Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/S0feEokbzYX9RFVKcPek1ZBwFw4.roa
File:                     S0feEokbzYX9RFVKcPek1ZBwFw4.roa (raw, json)
Hash identifier:          rB6J7Mrd2Qop8UX7adGz8LCuio4vHnu2K4y4qpI4DmI=
Subject key identifier:   4B:47:DE:12:89:1B:CD:85:FD:44:55:4A:70:F7:A4:D5:90:70:17:0E
Certificate issuer:       /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial:       018957152850A849733C4E9A9B7E6DFD4B7C
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/S0feEokbzYX9RFVKcPek1ZBwFw4.roa
Signing time:             Sat 15 Jul 2023 01:05:51 +0000
ROA not before:           Sat 15 Jul 2023 01:05:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     58305
IP address blocks:        198.105.124.0/23 maxlen: 24
                          45.43.64.0/19 maxlen: 24
                          45.43.66.0/23 maxlen: 24
                          45.43.74.0/23 maxlen: 24
                          45.43.76.0/22 maxlen: 24
                          45.43.80.0/22 maxlen: 24
                          198.105.96.0/19 maxlen: 24
                          198.105.116.0/23 maxlen: 24
                          155.254.32.0/22 maxlen: 24
                          155.254.32.0/19 maxlen: 24
                          155.254.48.0/23 maxlen: 23
                          155.254.63.0/24 maxlen: 24
                          155.254.62.0/24 maxlen: 24
                          107.161.160.0/24 maxlen: 24
                          107.161.161.0/24 maxlen: 24
                          107.161.162.0/24 maxlen: 24
                          107.161.172.0/24 maxlen: 24
                          107.161.168.0/24 maxlen: 24
                          107.161.169.0/24 maxlen: 24
                          107.161.170.0/24 maxlen: 24
                          107.161.171.0/24 maxlen: 24
                          107.181.128.0/19 maxlen: 24
                          107.181.138.0/23 maxlen: 24
                          107.181.144.0/23 maxlen: 24
                          162.220.240.0/24 maxlen: 24
                          162.220.242.0/24 maxlen: 24
                          162.220.240.0/21 maxlen: 24
                          162.220.241.0/24 maxlen: 24
                          113.20.156.0/22 maxlen: 24
                          107.161.173.0/24 maxlen: 24
                          107.161.174.0/23 maxlen: 24
                          162.217.250.0/24 maxlen: 24
                          162.217.251.0/24 maxlen: 24
                          2a05:9f40::/29 maxlen: 48
                          2a07:9944:20::/48 maxlen: 48
                          2a07:9942:39d7::/48 maxlen: 48
                          2a07:9944:2222::/48 maxlen: 48
                          2a07:9940::/29 maxlen: 48
                          2a07:9944:10::/48 maxlen: 48
                          2a02:2ca0::/29 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:57:15:28:50:a8:49:73:3c:4e:9a:9b:7e:6d:fd:4b:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
        Validity
            Not Before: Jul 15 01:05:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4b47de12891bcd85fd44554a70f7a4d59070170e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:78:64:c7:68:aa:d6:52:89:50:5f:d7:db:ce:
                    42:8e:70:8e:c6:f5:02:5b:17:3a:8d:99:86:38:94:
                    46:cd:09:88:36:ad:f4:1d:cf:f8:f0:ec:bf:60:92:
                    ad:2c:21:11:9f:7f:5f:4d:82:65:3f:0e:f8:3b:83:
                    a2:b5:79:93:ca:78:da:bb:05:47:36:20:58:08:17:
                    0e:5a:d7:20:2d:fb:c9:28:69:29:24:c7:31:06:ef:
                    a5:45:d9:11:f7:1a:91:f2:48:f5:30:c5:ef:04:14:
                    0a:24:4f:04:9f:84:47:86:6b:40:40:13:bb:3f:c7:
                    1c:85:ee:84:9f:86:a0:62:27:02:80:28:06:d6:00:
                    88:30:1d:bd:f5:56:09:c0:96:86:ac:69:10:7c:cb:
                    3c:8d:05:84:b6:90:0c:5d:ff:19:fd:b5:72:3c:de:
                    64:64:c5:8b:40:0d:f2:97:0d:64:b2:b7:2d:2e:10:
                    ca:6d:37:9d:79:b2:5f:2f:7f:c8:d2:f6:58:54:3a:
                    96:64:64:d6:31:f6:95:85:e2:57:b2:3b:c4:77:7a:
                    5d:76:5c:6b:4b:79:44:bd:1e:24:52:73:dc:28:de:
                    78:9a:85:11:7f:2f:15:af:31:d5:78:01:61:29:e2:
                    8a:90:34:e0:97:55:f1:5b:5e:f4:52:17:62:c5:79:
                    a2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:47:DE:12:89:1B:CD:85:FD:44:55:4A:70:F7:A4:D5:90:70:17:0E
            X509v3 Authority Key Identifier:
                keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/S0feEokbzYX9RFVKcPek1ZBwFw4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.43.64.0/19
                  107.161.160.0-107.161.162.255
                  107.161.168.0/21
                  107.181.128.0/19
                  113.20.156.0/22
                  155.254.32.0/19
                  162.217.250.0/23
                  162.220.240.0/21
                  198.105.96.0/19
                IPv6:
                  2a02:2ca0::/29
                  2a05:9f40::/29
                  2a07:9940::/29

    Signature Algorithm: sha256WithRSAEncryption
         40:f3:8a:08:66:fb:84:8a:6e:f7:56:19:25:46:9e:d6:04:5c:
         1c:ee:25:53:76:76:be:5d:e8:33:43:0b:34:fe:da:f1:f1:78:
         63:6c:84:17:df:85:5b:45:4e:72:18:da:48:b5:be:af:0f:6b:
         fe:0f:22:92:d7:86:79:22:eb:cd:34:68:54:a9:cb:49:33:4b:
         ab:ab:c1:92:0c:f6:45:90:ec:d3:9e:c2:fa:00:91:e6:cd:58:
         48:fe:d8:9e:19:a5:42:85:b4:7e:e8:d9:e2:8c:c7:32:97:db:
         a7:95:d3:c2:6d:eb:d8:eb:1e:9b:5d:0b:e2:1c:ac:89:cd:e1:
         5f:e2:70:43:71:11:dc:3a:1f:de:7b:04:5f:5f:3c:ff:b6:ca:
         37:4c:29:c2:f0:45:40:30:4d:25:6c:65:0a:40:a0:0d:47:ce:
         e1:f9:20:0e:ad:1b:60:e3:1a:77:44:79:0b:66:5e:05:28:6d:
         7a:16:30:1d:47:43:a0:8e:71:bf:4c:56:25:70:3f:5e:8c:3f:
         2a:34:c4:b4:b4:fe:27:c4:60:39:a2:5b:29:f7:c8:e1:5b:ce:
         8c:fe:de:c2:4c:e3:d4:69:1e:81:4a:0e:5d:85:77:af:10:e0:
         b9:8b:1c:53:b5:37:3d:ca:29:c6:7d:da:c8:ba:67:3a:d8:22:
         29:c8:23:8e
-----BEGIN CERTIFICATE-----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Generated at Sun Jul 23 14:18:05 2023 by rpki-client on console-ams.rpki-client.org