Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/Vju-9iULMEfzJfcK6WB7BxNEVRw.roa
File:                     Vju-9iULMEfzJfcK6WB7BxNEVRw.roa (raw, json)
Hash identifier:          Ab/9Y7UnebBP6Gc8wC3han9b1WhY77GmOztsMyJ7Ues=
Subject key identifier:   56:3B:BE:F6:25:0B:30:47:F3:25:F7:0A:E9:60:7B:07:13:44:55:1C
Certificate issuer:       /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial:       01856E6FCC45983CC31FB64FF2C7803366FC
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/Vju-9iULMEfzJfcK6WB7BxNEVRw.roa
Signing time:             Sun 01 Jan 2023 17:44:58 +0000
ROA not before:           Sun 01 Jan 2023 17:44:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211237
IP address blocks:        45.87.163.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:6f:cc:45:98:3c:c3:1f:b6:4f:f2:c7:80:33:66:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
        Validity
            Not Before: Jan  1 17:44:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=563bbef6250b3047f325f70ae9607b071344551c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e7:b3:a8:9c:1b:87:e8:3e:3f:95:e7:d2:6e:
                    10:94:8a:11:e0:23:1e:df:89:f7:74:57:0a:7d:45:
                    f0:9d:15:21:60:8b:4d:87:52:93:da:a7:49:ec:9f:
                    3b:eb:bb:bd:f5:92:7d:85:80:2f:0f:8e:da:19:70:
                    5c:31:81:14:c8:97:96:b4:7e:a3:a9:f4:28:c7:e3:
                    6e:c7:1d:34:6d:f7:4f:b6:f4:22:9c:66:23:9d:4f:
                    9a:74:01:0c:4a:01:ff:a1:34:5c:64:1a:4d:e9:f3:
                    91:93:ea:1c:16:16:d8:83:67:07:27:08:8d:39:bd:
                    71:a8:0e:72:13:51:f0:71:4b:59:69:3d:11:c0:73:
                    7d:bd:bb:72:e6:5d:3c:42:97:61:47:32:6e:ad:6b:
                    86:1b:9b:35:26:8f:7e:af:e4:26:59:5a:60:e5:cc:
                    c7:ef:d6:f1:86:5b:3c:7b:49:42:7e:73:c9:07:8d:
                    df:e1:a8:7d:d0:4e:d2:05:31:c2:e1:ff:47:53:0e:
                    d9:6c:71:da:d8:02:a6:c8:a2:e3:f0:1d:09:3f:0b:
                    37:61:10:8b:bd:c0:fd:70:04:19:a2:7e:b7:19:28:
                    70:25:48:23:3b:a5:a4:20:fd:11:64:41:38:4b:d9:
                    31:59:dd:eb:93:fb:74:b2:de:47:8f:b9:58:dd:3f:
                    f8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:3B:BE:F6:25:0B:30:47:F3:25:F7:0A:E9:60:7B:07:13:44:55:1C
            X509v3 Authority Key Identifier:
                keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/Vju-9iULMEfzJfcK6WB7BxNEVRw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.87.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:5e:15:49:f9:06:0f:f3:3c:f5:e2:b8:3d:e0:80:82:ef:a6:
         20:89:ae:40:bf:e3:1a:c1:fd:82:f6:ec:36:05:71:0e:23:03:
         64:f0:ba:85:c4:5a:70:8c:ec:85:95:90:a1:e8:c9:27:85:a6:
         ca:05:a1:04:bf:49:66:88:cb:df:29:f8:fe:97:44:ca:7e:16:
         b0:e0:84:d1:d7:c3:12:d6:5f:53:b6:7c:95:2a:c6:80:b6:a3:
         33:67:de:48:4b:df:ae:00:1b:7c:28:2c:a0:bc:94:30:a5:b3:
         c2:06:8a:93:b7:24:c9:40:31:20:90:5b:16:31:c5:05:16:d9:
         7e:48:69:82:d1:73:72:57:0d:77:f8:c4:6f:bb:5f:c2:00:2a:
         4a:0e:4f:0c:01:02:68:d6:c2:96:2a:da:45:18:43:7b:58:d9:
         ce:b8:55:d2:5d:34:8c:b2:81:06:18:c9:5e:d0:87:1d:61:64:
         63:97:12:95:71:9b:8d:2c:e6:03:7a:ce:41:8b:15:e9:94:a1:
         78:73:85:1a:20:31:a3:e2:3e:90:87:f2:46:cf:f0:13:1b:26:
         d9:9c:a5:fb:6e:8c:17:2f:23:f6:19:0c:9d:bf:d7:9a:53:c6:
         a4:d2:82:7c:d1:4d:9a:1c:df:09:63:63:4f:c6:75:72:d6:fc:
         7e:96:ea:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:26 2023 by rpki-client on console-fra.rpki-client.org