Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/_ATU2WYX5fg05cJXvny6rqEZoGM.roa
File:                     _ATU2WYX5fg05cJXvny6rqEZoGM.roa (raw, json)
Hash identifier:          O/rUgZWtuWcAOID6qh50ED8y/Eu5cUpPrjwo3H1C+xw=
Subject key identifier:   FC:04:D4:D9:66:17:E5:F8:34:E5:C2:57:BE:7C:BA:AE:A1:19:A0:63
Certificate issuer:       /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial:       018857776F126F8EE4453BD345EBD6CD66AA
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/_ATU2WYX5fg05cJXvny6rqEZoGM.roa
Signing time:             Fri 26 May 2023 09:50:24 +0000
ROA not before:           Fri 26 May 2023 09:50:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51765
IP address blocks:        45.155.252.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:57:77:6f:12:6f:8e:e4:45:3b:d3:45:eb:d6:cd:66:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
        Validity
            Not Before: May 26 09:50:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fc04d4d96617e5f834e5c257be7cbaaea119a063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a6:b6:34:10:a2:17:e0:9d:a8:3e:21:fa:65:
                    4c:be:3e:33:dc:38:77:32:b7:5c:1d:98:a7:2d:23:
                    f2:57:8e:9d:45:40:0a:d0:f4:96:6e:8d:2f:3f:9c:
                    01:30:a4:d1:37:58:b6:dc:25:ef:6e:b1:de:bb:50:
                    1d:f1:c5:ae:17:c1:b4:4d:b8:56:e1:96:da:80:ee:
                    bb:2b:98:c9:9e:a8:b2:cc:2c:0d:2c:a7:c1:88:51:
                    eb:61:96:9e:df:a1:6e:3a:a4:91:ae:80:6e:48:ed:
                    07:f4:18:7f:42:ec:58:55:36:d3:c6:77:2c:49:bd:
                    d7:79:a8:ec:12:da:95:92:74:74:6d:bb:7d:62:9f:
                    b4:7a:54:e2:8c:84:43:db:9e:22:52:7c:75:7d:39:
                    29:ad:b3:67:a4:3d:c9:4c:83:ac:b4:01:98:73:02:
                    31:2e:cc:93:9e:c0:21:a6:02:3d:6a:f7:03:5a:3d:
                    bb:40:11:a4:87:c4:71:27:fb:07:46:1a:70:cf:a3:
                    36:6a:95:7d:6e:f8:35:ad:f4:3f:62:2f:9f:43:db:
                    ca:3a:2e:58:da:14:9f:9b:0c:fa:42:39:bd:28:70:
                    f7:87:c2:b2:ab:4d:e8:24:64:32:27:ae:a5:69:23:
                    f8:6c:e2:24:ae:eb:df:4a:a0:5c:bf:59:95:89:de:
                    fc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:04:D4:D9:66:17:E5:F8:34:E5:C2:57:BE:7C:BA:AE:A1:19:A0:63
            X509v3 Authority Key Identifier:
                keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/_ATU2WYX5fg05cJXvny6rqEZoGM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:bb:ba:f1:34:48:70:a8:dc:23:aa:c8:65:0e:7f:58:2c:c6:
         0e:99:78:9f:d5:13:3b:90:00:f9:0a:88:7a:7f:98:31:47:bd:
         2d:6d:a3:75:7e:51:96:15:48:1d:39:d9:52:a8:d5:40:70:39:
         6f:b2:72:06:d7:b7:7f:24:87:35:79:a9:b7:16:17:ea:9a:8d:
         37:c9:2d:f0:93:b7:28:29:4f:11:d7:91:10:96:9e:47:38:6c:
         86:85:ca:81:52:4a:0c:0b:5a:24:de:3c:a4:b0:55:a3:7a:75:
         57:07:d7:cb:53:db:2a:09:15:47:af:6b:00:fa:18:2d:e4:40:
         13:c3:3d:83:4f:b8:42:c5:0f:6b:9b:e0:68:f3:6c:df:b9:02:
         90:12:7b:3f:cc:00:76:5a:f7:5c:29:0a:85:86:fc:55:e6:00:
         ca:13:57:c3:50:1f:f4:fd:20:b7:62:cf:32:20:f1:86:8e:ad:
         10:db:c6:9c:8f:c3:76:16:1d:e3:29:8d:e0:3f:07:19:52:44:
         4d:9b:2d:c2:2e:ac:0a:b4:24:4a:39:9c:e7:98:ba:af:ac:29:
         a0:6e:a5:f6:75:0e:b1:11:5f:d2:2d:c3:02:ad:54:52:8d:98:
         5b:07:c1:92:8b:25:30:80:e4:f2:db:c4:f3:ad:66:5d:fe:3c:
         c0:df:42:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:27 2023 by rpki-client on console-fra.rpki-client.org