Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/gbutksxArIdlTJIjN4xEwNIAYLY.roa
File:                     gbutksxArIdlTJIjN4xEwNIAYLY.roa (raw, json)
Hash identifier:          p3lWxjAsq0KGodyH7E//xFJmOAxRw9PhQgr3YIxUPhE=
Subject key identifier:   81:BB:AD:92:CC:40:AC:87:65:4C:92:23:37:8C:44:C0:D2:00:60:B6
Certificate issuer:       /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial:       018BF61014D4512A9358A285C3DE926AAA13
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/gbutksxArIdlTJIjN4xEwNIAYLY.roa
Signing time:             Wed 22 Nov 2023 08:05:30 +0000
ROA not before:           Wed 22 Nov 2023 08:05:30 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     64267
IP address blocks:        45.83.238.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:f6:10:14:d4:51:2a:93:58:a2:85:c3:de:92:6a:aa:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
        Validity
            Not Before: Nov 22 08:05:30 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=81bbad92cc40ac87654c9223378c44c0d20060b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:68:f0:47:5d:7c:50:92:4b:01:16:82:a1:6f:
                    ca:de:4e:a0:d3:a5:ad:68:2d:e0:6b:dc:31:ae:55:
                    f3:13:06:4e:7c:7b:d4:29:27:8d:d5:77:c5:bc:47:
                    e1:af:7e:06:3d:fb:50:64:13:b7:c6:c6:e1:05:38:
                    60:9d:68:df:fb:7e:6f:01:f4:66:ea:75:a0:43:65:
                    6a:4d:10:ef:eb:a4:10:6d:5f:55:62:96:36:01:fc:
                    6d:7f:97:22:62:31:7f:49:b7:3c:5c:96:ed:67:89:
                    0d:83:e3:31:ea:4e:aa:91:e6:a3:e6:c4:60:3e:33:
                    35:18:b1:05:87:61:1e:bc:39:4d:41:68:52:70:a2:
                    d6:72:31:36:de:e1:ab:13:12:16:49:ab:70:2e:5a:
                    8a:2f:3c:47:d2:92:1c:f1:b4:2a:4c:a1:88:d7:24:
                    78:6f:74:92:a8:7c:9c:d3:c4:de:b3:9a:d7:97:de:
                    ae:95:26:45:65:a1:4b:c1:b8:f6:74:89:b4:6d:40:
                    77:91:ff:ed:ec:28:1a:7a:b4:ee:26:ae:c1:01:64:
                    b4:c5:22:ef:ba:81:f3:1b:ce:65:60:cd:04:8e:24:
                    39:2e:39:1b:9b:48:2a:76:c3:e2:93:da:c9:f4:a6:
                    2c:2d:1f:0c:34:9d:60:0b:3c:3a:c1:6b:43:db:82:
                    69:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:BB:AD:92:CC:40:AC:87:65:4C:92:23:37:8C:44:C0:D2:00:60:B6
            X509v3 Authority Key Identifier:
                keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/gbutksxArIdlTJIjN4xEwNIAYLY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.83.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:4b:8c:c8:aa:90:56:11:be:49:e9:0b:23:76:1b:0c:22:e1:
         9b:2f:58:63:6a:bf:42:dc:af:6b:2c:1a:44:86:90:92:fb:5f:
         64:85:a8:4b:31:45:71:8b:e5:95:ad:be:e6:4a:8e:9b:45:54:
         df:80:bd:9c:92:41:52:db:ed:7c:46:9b:9f:bd:41:35:67:fd:
         95:65:aa:19:6c:70:59:07:01:44:c2:16:04:dc:31:72:01:d3:
         0b:ed:74:f1:2a:fe:23:e5:4b:0b:18:29:56:4c:80:2b:85:d4:
         0a:b6:1a:94:81:8a:8f:ad:e0:96:7e:0c:11:d2:a9:b3:5f:73:
         d7:74:45:9d:25:99:35:16:59:16:09:a4:d4:36:85:7a:1f:88:
         9f:75:b3:9d:27:91:2d:5f:ba:b4:d7:51:a4:0c:99:34:5d:b9:
         11:f4:62:2c:de:44:bb:ac:28:83:10:21:cf:ef:77:56:84:dd:
         5f:cc:6d:d7:3f:ce:6f:7d:1f:11:69:4b:3b:ed:9b:e6:8a:f3:
         7e:78:61:29:02:9d:bd:f0:77:ff:5d:33:32:bc:23:eb:e5:e9:
         db:5b:8a:fd:e5:26:c8:ed:86:a1:fb:9e:1f:93:bc:70:a7:f8:
         1d:08:b6:df:48:4a:38:57:67:93:f1:3f:3c:3e:f7:5d:38:d5:
         c0:ee:d5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:54 2024 by rpki-client on console-ams.rpki-client.org