Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eaVBrXNfNv8WW6wtx94M4ARjhgU.roa
File:                     eaVBrXNfNv8WW6wtx94M4ARjhgU.roa (raw, json)
Hash identifier:          i/Y5KmKhfwNoT0PnVouWsv6fRMNzHoIgaQel24P/p8M=
Subject key identifier:   79:A5:41:AD:73:5F:36:FF:16:5B:AC:2D:C7:DE:0C:E0:04:63:86:05
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       01882F4E829EF4EC99281D210B7DDE091EDB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eaVBrXNfNv8WW6wtx94M4ARjhgU.roa
Signing time:             Thu 18 May 2023 14:40:54 +0000
ROA not before:           Thu 18 May 2023 14:40:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50738
IP address blocks:        45.9.156.0/24 maxlen: 24
                          45.12.255.0/24 maxlen: 24
                          45.66.228.0/24 maxlen: 24
                          87.120.130.0/24 maxlen: 24
                          147.78.100.0/23 maxlen: 24
                          185.246.223.0/24 maxlen: 24
                          194.180.39.0/24 maxlen: 24
                          45.139.104.0/24 maxlen: 24
                          82.115.210.0/23 maxlen: 24
                          45.129.84.0/24 maxlen: 24
                          45.129.86.0/24 maxlen: 24
                          94.154.172.0/24 maxlen: 24
                          193.35.19.0/24 maxlen: 24
                          87.121.124.0/23 maxlen: 24
                          171.22.31.0/24 maxlen: 24
                          81.161.230.0/24 maxlen: 24
                          93.123.39.0/24 maxlen: 24
                          81.161.239.0/24 maxlen: 24
                          178.215.226.0/24 maxlen: 24
                          91.200.192.0/22 maxlen: 24
                          94.156.250.0/24 maxlen: 24
                          94.156.248.0/24 maxlen: 24
                          87.121.162.0/24 maxlen: 24
                          94.156.160.0/24 maxlen: 24
                          45.141.158.0/24 maxlen: 24
                          171.22.17.0/24 maxlen: 24
                          171.22.18.0/24 maxlen: 24
                          83.219.97.0/24 maxlen: 24
                          87.121.220.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:2f:4e:82:9e:f4:ec:99:28:1d:21:0b:7d:de:09:1e:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: May 18 14:40:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=79a541ad735f36ff165bac2dc7de0ce004638605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:75:12:5e:99:44:56:18:f5:91:71:8a:13:e5:
                    ea:57:81:77:90:69:b7:91:d2:29:96:84:17:c7:62:
                    21:3c:83:4b:cd:36:0c:4d:6c:15:3a:d1:ee:79:90:
                    ba:9b:54:af:5b:4e:0f:d2:bd:09:66:7f:7a:e6:1b:
                    bf:95:6b:0e:6a:15:cf:11:d3:b7:eb:db:5a:e7:75:
                    56:44:dd:b8:e8:e3:c7:c0:b2:be:ce:da:ca:59:51:
                    ee:83:5d:7d:85:c3:90:e6:58:07:72:f4:a4:60:61:
                    0b:28:4c:0c:c6:a4:2f:68:e8:2f:9a:db:ab:c4:b9:
                    7f:cc:a8:44:1b:6e:c6:6c:00:67:bd:74:4f:bc:6a:
                    a0:d3:92:99:1b:57:4d:1f:6e:d6:0d:67:dd:30:d4:
                    42:bb:96:4e:4d:cc:8c:14:ab:fa:8d:a8:90:e4:9f:
                    f1:4c:2b:79:d8:bf:11:76:19:03:ef:c5:fd:37:d7:
                    6e:03:8e:0f:76:f8:f0:38:31:81:90:c9:1d:aa:f4:
                    7b:99:1b:16:f9:39:22:3a:bb:8f:f5:19:e8:b8:46:
                    0f:b1:f2:20:c3:18:03:bb:0c:80:c2:3b:dd:42:4b:
                    53:0d:84:81:21:e8:13:bd:1c:11:4c:a8:75:59:ab:
                    6b:04:b4:69:50:e3:d1:d1:fb:07:4c:de:12:18:d1:
                    b5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A5:41:AD:73:5F:36:FF:16:5B:AC:2D:C7:DE:0C:E0:04:63:86:05
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eaVBrXNfNv8WW6wtx94M4ARjhgU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.9.156.0/24
                  45.12.255.0/24
                  45.66.228.0/24
                  45.129.84.0/24
                  45.129.86.0/24
                  45.139.104.0/24
                  45.141.158.0/24
                  81.161.230.0/24
                  81.161.239.0/24
                  82.115.210.0/23
                  83.219.97.0/24
                  87.120.130.0/24
                  87.121.124.0/23
                  87.121.162.0/24
                  87.121.220.0/24
                  91.200.192.0/22
                  93.123.39.0/24
                  94.154.172.0/24
                  94.156.160.0/24
                  94.156.248.0/24
                  94.156.250.0/24
                  147.78.100.0/23
                  171.22.17.0-171.22.18.255
                  171.22.31.0/24
                  178.215.226.0/24
                  185.246.223.0/24
                  193.35.19.0/24
                  194.180.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:69:3e:34:36:3b:0e:f3:5d:95:c9:b1:54:62:b6:04:df:5e:
         df:f0:5f:0e:67:d8:f1:2a:b8:dd:ab:0c:8e:3c:fc:05:17:d2:
         f0:19:15:7e:f8:1d:26:0e:b9:d9:0a:91:db:aa:51:22:45:32:
         34:06:91:7a:01:e3:6d:7e:0c:c9:0e:2c:85:7b:f6:fe:82:1a:
         96:5b:72:78:40:d7:26:e5:61:98:b3:b0:a2:0f:17:e0:27:2d:
         d7:f7:1c:45:8a:a5:59:8a:ba:30:6e:35:20:f6:ce:5a:f1:d2:
         7a:07:74:d6:5c:88:db:8a:1d:03:37:9d:15:2c:07:f0:91:83:
         c3:44:f5:26:74:f1:fd:be:46:7c:b7:cf:01:70:37:d8:46:7e:
         c2:53:f4:ae:e6:3d:42:47:fb:86:5c:bb:83:b3:82:4e:f8:b7:
         ab:cc:e7:b4:9e:37:c1:71:b6:72:29:85:0a:53:3f:fd:61:d8:
         3a:7e:e5:41:26:95:2f:3c:58:f2:52:c2:17:f1:44:b7:05:bb:
         0c:26:a3:9b:7f:99:9c:51:43:1a:a3:a7:16:c1:24:30:d3:a0:
         42:34:f1:49:c5:6a:b4:48:50:2e:e8:bf:91:9e:a9:ad:da:51:
         35:b1:57:fc:5a:50:ba:70:94:5a:2e:bd:c5:ed:64:d6:00:61:
         36:01:95:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:40 2023 by rpki-client on console-ams.rpki-client.org