Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/_kg6F2iY7-61XMujuXGa83_oe1A.roa
File:                     _kg6F2iY7-61XMujuXGa83_oe1A.roa (raw, json)
Hash identifier:          6RQmLyV805pOGmSyYG/ZPW13QVCpfE6719QoFsvxc7w=
Subject key identifier:   FE:48:3A:17:68:98:EF:EE:B5:5C:CB:A3:B9:71:9A:F3:7F:E8:7B:50
Certificate issuer:       /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial:       01856BDC9E6E7763653069BD42380EA8BD9E
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/_kg6F2iY7-61XMujuXGa83_oe1A.roa
Signing time:             Sun 01 Jan 2023 05:44:58 +0000
ROA not before:           Sun 01 Jan 2023 05:44:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7018
IP address blocks:        45.151.70.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:dc:9e:6e:77:63:65:30:69:bd:42:38:0e:a8:bd:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
        Validity
            Not Before: Jan  1 05:44:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fe483a176898efeeb55ccba3b9719af37fe87b50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f0:f2:d1:0d:9d:c9:2f:34:b6:8a:e4:7f:bc:
                    60:92:6c:ce:cb:cb:f0:a9:4a:c4:02:f1:a5:c5:e9:
                    74:b1:e2:cb:4f:f3:6b:59:9f:f0:d1:ae:1f:5f:5a:
                    f3:78:8b:47:71:bf:90:e6:fb:44:76:b3:4b:fa:f7:
                    36:01:7c:a1:4a:6b:7a:81:c5:22:a7:17:1c:bd:c0:
                    40:fc:a7:bf:52:52:17:81:a1:a6:4a:b7:d4:ba:3b:
                    02:32:76:b7:86:0b:99:4d:00:b3:8f:63:9a:68:05:
                    e5:a6:34:a3:1a:39:23:19:ce:6c:c0:de:6e:02:6a:
                    da:60:87:b0:72:bc:80:3d:59:b8:5b:ee:f2:09:98:
                    ac:26:16:ca:8a:af:dd:a8:43:ff:a6:5d:3c:1f:33:
                    bc:df:00:43:9c:05:be:a5:87:d4:e3:5a:06:cd:1e:
                    ba:0f:ad:52:da:13:c4:5b:a6:16:ae:66:b2:4c:e7:
                    13:d4:1c:e9:84:c0:4b:b5:e6:a9:eb:7e:eb:aa:ac:
                    21:dc:8d:6c:7b:ba:d4:ae:b4:44:de:18:0c:1f:1a:
                    3f:16:8b:30:1c:e1:9a:18:8c:91:de:90:dd:cd:49:
                    ca:8c:d5:ae:54:aa:53:a4:16:03:a6:1d:95:56:6d:
                    7e:3b:a8:45:97:ff:2d:94:ec:84:2e:4c:47:27:00:
                    1b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:48:3A:17:68:98:EF:EE:B5:5C:CB:A3:B9:71:9A:F3:7F:E8:7B:50
            X509v3 Authority Key Identifier:
                keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/_kg6F2iY7-61XMujuXGa83_oe1A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.151.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:d6:c6:6d:c0:86:60:af:a5:dd:d8:30:00:99:70:e9:89:5a:
         be:26:0f:9b:5a:26:05:50:cd:e5:31:6d:cc:8d:62:67:70:2e:
         6b:9e:45:1e:38:45:ce:63:79:1d:8e:3a:0d:43:36:50:7a:51:
         c5:5e:a0:91:5d:00:4d:9c:c7:65:8e:60:3e:0b:d7:57:7e:98:
         a7:39:2b:c6:ab:7b:87:63:7b:82:75:1e:8d:b9:74:cd:bd:08:
         9f:6c:2b:67:6a:96:dd:35:ff:6a:bc:e0:e7:8b:81:df:97:1b:
         e1:61:78:5f:68:ef:32:2d:bc:7b:48:5d:0f:e5:d0:29:99:0b:
         ba:46:9f:83:e5:a5:af:56:e4:cc:dc:73:4a:95:c5:1d:ae:17:
         44:41:b7:3a:ca:97:60:08:2e:f9:af:7d:6f:09:15:23:56:c2:
         17:11:f4:48:6f:d3:7b:42:40:15:c2:0e:50:8d:4b:60:af:03:
         d3:94:4d:95:d1:58:fe:3b:12:eb:cb:90:58:e5:5f:33:d0:4f:
         ac:3d:b9:7a:1f:70:48:5e:fc:86:c6:1e:4e:26:f2:22:a4:ba:
         cf:57:23:e7:6b:85:69:b3:e4:48:06:d1:06:ae:1b:a0:6a:0c:
         6d:3e:51:9f:bd:c2:31:3f:76:0b:65:46:27:98:31:be:0d:25:
         89:cc:7f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:50 2023 by rpki-client on console-fra.rpki-client.org