Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7mXtKS4lWqve-ap8VmIHqhqD5RE.roa
File:                     7mXtKS4lWqve-ap8VmIHqhqD5RE.roa (raw, json)
Hash identifier:          ToqXPlFSc1+o6PAw05RZvysYuaHlRCmDx5Ye7Bug/xA=
Subject key identifier:   EE:65:ED:29:2E:25:5A:AB:DE:F9:AA:7C:56:62:07:AA:1A:83:E5:11
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       01870477BA3401EAB5706039A3C478CFBC82
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7mXtKS4lWqve-ap8VmIHqhqD5RE.roa
Signing time:             Tue 21 Mar 2023 13:59:27 +0000
ROA not before:           Tue 21 Mar 2023 13:59:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208485
IP address blocks:        45.91.192.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:04:77:ba:34:01:ea:b5:70:60:39:a3:c4:78:cf:bc:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Mar 21 13:59:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ee65ed292e255aabdef9aa7c566207aa1a83e511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:47:69:67:a5:b5:90:96:d1:fc:91:1d:fd:51:
                    01:e3:ed:81:ab:70:2e:83:3b:a8:f9:94:cb:b4:9c:
                    3e:8b:1b:83:6f:16:a0:44:3e:55:20:d0:d2:49:ab:
                    17:a2:58:9d:7b:2d:dd:ac:dd:49:01:d5:70:ff:e0:
                    c0:c0:22:4b:c2:29:d4:86:d7:9c:bc:04:4f:73:ef:
                    61:00:11:8a:98:56:7c:59:f2:9e:19:79:e8:ac:50:
                    3a:2e:5f:3b:97:b8:50:fb:8d:ec:af:27:29:aa:94:
                    24:67:46:66:e5:77:1b:f0:62:33:0e:37:18:28:ad:
                    eb:12:dd:89:a9:e4:95:05:08:0a:39:69:f7:9a:21:
                    9e:9f:90:b8:da:aa:18:7e:68:27:6c:dd:0f:fc:56:
                    6d:e7:39:c1:62:2e:95:04:c1:6f:2f:cf:7f:e4:64:
                    7c:b1:64:20:92:0b:0d:5d:fc:2a:30:d3:52:78:79:
                    bf:89:a9:2e:d7:5a:92:55:dc:24:c9:c2:c1:b0:24:
                    bc:bd:e5:2d:33:d4:d3:b6:26:18:fe:6c:6b:b4:6c:
                    23:36:cb:05:48:82:b3:73:42:ed:cf:bd:f4:66:12:
                    6c:13:6b:51:98:0e:71:4b:ca:16:17:b0:28:cf:c0:
                    9e:bc:3d:6c:d6:21:9d:38:f9:bc:c6:a7:ec:e8:8f:
                    c8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:65:ED:29:2E:25:5A:AB:DE:F9:AA:7C:56:62:07:AA:1A:83:E5:11
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7mXtKS4lWqve-ap8VmIHqhqD5RE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.91.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:e7:a2:61:c0:32:a6:86:6b:dd:15:a7:49:05:32:7a:12:90:
         ca:2d:23:21:06:2d:25:2e:81:44:fd:7e:b9:5a:64:4c:ec:ed:
         b7:36:17:b2:5c:30:15:2b:6e:96:85:b1:50:a9:20:cd:34:a5:
         f0:cd:12:0b:ac:cf:bd:66:ad:a0:7d:8e:3d:1d:62:4c:28:b7:
         78:94:39:ea:f6:95:e8:fd:7a:a0:8b:2b:9a:10:03:76:52:18:
         5a:b7:9d:9c:2a:27:6d:0c:55:7a:53:cd:87:b5:8a:bf:3c:f1:
         40:52:2f:e5:7d:86:09:61:56:47:07:6a:db:18:a3:01:33:76:
         29:06:6c:4f:2b:e1:07:79:ef:47:6c:2b:16:15:64:4d:8a:18:
         6f:ca:cc:76:14:11:7f:84:f8:da:c3:93:0a:46:d5:c9:3d:77:
         e7:f3:94:90:df:2b:2c:ff:80:db:29:c7:ec:ff:ef:0f:28:79:
         a5:f9:e0:e1:a6:4b:28:90:7e:51:49:11:be:eb:da:90:71:d6:
         ca:3c:78:07:ad:3f:fa:b8:56:fd:12:4b:1f:0c:1f:85:e7:e7:
         a0:c4:9d:18:c0:10:1b:d3:7f:2b:0a:a7:ca:d6:a3:48:4d:37:
         10:50:c4:69:09:f6:7c:89:ae:ee:d9:64:6b:0a:b9:df:de:b8:
         31:bd:8e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:32 2023 by rpki-client on console-ams.rpki-client.org