Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oidcVSJCRJ1mbSuTqJkKGH5dxqs.roa
File:                     oidcVSJCRJ1mbSuTqJkKGH5dxqs.roa (raw, json)
Hash identifier:          2cV5YW2h0tRrJDpoNUhjuJtzRxjoB6bT25N2den5ipE=
Subject key identifier:   A2:27:5C:55:22:42:44:9D:66:6D:2B:93:A8:99:0A:18:7E:5D:C6:AB
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       01880BDCF2DB377B7264A9B5D2C40097DD6E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oidcVSJCRJ1mbSuTqJkKGH5dxqs.roa
Signing time:             Thu 11 May 2023 17:30:09 +0000
ROA not before:           Thu 11 May 2023 17:30:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     147287
IP address blocks:        45.8.94.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:0b:dc:f2:db:37:7b:72:64:a9:b5:d2:c4:00:97:dd:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: May 11 17:30:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a2275c552242449d666d2b93a8990a187e5dc6ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2b:0b:15:d8:07:b2:01:e5:0c:5b:0c:a8:9f:
                    66:b8:3d:12:72:78:46:b9:b3:99:2e:1f:b4:24:3b:
                    53:48:1d:1f:6b:76:2e:2b:cb:45:3f:91:3f:9f:24:
                    3c:83:dc:aa:80:52:3b:2f:dc:f7:e9:11:13:b2:08:
                    b6:9f:7f:57:57:d8:4f:e5:d0:07:d4:e5:2e:8c:d7:
                    a4:9e:08:81:cd:95:d5:5c:0f:ea:33:c4:ca:54:02:
                    d6:14:64:ad:43:7b:21:b2:b4:10:1e:b2:14:6e:2a:
                    ac:3f:74:1b:2a:52:9d:6c:39:c2:f4:12:50:50:d7:
                    44:ad:5d:88:93:e7:3f:4a:66:40:b3:4b:cd:02:9b:
                    8f:7e:c7:34:27:34:4a:32:11:11:05:c2:ec:01:1c:
                    7b:11:8d:81:3d:91:36:e8:62:77:43:c5:3a:af:ea:
                    95:db:58:78:8c:c9:83:13:ce:f9:ba:7e:07:d7:3b:
                    ed:67:a8:f6:cc:51:87:e7:0b:57:e1:a4:d1:47:f3:
                    18:37:b1:e7:7e:d2:2d:e2:e1:53:67:5b:bc:e0:6e:
                    ad:7e:fb:35:18:ec:f0:9d:66:08:ed:82:e0:62:ac:
                    5b:7a:d1:ba:45:4f:af:7e:35:b2:98:e2:17:95:ea:
                    26:4e:41:33:6e:1b:93:08:6a:45:02:fa:ac:8f:a9:
                    4a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:27:5C:55:22:42:44:9D:66:6D:2B:93:A8:99:0A:18:7E:5D:C6:AB
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/oidcVSJCRJ1mbSuTqJkKGH5dxqs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:88:0a:33:d6:de:5d:bb:a0:bc:9e:75:97:7d:37:4c:bc:e2:
         47:36:03:be:ea:6d:f6:8c:11:b2:a8:f7:86:39:e2:b4:c6:9f:
         f5:68:45:93:69:ee:bf:fa:cd:f9:89:1b:74:51:07:3d:0c:4a:
         a7:8e:e6:59:ff:f2:b8:ff:89:c1:36:48:f0:a7:40:41:59:ff:
         a5:de:fe:fe:23:f3:f4:f3:53:34:67:9f:1d:ad:f6:c0:5c:7a:
         86:72:f7:18:ca:04:92:e8:b4:26:4b:4e:50:37:15:1d:75:ac:
         86:dc:af:c9:5b:18:a0:c6:c4:d4:25:e6:35:22:58:3f:e5:6b:
         d0:7d:58:95:27:2d:ab:07:5a:09:3d:e6:b9:74:68:d4:70:d9:
         5a:7d:38:95:d8:c5:3b:8d:d1:b5:c4:84:01:72:3e:59:fa:3b:
         6e:6f:0e:6e:8a:8b:29:a1:5e:fd:59:ca:17:d2:cd:01:1d:9a:
         d8:25:8b:19:1b:b1:3a:0c:47:84:9e:ee:09:e4:16:90:e9:0e:
         da:76:8c:65:8b:a7:aa:99:1e:5d:78:23:3e:74:45:b9:cd:13:
         6c:9b:a5:80:27:bb:a1:c4:32:a1:41:ce:40:04:c9:4b:1b:47:
         40:3c:58:30:25:79:a2:1f:57:81:c8:78:48:ac:f0:2a:43:89:
         de:9d:79:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 8 10:43:31 2023 by rpki-client on console-fra.rpki-client.org