Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/eD6BipscFTnh2QIzrShBMkp516A.roa
File:                     eD6BipscFTnh2QIzrShBMkp516A.roa (raw, json)
Hash identifier:          6WXgivya96sPyoZIbO+V93UBHTzwzI3S/Jz/BY21hL4=
Subject key identifier:   78:3E:81:8A:9B:1C:15:39:E1:D9:02:33:AD:28:41:32:4A:79:D7:A0
Certificate issuer:       /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial:       0188E77EF1020FF619178B0C917BAB1A181D
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/eD6BipscFTnh2QIzrShBMkp516A.roa
Signing time:             Fri 23 Jun 2023 09:03:56 +0000
ROA not before:           Fri 23 Jun 2023 09:03:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        45.135.136.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e7:7e:f1:02:0f:f6:19:17:8b:0c:91:7b:ab:1a:18:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
        Validity
            Not Before: Jun 23 09:03:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=783e818a9b1c1539e1d90233ad2841324a79d7a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:70:0c:62:44:1b:5b:a2:bc:92:95:1c:58:54:
                    88:98:0b:4e:66:35:b0:3d:ef:55:91:62:fa:4f:e6:
                    54:98:1a:77:69:fb:58:76:44:b1:0d:22:b6:db:8c:
                    87:a1:60:ba:98:57:07:0b:0b:c1:33:e6:1c:73:66:
                    0f:ec:87:6d:8a:3b:20:6c:81:13:ea:3e:6a:9f:8e:
                    37:3c:1e:38:75:bc:96:13:00:7e:66:b5:86:7c:a0:
                    12:66:e2:a4:4f:a8:4c:bb:a4:d7:43:eb:8e:e2:b8:
                    aa:13:c9:ee:ec:ef:fb:26:14:a9:99:b4:70:2c:43:
                    49:5f:4d:36:81:08:bd:c2:0f:b0:68:1c:04:c6:5f:
                    a3:fd:75:e1:b6:4b:73:93:28:d4:ec:5e:7b:2e:74:
                    99:9c:bb:5c:c6:60:eb:a7:dc:14:7f:70:64:0a:c3:
                    bb:55:75:b6:39:ed:e0:aa:3b:61:29:cc:a0:5d:5d:
                    88:61:ba:1b:c8:7c:da:57:cf:81:32:33:f2:d7:b9:
                    e3:79:b2:7e:56:9f:af:74:e5:92:8c:03:10:ca:18:
                    34:4d:47:78:84:8b:57:11:c0:bb:d4:0f:9e:27:d3:
                    07:c9:28:ff:4c:de:d1:05:5e:7f:27:75:d3:f3:94:
                    a3:86:69:8f:9b:9d:b5:64:fd:76:cc:a2:d2:b0:60:
                    2e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:3E:81:8A:9B:1C:15:39:E1:D9:02:33:AD:28:41:32:4A:79:D7:A0
            X509v3 Authority Key Identifier:
                keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/eD6BipscFTnh2QIzrShBMkp516A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:2f:e7:5f:0f:9a:ef:f5:dd:bf:97:73:c0:fd:7a:c7:ca:f0:
         b8:4f:f6:b5:e1:95:3d:86:95:52:5e:b6:c1:1f:e1:05:c8:00:
         dd:61:8f:a4:0c:de:a8:32:81:25:b1:02:52:c4:c5:66:d7:1e:
         e8:c9:9a:09:8f:c2:3c:66:a3:4b:dc:2b:4c:9f:75:c2:45:8e:
         c6:61:17:f8:d6:98:0d:3f:1e:df:b4:fc:19:af:6c:e0:0f:0a:
         c0:fb:20:66:b8:76:83:3b:ad:e7:4d:ca:20:25:f2:2a:73:16:
         36:d8:86:25:86:f2:f4:69:4b:1d:b1:57:2f:26:70:65:ea:c7:
         d3:15:78:b8:04:bc:75:5f:00:4e:5a:b7:e1:61:1c:76:f0:cb:
         52:d8:3e:95:ee:e3:6a:41:c3:9d:fd:79:2c:68:a6:29:f8:c8:
         e9:41:f7:a2:cb:dc:f7:b5:74:93:64:74:09:0b:99:7a:c5:85:
         af:e4:fc:e2:b0:7c:6e:5c:46:34:98:c8:04:cf:70:e4:d1:cd:
         dd:91:1d:38:7c:1f:8a:f6:3b:8b:43:e4:62:ba:ff:40:47:89:
         99:3d:6c:cd:50:09:76:76:fe:13:fd:19:a8:ad:7f:78:3a:d7:
         3f:a6:b3:82:0d:84:af:c3:ea:47:80:b1:c4:89:4a:ee:8c:b5:
         d7:e7:37:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:52 2023 by rpki-client on console-fra.rpki-client.org