Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/BdsrmabZTMQ-3ghtD6UMPXRwwlk.roa
File:                     BdsrmabZTMQ-3ghtD6UMPXRwwlk.roa (raw, json)
Hash identifier:          nLURpFF0aX4USELY4zlWACB6hDy5ggKgFaiIwh5HZI4=
Subject key identifier:   05:DB:2B:99:A6:D9:4C:C4:3E:DE:08:6D:0F:A5:0C:3D:74:70:C2:59
Certificate issuer:       /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial:       01881698731150ABABDC6CBD34506C70A3EF
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/BdsrmabZTMQ-3ghtD6UMPXRwwlk.roa
Signing time:             Sat 13 May 2023 19:31:09 +0000
ROA not before:           Sat 13 May 2023 19:31:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14445
IP address blocks:        45.155.254.0/24 maxlen: 24
                          45.155.253.0/24 maxlen: 24
                          185.226.180.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:16:98:73:11:50:ab:ab:dc:6c:bd:34:50:6c:70:a3:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
        Validity
            Not Before: May 13 19:31:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=05db2b99a6d94cc43ede086d0fa50c3d7470c259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:32:b4:f9:4b:3c:08:3e:3f:8f:c6:9b:36:89:
                    43:ce:83:f7:6e:c6:b1:a2:de:24:5d:1b:58:0f:bd:
                    3a:7e:8f:c4:24:09:3a:10:3d:ac:9f:3d:76:74:78:
                    64:e1:42:52:c1:1b:60:63:6d:56:05:e5:16:17:e6:
                    df:e0:bc:db:3f:8c:06:6a:5c:f9:6e:59:04:21:8f:
                    d0:97:f3:b9:78:e1:25:7c:7d:9b:1d:c8:3b:8c:7d:
                    90:41:ff:6f:69:b4:61:97:44:7d:35:5d:da:b0:24:
                    62:a7:e7:1b:c5:79:bc:1c:ca:89:b7:04:c6:67:ec:
                    46:ff:79:ce:9f:2a:06:11:47:78:a2:ae:93:36:bd:
                    b2:7c:36:42:cd:09:21:6d:49:95:fc:f6:5a:0e:4d:
                    f9:3c:c9:a6:f3:88:6e:74:34:c1:ef:3b:d4:97:4e:
                    f1:ae:c8:30:b3:13:87:3e:2c:4d:7f:21:64:17:f1:
                    3c:23:04:80:2c:e2:a2:72:6d:52:52:29:a7:4c:17:
                    06:f9:a2:fe:ac:dc:fd:21:1d:17:f1:ff:52:74:25:
                    31:35:8d:ff:bb:d1:f7:ff:2c:ab:ee:af:0c:17:ec:
                    5b:eb:4e:29:11:be:d4:8a:0d:96:b5:83:68:65:d2:
                    82:a5:37:ad:07:33:a9:30:9f:8a:b3:3e:95:16:bc:
                    6a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DB:2B:99:A6:D9:4C:C4:3E:DE:08:6D:0F:A5:0C:3D:74:70:C2:59
            X509v3 Authority Key Identifier:
                keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/BdsrmabZTMQ-3ghtD6UMPXRwwlk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.253.0-45.155.254.255
                  185.226.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:a4:a8:0d:59:9c:1b:ea:42:d9:3a:4a:3a:9a:ec:88:36:96:
         a9:ce:86:4a:c9:30:8a:e0:cd:93:35:4b:35:25:c8:7b:87:ab:
         b4:5f:e1:3c:46:e9:53:c8:7b:fd:de:78:e1:d2:09:e2:81:94:
         8e:df:4c:66:fb:b7:01:f5:f0:7a:b5:8f:b7:db:84:af:ca:1c:
         d2:98:ff:90:17:7f:57:8c:70:50:f8:de:9d:4e:cf:63:31:1b:
         85:8b:2a:8f:d1:79:37:b7:df:91:49:21:43:0d:4f:73:e6:71:
         78:0b:81:98:8b:8d:26:79:0f:19:46:81:65:a1:b8:a4:57:90:
         69:da:e4:d1:e1:f7:0a:d9:0e:27:3e:fa:a0:69:a2:d8:0a:da:
         60:ca:04:d8:82:2d:8f:5e:c1:39:53:89:a8:db:ac:a9:1f:af:
         0d:ac:64:8a:6c:fc:26:84:3c:c7:32:68:c3:5c:c6:4a:62:06:
         c6:24:cd:77:2f:9d:32:59:cc:cd:b3:6c:ef:d3:95:95:b9:9e:
         ff:c4:be:1e:65:0c:58:d3:82:bc:ec:48:1d:81:e7:b9:f6:7a:
         f7:e1:08:dc:77:8a:9e:b1:40:07:db:ac:3b:56:6f:a8:4a:6d:
         e8:a0:d4:48:d3:0d:f8:44:16:ad:2b:d4:4b:aa:52:28:ee:28:
         39:be:09:68
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:03 2024 by rpki-client on console-ams.rpki-client.org