50:5d:9a:
         b1:07:01:ec:6d:b7:ad:29:25:bc:4c:89:d7:fc:65:96:a7:be:
         5c:6e:17:31:40:28:26:3b:7f:71:a7:97:cb:59:e6:93:28:69:
         a8:36:50:ca:4c:b3:89:1c:86:ab:66:0e:1e:02:9d:1f:51:29:
         1d:4c:6c:6e:2f:d9:26:5c:ce:31:8e:4e:45:b8:be:5f:38:02:
         27:47:6e:84:3c:4b:fd:af:0b:05:02:3e:51:14:2d:fe:ae:d5:
         ce:8c:94:56:03:3b:f7:4b:d0:81:ab:61:f8:eb:6e:d5:c0:7c:
         83:82:9f:e4:b1:06:c3:ae:9e:d5:b1:83:84:f5:e6:4d:74:d4:
         af:c5:dc:13:6c:87:cb:0e:27:fd:e4:0e:53:59:fd:42:80:cc:
         c0:1a:91:46:0d:f7:49:76:3c:e2:15:25:fe:99:d0:8b:16:23:
         ee:1e:63:f2:77:ee:6f:f3:43:55:28:00:14:96:36:d8:8b:f6:
         60:e9:c1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:19 2023 by rpki-client on console-ams.rpki-client.org