Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/NN_S4V_Rfn4JEyffr43L03geGuY.roa
File:                     NN_S4V_Rfn4JEyffr43L03geGuY.roa (raw, json)
Hash identifier:          ydZGYGZOpV+MGGuQJQFpqGr/V3FNVT6/XID3Vr/bs80=
Subject key identifier:   34:DF:D2:E1:5F:D1:7E:7E:09:13:27:DF:AF:8D:CB:D3:78:1E:1A:E6
Certificate issuer:       /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial:       018572FED75693A4032FECCB630D2E143901
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/NN_S4V_Rfn4JEyffr43L03geGuY.roa
Signing time:             Mon 02 Jan 2023 14:59:41 +0000
ROA not before:           Mon 02 Jan 2023 14:59:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207326
IP address blocks:        45.133.104.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:fe:d7:56:93:a4:03:2f:ec:cb:63:0d:2e:14:39:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
        Validity
            Not Before: Jan  2 14:59:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=34dfd2e15fd17e7e091327dfaf8dcbd3781e1ae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:84:0b:3d:e3:96:b6:14:1c:b2:84:54:f9:60:
                    1d:85:5f:1c:f5:1b:0b:dd:d2:68:ad:49:87:bf:62:
                    79:b6:36:af:86:7d:8a:f1:fa:17:06:6f:b7:9d:47:
                    bb:9a:4a:2f:96:b7:a1:b4:4c:a4:00:8b:5e:50:6c:
                    60:e7:cd:4d:c6:69:75:62:09:4c:73:da:18:e8:57:
                    f1:dd:24:7f:b2:1d:aa:65:60:3d:bf:b4:b3:a3:be:
                    be:12:e8:06:f5:e6:e9:22:2e:ee:66:10:ab:49:22:
                    59:a7:a3:13:42:73:7b:2a:79:e8:cc:01:cc:dc:bd:
                    66:0c:c1:01:54:e6:69:9b:cf:73:e6:00:af:e1:68:
                    b6:c9:09:93:16:fc:56:9c:c6:e7:b2:ac:0e:90:89:
                    82:d4:3a:3e:4e:09:98:44:2c:2a:98:eb:76:f9:12:
                    bc:f2:44:ec:cf:7c:c0:ad:b6:af:57:f9:2e:82:fb:
                    9c:15:b8:a0:bd:3a:f0:99:37:57:7f:63:a8:28:41:
                    33:30:cd:c3:8d:aa:b5:a9:70:cd:6a:86:de:70:cc:
                    89:fc:b7:14:1b:33:ae:58:e8:17:52:23:af:e4:66:
                    98:06:e3:09:c1:2e:9a:1f:1f:df:8e:41:ba:da:18:
                    36:b6:ef:4d:3b:07:ca:e2:2a:99:3e:35:fd:82:f7:
                    6d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:DF:D2:E1:5F:D1:7E:7E:09:13:27:DF:AF:8D:CB:D3:78:1E:1A:E6
            X509v3 Authority Key Identifier:
                keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/NN_S4V_Rfn4JEyffr43L03geGuY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.133.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:72:70:b0:2a:55:93:06:d6:56:d2:d7:a3:cc:e9:6c:0e:1e:
         06:f0:7f:bd:bc:92:1b:07:be:a0:86:db:97:da:b2:48:11:94:
         43:fc:4f:3a:0a:7f:72:b6:6b:ba:7c:d6:1b:ae:b8:89:bb:a0:
         7a:3b:e9:56:c1:60:2b:a6:e5:8e:0b:de:7d:be:30:f2:c3:4c:
         2d:2d:dc:b5:2f:6e:cf:c8:87:fc:97:33:bc:3a:25:57:4c:bb:
         70:fd:98:45:b9:ff:cc:63:32:f9:0b:97:42:21:3e:63:7d:97:
         25:b7:fb:67:01:4a:09:8d:47:65:4c:90:8c:29:f1:90:12:21:
         dd:cb:9d:95:dc:d5:86:cb:52:4e:61:4e:28:02:73:0d:f4:90:
         6e:c0:6e:96:f9:23:de:35:e8:15:f3:ba:2e:6f:0c:3d:7b:31:
         1c:ac:78:94:c4:7c:c1:dc:da:03:02:04:2f:cc:50:db:10:84:
         d1:fb:51:ec:71:c2:63:63:96:e0:0a:99:3a:a7:7f:0e:3f:09:
         59:34:23:0a:e4:f0:c7:29:3b:6d:1d:55:6a:71:2b:8f:42:68:
         b0:18:78:ca:7e:77:93:2e:2e:0a:8a:e1:a1:a0:a6:ab:18:7e:
         b3:90:b0:ae:96:04:70:75:97:ae:8b:64:6a:69:53:46:b6:da:
         07:d7:59:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:23 2023 by rpki-client on console-ams.rpki-client.org