Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/LG-gHhY7N_0bJeIZXKOSERzrCXw.roa
File:                     LG-gHhY7N_0bJeIZXKOSERzrCXw.roa (raw, json)
Hash identifier:          F1V6QrkhTH4XKFIWrnXx5eST56X9MRKZ+PZAKNKo01M=
Subject key identifier:   2C:6F:A0:1E:16:3B:37:FD:1B:25:E2:19:5C:A3:92:11:1C:EB:09:7C
Certificate issuer:       /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial:       0186364EEE83A1F1D8407CFCD5253914D3A3
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/LG-gHhY7N_0bJeIZXKOSERzrCXw.roa
Signing time:             Thu 09 Feb 2023 13:13:07 +0000
ROA not before:           Thu 09 Feb 2023 13:13:07 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        45.87.163.0/24 maxlen: 24
                          45.87.162.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:36:4e:ee:83:a1:f1:d8:40:7c:fc:d5:25:39:14:d3:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
        Validity
            Not Before: Feb  9 13:13:07 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2c6fa01e163b37fd1b25e2195ca392111ceb097c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:8e:fa:67:7b:7e:6f:96:92:6a:94:6f:cf:27:
                    8f:54:e0:27:b0:eb:60:8f:a4:ed:88:75:e1:96:31:
                    7a:5d:b7:50:9c:9b:42:b2:21:13:ee:0b:17:d2:fd:
                    48:35:3e:e7:6b:ec:26:0f:85:59:fe:13:2e:31:9a:
                    71:64:de:5a:bd:e6:19:5f:fc:a1:31:7d:30:51:6c:
                    43:07:3c:69:11:dc:6f:7f:b6:4e:a1:c5:39:30:79:
                    97:b9:b3:cf:b7:e1:1f:11:f7:e1:f5:40:29:0d:b9:
                    60:40:b6:4f:6f:40:4c:95:e8:e7:ba:f0:a8:bd:4a:
                    87:5d:a2:9d:71:70:84:d5:5f:55:d8:69:32:59:ad:
                    21:47:e7:6e:fc:e3:99:e4:17:62:5e:d5:ee:a1:e3:
                    8d:ec:4a:c1:7c:7c:d7:e6:14:bd:0b:fe:28:90:73:
                    78:ce:3e:93:74:7d:1b:50:b4:0f:5b:44:7f:c3:b3:
                    87:05:30:7e:ef:16:c6:34:7b:6e:14:0f:8c:1d:dc:
                    13:80:95:80:a2:81:47:46:71:cb:27:e3:bd:e3:2c:
                    09:90:dc:6e:8e:5b:44:47:c0:a8:d2:9d:97:d8:c3:
                    13:a3:72:e2:fe:4a:10:cd:78:7b:71:7f:f0:91:da:
                    fd:ee:15:dc:0f:b3:39:f6:95:dc:79:f0:a9:3b:00:
                    bb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:6F:A0:1E:16:3B:37:FD:1B:25:E2:19:5C:A3:92:11:1C:EB:09:7C
            X509v3 Authority Key Identifier:
                keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/LG-gHhY7N_0bJeIZXKOSERzrCXw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.87.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:65:1d:55:18:fa:9f:c4:77:dc:94:52:d3:2d:19:f7:c8:91:
         64:c6:ec:c1:26:1e:c2:00:e5:0c:63:dd:5b:93:80:72:3a:24:
         de:e5:fa:04:eb:88:bc:b3:c9:ea:0d:70:21:bc:9e:cf:48:ee:
         5a:cf:4c:1d:2e:51:8d:07:43:b1:5d:f0:2b:55:83:cb:fa:7c:
         43:e5:b0:b6:c7:42:08:fa:9a:60:1b:23:87:2c:44:82:a2:6a:
         ab:4b:72:6b:e8:ce:b4:09:78:b1:44:34:7b:22:04:e0:a4:b0:
         a8:3a:e0:d8:6b:56:e4:81:80:21:e3:d8:cf:89:7c:35:dc:a4:
         f0:c4:55:3b:09:59:b8:3e:20:5a:7c:7f:33:ae:16:2f:98:37:
         e1:ab:6e:20:75:70:29:fe:f3:a9:75:8b:ed:7a:7e:7a:06:f8:
         d4:a6:47:c1:88:5f:c8:df:55:66:3a:12:17:f4:34:08:e3:8b:
         fc:3b:39:a5:7a:9b:9f:6d:9a:23:13:61:91:04:5e:3e:2d:69:
         3c:67:74:dd:64:98:ad:b1:cc:71:95:08:b0:1e:24:e8:36:f7:
         ca:1e:47:3d:bd:d6:50:2d:c8:bc:19:bf:0c:0a:6e:81:e2:71:
         86:6a:a2:60:81:ed:6d:70:c5:fd:f8:34:06:07:36:26:df:4b:
         6e:f2:d5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 9 08:36:00 2023 by rpki-client on console-fra.rpki-client.org