Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/BPA1bFds9fErliYvXclT06nId_w.roa
File:                     BPA1bFds9fErliYvXclT06nId_w.roa (raw, json)
Hash identifier:          awX9E91+19w2v9/DlkDnHgZObS24bgFfDS92aMcWI/I=
Subject key identifier:   04:F0:35:6C:57:6C:F5:F1:2B:96:26:2F:5D:C9:53:D3:A9:C8:77:FC
Certificate issuer:       /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial:       0189B55620D8724AECB6C5E76DB83EB25EAC
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/BPA1bFds9fErliYvXclT06nId_w.roa
Signing time:             Wed 02 Aug 2023 08:21:07 +0000
ROA not before:           Wed 02 Aug 2023 08:21:07 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     136778
IP address blocks:        45.131.178.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:b5:56:20:d8:72:4a:ec:b6:c5:e7:6d:b8:3e:b2:5e:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
        Validity
            Not Before: Aug  2 08:21:07 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=04f0356c576cf5f12b96262f5dc953d3a9c877fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e1:a2:dd:98:ab:f3:67:9d:4a:46:51:87:0a:
                    5f:fe:23:23:c3:4a:05:cb:c7:0f:87:9e:ce:09:59:
                    e8:58:cb:eb:ac:6f:5f:f8:f7:fb:b5:97:8a:40:b5:
                    75:b7:90:90:34:5a:ee:f2:4b:4e:6d:f7:ed:fe:0b:
                    c0:97:59:10:44:cb:20:3a:d1:6f:a3:fc:64:c3:a2:
                    3d:77:71:cc:3f:5d:24:c1:32:35:0f:d2:e1:e7:64:
                    e1:14:3b:9e:87:7d:60:a9:ba:38:f3:84:41:72:53:
                    ca:69:30:21:81:82:eb:c0:52:03:4d:42:4a:62:73:
                    67:18:f2:bf:70:df:ba:64:94:52:ac:fd:b7:fe:f2:
                    96:2c:ec:2e:aa:57:c2:db:f9:63:65:b1:1e:d1:e8:
                    67:a3:60:22:49:c8:45:a1:16:ae:1d:0c:69:cc:24:
                    bc:31:af:5c:69:26:05:c5:43:95:d5:0f:ce:f8:75:
                    84:da:69:80:d7:8d:81:2b:fc:ec:f9:7f:5c:4f:25:
                    af:65:0b:21:05:d7:15:62:7b:ef:9c:f7:14:23:6a:
                    09:ca:c8:b7:35:dd:64:f9:6f:ca:55:1e:bf:6c:1b:
                    85:b4:1e:9e:88:15:a1:7a:7e:01:75:3f:07:46:91:
                    be:2f:dc:db:96:76:3c:e4:9f:7a:41:bc:59:8c:91:
                    d0:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F0:35:6C:57:6C:F5:F1:2B:96:26:2F:5D:C9:53:D3:A9:C8:77:FC
            X509v3 Authority Key Identifier:
                keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/BPA1bFds9fErliYvXclT06nId_w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.131.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:ae:dd:2d:13:1c:ae:9c:5f:15:11:e6:39:45:5f:5a:36:78:
         ab:1e:d1:19:2e:69:d8:85:6a:c1:b8:79:33:ce:61:61:20:11:
         6e:7a:21:58:b6:b0:50:e6:ad:73:b5:cc:bc:cc:26:62:c0:20:
         58:8c:24:6a:6b:db:e4:c2:f8:e7:2a:90:3e:1d:e8:13:f4:93:
         25:04:11:da:11:a3:ef:5b:c1:89:bd:54:c0:a8:f1:9c:60:dc:
         b2:af:97:57:84:c8:b2:64:3b:b6:e8:1f:12:45:ee:63:d0:1d:
         d4:9a:9a:c3:af:87:be:ba:09:ff:5e:52:fc:9d:93:72:b5:53:
         3b:ba:66:12:a8:60:a1:42:a5:92:9f:6d:0c:21:78:5a:45:23:
         1b:01:c6:9e:92:69:62:69:8b:55:3b:15:b4:ab:f3:bb:6a:4b:
         8d:12:c2:e2:97:6f:3b:d7:2c:53:4d:ef:5d:30:66:6a:81:b6:
         0e:5a:c2:e1:6f:0f:1f:bf:c5:64:91:d5:ec:1b:74:7f:5e:6b:
         3f:2a:83:99:e4:68:eb:9d:cf:eb:5f:91:a3:59:33:5a:3a:75:
         70:1a:f2:4f:a1:39:86:71:5a:92:be:4a:ae:dd:49:92:bc:46:
         f8:b2:44:7c:a8:06:c6:c2:2f:b5:24:23:91:29:2d:13:98:14:
         ac:43:f2:87
-----BEGIN CERTIFICATE-----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Generated at Sat Aug 5 09:10:18 2023 by rpki-client on console-fra.rpki-client.org