Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/E7_PvbaDwQz6hk6MkXEJEJQJ6cE.roa
File:                     E7_PvbaDwQz6hk6MkXEJEJQJ6cE.roa (raw, json)
Hash identifier:          CJ9PjmYlnVP84fnPBx9N1r+eh3dOwnytRcjHGEvVBoQ=
Subject key identifier:   13:BF:CF:BD:B6:83:C1:0C:FA:86:4E:8C:91:71:09:10:94:09:E9:C1
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       01860BA16AF307CE27D9BA9F29234FD2D71C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/E7_PvbaDwQz6hk6MkXEJEJQJ6cE.roa
Signing time:             Wed 01 Feb 2023 06:19:33 +0000
ROA not before:           Wed 01 Feb 2023 06:19:33 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200785
IP address blocks:        45.133.251.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 13 Mar 2023 17:05:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:0b:a1:6a:f3:07:ce:27:d9:ba:9f:29:23:4f:d2:d7:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Feb  1 06:19:33 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=13bfcfbdb683c10cfa864e8c917109109409e9c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e6:cd:99:d1:ff:f8:b6:38:c2:20:0d:b4:e9:
                    4d:19:1d:54:38:32:c6:28:c0:82:a1:49:a3:7b:4d:
                    fd:5f:c7:b0:b2:6f:9f:d3:9d:32:d7:56:e0:c2:cf:
                    ee:50:39:dc:cf:9b:88:20:cd:08:e3:9d:e4:76:6c:
                    ec:63:41:67:99:c3:7f:29:8a:b8:d2:4f:d6:27:e4:
                    fa:63:59:df:3d:46:3c:46:c0:6f:98:d9:f8:67:7a:
                    d2:e6:a8:7a:a3:bc:e0:1d:bb:33:06:92:95:59:c2:
                    45:ec:04:37:a8:a6:db:bd:11:4a:18:c8:94:15:e6:
                    86:cb:ef:25:17:a3:12:8f:5c:a6:7b:44:80:a6:86:
                    86:86:7a:9c:64:dc:c6:1a:92:c2:7e:29:51:75:14:
                    1a:21:fe:fd:be:f7:4e:b5:17:27:e2:47:9c:f9:36:
                    9c:07:8b:be:5b:ba:ca:c6:11:78:ce:a6:4b:ea:e4:
                    6e:fb:36:8d:c2:5c:5b:7b:19:34:af:ce:36:04:2b:
                    5e:63:b1:8b:a7:0b:65:9b:91:e6:e7:08:9d:bc:f3:
                    5a:df:df:e9:ff:f1:aa:b9:e3:99:31:70:88:78:d6:
                    12:96:e6:1f:6a:2d:f6:d4:39:c2:e2:84:57:43:dd:
                    97:90:32:0c:03:0a:84:d5:47:ef:61:49:ef:b7:74:
                    7f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:BF:CF:BD:B6:83:C1:0C:FA:86:4E:8C:91:71:09:10:94:09:E9:C1
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/E7_PvbaDwQz6hk6MkXEJEJQJ6cE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.133.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:57:ef:f9:82:fc:e2:fc:e2:2a:bf:a1:10:0d:aa:f7:12:d0:
         51:26:9c:8d:20:54:34:cd:cb:1b:58:bb:8b:2d:5e:7b:e4:51:
         aa:75:4e:9a:04:32:24:07:5f:d2:72:49:bf:6e:0a:5e:c8:b6:
         32:12:55:b0:2b:da:a8:80:09:f3:ba:98:c4:a6:a5:e8:80:2d:
         da:a0:6a:08:8b:65:1b:63:40:b2:28:6f:82:57:de:31:b5:56:
         58:4a:41:51:4b:04:23:c6:44:ad:a4:9f:5a:ba:0d:28:63:36:
         7d:2a:6b:f5:c5:46:c4:05:6d:49:16:a1:b1:6d:27:10:da:8f:
         12:da:5f:43:ef:26:9c:14:36:3a:b0:eb:87:ac:d5:5a:0c:4a:
         fe:0c:23:a9:15:53:a9:14:50:7e:80:cd:23:1e:e8:97:ce:2f:
         3c:28:a1:a4:88:5e:b1:87:c2:d6:19:ef:bf:ad:2c:ef:47:f6:
         03:f0:e5:c5:3d:e6:1f:26:85:b4:7a:60:d2:1b:36:58:2d:81:
         b6:f0:3f:98:60:1a:64:78:bb:08:d1:7b:77:60:f4:68:ce:a3:
         f6:82:39:5b:e2:0a:1e:a2:e1:89:ac:6f:17:45:cf:ec:44:bb:
         9f:f0:49:f1:0f:ba:ee:dd:7f:74:fe:35:5b:d2:4c:9c:3e:55:
         33:a1:d0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:27 2024 by rpki-client on console-ams.rpki-client.org