Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/3sO2y5NveXkLkL_I_Pi-l_V68SU.roa
File:                     3sO2y5NveXkLkL_I_Pi-l_V68SU.roa (raw, json)
Hash identifier:          8Z59OvmLWHUZvmxUXClyM4wi9KwOiX5Uk8ocKbMWtOA=
Subject key identifier:   DE:C3:B6:CB:93:6F:79:79:0B:90:BF:C8:FC:F8:BE:97:F5:7A:F1:25
Certificate issuer:       /CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Certificate serial:       0186508314049D70C5E908850FFDF2DB411C
Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/3sO2y5NveXkLkL_I_Pi-l_V68SU.roa
Signing time:             Tue 14 Feb 2023 15:20:12 +0000
ROA not before:           Tue 14 Feb 2023 15:20:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     11351
IP address blocks:        185.45.92.0/23 maxlen: 23
                          45.158.192.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:50:83:14:04:9d:70:c5:e9:08:85:0f:fd:f2:db:41:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc
        Validity
            Not Before: Feb 14 15:20:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=dec3b6cb936f79790b90bfc8fcf8be97f57af125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ff:81:e0:4c:19:5e:bb:e1:41:61:97:e4:25:
                    66:89:da:99:b9:8b:43:b7:0d:9f:38:61:b7:97:05:
                    d4:1d:16:35:2d:c7:67:7c:00:5f:e9:a9:be:a1:b1:
                    b9:d1:89:6e:92:ef:d7:e9:7d:bc:09:39:dc:94:5a:
                    52:64:20:60:b9:d6:23:26:e4:b7:63:18:19:92:b8:
                    bd:ec:0c:8d:d5:b6:cc:f0:89:ef:ff:e3:0c:ae:43:
                    00:3d:32:ec:25:91:69:9e:a6:76:ee:37:00:4c:26:
                    77:d7:d2:88:0b:0d:94:dd:cc:6f:59:62:39:53:62:
                    d3:30:1f:9d:46:f2:4b:48:92:aa:43:cf:84:45:e6:
                    78:3d:6e:b7:f5:02:00:17:a6:f5:ed:6b:e4:d4:48:
                    42:1b:6b:0b:69:22:71:e3:73:90:a8:98:88:b9:8f:
                    4b:65:1d:bb:88:05:a6:97:c3:0c:d7:2d:98:fa:f9:
                    b3:e9:55:19:10:4a:6b:b7:50:2e:f9:c5:6a:8e:03:
                    3b:15:06:6a:e4:48:ab:ed:77:e5:c7:82:b5:31:68:
                    e2:68:74:48:c9:a7:f6:c6:3b:bc:d7:09:b7:db:82:
                    13:6e:a9:93:fe:94:55:31:7a:c7:cd:41:78:57:f3:
                    cd:9a:1a:b6:10:71:94:15:ae:cc:33:3d:53:9a:81:
                    22:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C3:B6:CB:93:6F:79:79:0B:90:BF:C8:FC:F8:BE:97:F5:7A:F1:25
            X509v3 Authority Key Identifier:
                keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/3sO2y5NveXkLkL_I_Pi-l_V68SU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.158.192.0/22
                  185.45.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:b9:55:b0:98:68:a6:ef:c8:74:4c:cf:c8:d6:10:c7:1f:5b:
         92:29:34:ec:03:1c:e4:1a:65:9c:ee:83:d5:ef:6d:f2:d9:40:
         93:d4:e5:02:bb:99:ed:44:65:5a:79:6f:6e:9a:48:40:89:54:
         b0:48:c8:e6:4b:13:95:d6:1c:9d:70:fd:91:f5:45:0f:56:2a:
         50:7c:67:3e:7d:f5:a3:6a:69:3b:13:0a:a8:65:bd:74:0b:71:
         37:12:5d:55:b8:c5:02:35:52:97:63:dd:71:25:36:69:54:eb:
         ce:6c:29:23:c4:0b:88:63:c8:a9:ef:dd:d8:34:4b:44:c0:cd:
         43:86:48:5a:39:61:16:f7:e9:f4:25:87:3b:91:68:f1:ed:31:
         36:03:60:00:2a:8b:e8:b2:9b:60:9c:5c:ed:94:26:06:cd:5a:
         d2:75:7b:74:66:42:4d:3c:0f:8e:ee:fa:66:a8:26:89:f7:a5:
         d6:ce:8e:77:f1:32:58:9c:3c:7f:f2:52:6a:a3:43:90:5f:42:
         09:64:b8:a9:2a:9a:28:e1:f0:8a:e3:d7:7c:d4:f9:cf:49:8e:
         76:69:0b:0c:62:2c:55:8b:b6:6f:e8:38:45:af:77:0b:a4:34:
         32:f1:dd:c0:ee:ba:f7:e9:ac:44:65:64:fc:e4:63:a1:b0:7f:
         92:f3:17:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:45 2023 by rpki-client on console-ams.rpki-client.org