Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/SmV_M9h5iiKM75nmvP5PhVSB-Lo.roa
File:                     SmV_M9h5iiKM75nmvP5PhVSB-Lo.roa (raw, json)
Hash identifier:          CsIJCntHim/5rOswPMGlwNYSX5QpJI+Zuw6Eb8rCYk8=
Subject key identifier:   4A:65:7F:33:D8:79:8A:22:8C:EF:99:E6:BC:FE:4F:85:54:81:F8:BA
Certificate issuer:       /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial:       01884E2CE39EE7488C7E59580FA8DB35D330
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/SmV_M9h5iiKM75nmvP5PhVSB-Lo.roa
Signing time:             Wed 24 May 2023 14:32:24 +0000
ROA not before:           Wed 24 May 2023 14:32:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     21895
IP address blocks:        45.133.104.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:4e:2c:e3:9e:e7:48:8c:7e:59:58:0f:a8:db:35:d3:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
        Validity
            Not Before: May 24 14:32:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4a657f33d8798a228cef99e6bcfe4f855481f8ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2f:46:15:b1:fa:a3:16:f9:bb:d3:b1:3e:d4:
                    12:4c:4f:d6:3a:c5:80:76:08:ab:f6:a7:0b:af:d1:
                    b4:43:79:74:59:a2:42:f0:46:0d:d2:49:bf:84:1d:
                    23:4f:5b:df:9c:78:ed:ec:94:54:d6:b9:b9:48:ea:
                    a6:47:b9:fb:fb:f5:b9:18:9d:75:bf:45:8e:b7:a6:
                    7c:d2:fa:96:cc:5f:4e:74:b1:e4:ca:e6:09:f6:03:
                    e6:5e:06:cf:e0:4e:99:5b:35:43:cb:75:1e:ae:37:
                    e9:28:26:37:f8:cc:ca:ad:41:41:ea:d5:e0:7b:e6:
                    44:cd:22:0c:0e:d0:9b:63:ac:9b:c2:db:80:2f:5a:
                    44:52:54:8b:eb:39:17:8e:a9:1e:46:c2:79:56:fd:
                    f8:ce:a3:1e:63:c9:0e:4f:93:92:5f:48:73:f0:d9:
                    b7:b5:6c:19:bd:03:c9:39:7c:31:1f:02:ae:17:19:
                    09:c8:08:92:81:e8:12:e3:74:ac:a8:e8:b0:70:c4:
                    22:22:85:c4:75:c2:a3:a8:66:2e:4c:1b:eb:ca:a1:
                    7f:7e:97:e6:11:31:f5:65:0f:30:48:88:a2:d0:bd:
                    55:c4:59:71:2b:f3:cc:73:f0:00:73:10:d6:ca:3a:
                    43:d3:a8:f7:27:00:c6:e7:7a:65:2d:50:ae:a3:71:
                    61:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:65:7F:33:D8:79:8A:22:8C:EF:99:E6:BC:FE:4F:85:54:81:F8:BA
            X509v3 Authority Key Identifier:
                keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/SmV_M9h5iiKM75nmvP5PhVSB-Lo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.133.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:22:c5:c7:39:dc:aa:ce:aa:2a:fd:d0:8e:f7:39:ce:f0:45:
         2c:cd:2e:76:fb:ce:19:1f:66:49:6e:11:89:11:39:1b:d4:1d:
         95:7e:d6:af:11:3a:52:25:62:4e:0e:8b:12:a1:aa:8e:29:70:
         7e:f3:be:86:37:ec:59:31:29:26:8d:e5:dc:fc:83:09:6b:b3:
         68:82:ce:6c:1b:46:2f:09:af:75:0d:4c:24:3f:06:41:57:bc:
         15:a8:07:1a:de:b6:6f:01:ee:3e:c3:ed:ad:93:c2:52:3f:a6:
         41:58:96:1a:5a:44:76:dc:0e:9f:47:74:5a:af:76:f4:ac:25:
         57:a9:f2:26:85:f8:8f:21:98:a2:9d:1a:0e:c5:f5:7e:7f:a1:
         ad:fb:3b:b8:e9:94:5e:ea:9c:db:44:2f:87:fa:c1:ae:35:ba:
         69:64:94:46:d0:2b:6f:a8:db:86:54:8e:12:0b:4b:08:d4:12:
         3b:13:82:a7:83:f4:83:88:ae:4e:38:87:d8:af:38:0d:e4:1a:
         63:2e:6a:a6:e1:55:c1:6d:e4:24:8c:54:34:92:24:c4:e8:61:
         ee:ba:11:8b:d0:8e:5a:02:7c:27:c9:02:09:4b:7c:e5:c7:ee:
         c5:ec:17:03:f8:cf:dc:38:df:5a:18:b1:9a:a5:d9:f2:36:91:
         50:89:bf:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:42 2023 by rpki-client on console-fra.rpki-client.org