Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/tjMf8Fu1l9JX6qjZIXds0YGLH5g.roa
File:                     tjMf8Fu1l9JX6qjZIXds0YGLH5g.roa (raw, json)
Hash identifier:          BQ3FRgrc53euA7FxigVFu09jaYw5oxejJ181iEzSH/8=
Subject key identifier:   B6:33:1F:F0:5B:B5:97:D2:57:EA:A8:D9:21:77:6C:D1:81:8B:1F:98
Certificate issuer:       /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Certificate serial:       018572C384ABDE1C9397E92ACD6C1A1C95F9
Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/tjMf8Fu1l9JX6qjZIXds0YGLH5g.roa
Signing time:             Mon 02 Jan 2023 13:54:54 +0000
ROA not before:           Mon 02 Jan 2023 13:54:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     64458
IP address blocks:        45.90.74.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:c3:84:ab:de:1c:93:97:e9:2a:cd:6c:1a:1c:95:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
        Validity
            Not Before: Jan  2 13:54:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b6331ff05bb597d257eaa8d921776cd1818b1f98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:96:df:bd:ec:12:7f:08:19:34:57:77:52:f5:
                    16:7d:93:46:9b:02:51:2c:ec:44:cc:b5:2b:ab:a9:
                    1a:cb:36:13:14:d9:6c:da:2b:43:32:9f:d2:17:18:
                    21:f3:79:5f:62:4d:0b:09:d6:6d:1b:34:ce:3d:fa:
                    3b:92:0a:de:2d:5e:93:6a:da:8c:71:b6:17:6e:6d:
                    7a:d8:7e:4c:2f:75:31:b5:44:9f:31:6a:5a:b8:16:
                    e0:4a:d3:14:08:cb:53:7d:d6:d0:74:22:f7:bf:96:
                    34:dd:9e:9b:cd:67:cd:ee:9d:2b:fa:41:87:ef:de:
                    ee:ac:01:47:05:8f:0b:b0:ca:76:bf:c0:11:a8:aa:
                    0e:53:95:e5:e7:5a:89:06:7e:86:fc:7e:fd:ab:55:
                    e3:7a:85:8d:01:6b:73:cd:0e:85:e1:b7:ab:c7:1d:
                    a4:75:54:30:ca:90:bb:3e:6e:14:05:ee:52:a6:14:
                    3a:3b:80:cd:0c:4d:30:28:7a:9a:6b:c7:b3:5f:1c:
                    0b:71:7b:6e:9d:ec:13:ce:af:d6:62:9f:a8:1c:69:
                    15:74:9c:12:be:8b:cc:6e:e1:50:48:46:e4:9f:4b:
                    62:44:9d:85:f5:83:a2:29:6c:b3:52:54:b3:2c:f0:
                    ed:45:06:bf:5c:0c:fd:d4:f7:39:a7:c8:c2:d3:7c:
                    ca:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:33:1F:F0:5B:B5:97:D2:57:EA:A8:D9:21:77:6C:D1:81:8B:1F:98
            X509v3 Authority Key Identifier:
                keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/tjMf8Fu1l9JX6qjZIXds0YGLH5g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.90.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:18:8d:c4:01:5f:42:8f:6d:86:65:72:0e:1f:d3:c9:30:0b:
         19:5c:35:d6:d3:ea:de:ab:bf:26:d5:c7:70:8e:13:7d:b8:01:
         4d:66:8e:bd:cf:25:7c:ea:dc:b3:3c:8d:3d:55:a6:9d:ed:97:
         3e:7c:74:8b:aa:d4:20:38:1d:13:16:69:e1:c1:ee:af:91:b2:
         e6:b8:d0:ee:f7:ff:5f:4c:f9:e5:ca:19:bb:4d:34:0b:e6:26:
         cd:21:8d:88:c9:02:0b:e3:92:92:73:aa:ba:f8:4c:2a:09:2d:
         00:fa:24:e7:ff:91:3c:76:8c:dd:09:30:4d:c0:16:27:cd:7f:
         f7:1e:a5:17:a8:90:70:33:1a:90:bb:b8:6d:fe:99:a8:9e:20:
         36:db:4a:8d:b9:3e:b5:41:2b:2a:1a:eb:0d:dc:d3:00:a0:2f:
         d1:75:7b:55:ff:72:3c:9f:3a:50:c1:a7:12:83:3f:fc:95:c3:
         f0:5c:33:14:fc:d2:8e:cb:43:40:bd:69:c4:72:2f:7d:8f:ad:
         16:7b:1a:b0:c6:7e:ae:fc:a2:93:ea:50:3c:cd:93:d0:80:46:
         bc:0d:76:a8:b2:20:13:54:8a:7c:c9:77:f6:99:a8:b0:a6:ee:
         f4:8f:af:5b:c2:88:8b:8d:02:3a:b9:17:d2:4b:fd:5f:34:b0:
         4c:36:5c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:03 2023 by rpki-client on console-fra.rpki-client.org