Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/HUB_VZo9t1yXRSGEJRkgkr3sRkk.roa
File:                     HUB_VZo9t1yXRSGEJRkgkr3sRkk.roa (raw, json)
Hash identifier:          qqO3f0jPGYb/x8PPRWqWh6tyuFO88bkeV2EuAVXO044=
Subject key identifier:   1D:40:7F:55:9A:3D:B7:5C:97:45:21:84:25:19:20:92:BD:EC:46:49
Certificate issuer:       /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial:       01879ED4DD5ECE2A5D939F96B9512811F44A
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/HUB_VZo9t1yXRSGEJRkgkr3sRkk.roa
Signing time:             Thu 20 Apr 2023 13:22:42 +0000
ROA not before:           Thu 20 Apr 2023 13:22:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211440
IP address blocks:        45.155.65.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:9e:d4:dd:5e:ce:2a:5d:93:9f:96:b9:51:28:11:f4:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
        Validity
            Not Before: Apr 20 13:22:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1d407f559a3db75c9745218425192092bdec4649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6f:8c:b9:20:ee:0c:bd:a0:95:47:e7:63:ff:
                    d0:f1:0b:d1:91:13:55:24:41:4d:26:2c:71:30:b3:
                    38:9b:12:e0:47:f7:69:52:88:cd:6a:41:a0:2c:63:
                    47:a2:b2:20:df:94:b7:c3:9e:f0:68:6a:11:e7:01:
                    89:fc:b0:96:59:16:c1:79:e4:d2:e2:96:6e:7b:5a:
                    ad:04:65:18:87:d5:e2:dc:15:69:57:c3:03:ce:59:
                    80:d6:6c:77:19:81:ef:7b:63:10:08:74:95:69:c4:
                    2f:00:01:de:8c:c1:1e:c0:13:13:ae:05:c5:ed:e1:
                    ea:c2:07:8b:11:86:23:5d:6b:fa:2a:13:5c:79:70:
                    2a:4a:4e:31:c6:c5:13:c1:cd:35:af:75:74:b0:22:
                    06:b5:7f:66:55:1f:41:78:b2:a1:8a:03:4b:9d:2d:
                    eb:ac:56:ed:05:30:9c:5a:50:de:65:17:6f:88:88:
                    f3:69:f0:31:c9:19:54:de:d8:03:ae:44:c0:55:24:
                    87:95:4f:4b:18:d7:97:e9:4d:53:50:de:43:86:0f:
                    41:10:5b:2a:47:e6:6c:9a:0f:01:ea:cf:5d:06:e4:
                    91:ee:c1:22:90:ae:f3:50:58:28:50:14:33:a9:64:
                    76:e6:c0:88:32:bb:13:65:38:88:d3:07:30:2a:7b:
                    c2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:40:7F:55:9A:3D:B7:5C:97:45:21:84:25:19:20:92:BD:EC:46:49
            X509v3 Authority Key Identifier:
                keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/HUB_VZo9t1yXRSGEJRkgkr3sRkk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:83:2a:ce:a1:f7:00:07:55:ea:34:f6:b0:94:9a:f5:0f:7e:
         b4:23:4c:82:ac:c3:78:d8:d7:89:df:77:a6:30:1b:7f:cf:47:
         c3:b8:ce:0e:1b:a2:c2:54:6b:d8:0c:b4:3a:ef:3a:b3:f2:8d:
         66:8c:e6:5d:1d:f1:cc:63:79:06:ff:9f:1f:89:4d:31:09:b2:
         b3:e5:0c:f6:8d:c0:92:92:47:d5:cb:8a:ce:cc:48:99:ee:06:
         60:fc:87:d2:a1:c8:b7:3e:26:08:d4:a5:e3:9b:af:a6:75:6c:
         d8:8d:a4:c8:28:c5:e7:32:eb:bd:96:0d:84:dd:be:88:11:ca:
         57:d4:cb:7b:f8:d9:14:65:6c:08:d9:94:3d:3a:4c:81:47:c6:
         5f:90:5e:e0:16:74:a9:de:a7:4f:97:41:88:67:13:b7:96:8b:
         2b:50:de:20:64:87:5d:40:d0:2b:14:f1:12:33:b9:2a:0b:52:
         f4:58:b0:1f:27:69:ca:93:f4:2f:d5:31:4d:e8:db:5e:96:0e:
         4a:bf:d1:c5:5f:6d:fc:64:23:ff:ed:7f:49:5c:dd:da:cd:8d:
         ec:3b:16:2a:ce:1e:13:d2:4e:f5:b2:a1:4d:f5:c4:63:91:3c:
         1e:91:49:0d:8a:6e:e8:75:47:ba:3e:07:66:e2:c2:8d:7c:e5:
         6c:bc:ea:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:10 2023 by rpki-client on console-fra.rpki-client.org