Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/tEVDH9yvRDnHHZkB8HF8GxYVeOc.roa
File:                     tEVDH9yvRDnHHZkB8HF8GxYVeOc.roa (raw, json)
Hash identifier:          SkOms6EOovyoM+eKCI3x9i1rqjJWm6O37ofvvft/+lI=
Subject key identifier:   B4:45:43:1F:DC:AF:44:39:C7:1D:99:01:F0:71:7C:1B:16:15:78:E7
Certificate issuer:       /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial:       018C3EEB920E6774D10618F224669ACFE72B
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/tEVDH9yvRDnHHZkB8HF8GxYVeOc.roa
Signing time:             Wed 06 Dec 2023 11:37:54 +0000
ROA not before:           Wed 06 Dec 2023 11:37:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200482
IP address blocks:        81.29.145.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:3e:eb:92:0e:67:74:d1:06:18:f2:24:66:9a:cf:e7:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
        Validity
            Not Before: Dec  6 11:37:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b445431fdcaf4439c71d9901f0717c1b161578e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:16:3b:1b:13:10:92:b2:20:e6:0e:24:37:af:
                    58:dd:31:ee:82:85:ba:7c:04:c2:84:07:e8:4d:93:
                    19:21:d8:f4:27:1d:4e:61:bf:fc:de:ff:88:c5:70:
                    99:1a:a5:66:2c:d6:a8:28:25:56:e1:8f:1b:6e:d2:
                    72:4e:f6:fb:20:cc:9b:54:09:27:e6:5c:79:71:91:
                    f9:f1:6d:80:b9:c2:78:28:f5:50:82:94:3f:12:90:
                    5a:84:34:87:99:f1:01:a2:1d:5b:d4:9f:99:87:b8:
                    7f:c8:f5:2d:b2:8b:23:58:cb:22:77:5c:44:5f:ea:
                    64:10:35:0d:45:e5:86:8b:18:c7:89:d5:7c:3b:b2:
                    2a:d1:b8:50:5c:98:3f:49:49:a0:43:82:f0:7f:5a:
                    0a:aa:60:3b:e2:2d:aa:17:22:9d:fb:ae:bb:92:a9:
                    f9:81:32:ce:8b:5b:4b:19:22:e2:89:03:36:26:ca:
                    b9:c5:94:40:cb:20:ec:fc:f9:7b:b9:2d:6a:b8:a2:
                    5b:db:aa:cb:db:ec:ab:b7:f5:c3:f1:3e:aa:92:69:
                    bd:64:bb:f8:f1:06:b0:0f:e2:c4:0e:bb:45:ad:ab:
                    dd:5a:e2:c0:c3:55:68:85:02:0a:d8:1e:43:e9:30:
                    aa:42:56:6b:8c:32:40:a4:e3:63:79:e1:26:7c:e8:
                    57:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:45:43:1F:DC:AF:44:39:C7:1D:99:01:F0:71:7C:1B:16:15:78:E7
            X509v3 Authority Key Identifier:
                keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/tEVDH9yvRDnHHZkB8HF8GxYVeOc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.29.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:d7:3d:96:8b:ed:b4:3e:c4:5d:c1:c4:3f:89:e3:5c:ad:45:
         4f:e8:2c:69:ab:b4:6a:3b:c3:4f:b3:7a:ad:3f:51:5a:b1:6b:
         35:f0:97:5a:b9:3e:51:a2:2d:c1:01:be:f0:27:75:27:dd:7d:
         00:21:95:51:36:1d:7d:dc:c6:43:37:9a:eb:e7:80:48:26:5f:
         9a:b8:16:de:f5:20:1e:40:17:9b:9b:ce:8b:89:34:26:ff:ba:
         c7:17:b9:45:0b:d8:6d:d2:40:67:f3:de:8a:11:76:23:6a:9d:
         9c:6a:0b:21:2f:d2:85:71:cb:1b:9b:6b:4b:de:3d:f6:58:63:
         30:6d:35:c1:b6:ea:ea:ce:73:1d:a1:11:e5:87:ce:2a:4c:a0:
         97:a4:b6:53:ec:5e:3d:3d:aa:88:05:9a:36:ba:7b:a8:41:8e:
         54:a4:d2:f7:29:23:c6:97:76:36:90:e3:89:5f:76:69:68:92:
         82:82:2f:b2:68:cb:e3:11:25:12:f7:43:32:09:16:cd:28:f6:
         45:5b:3b:70:79:68:4c:03:bf:8b:f4:73:c3:50:bf:3f:ea:5f:
         3b:78:07:57:c1:25:e4:dc:c4:bb:b7:db:0f:8d:5a:f4:62:88:
         29:21:5f:ef:f5:21:05:39:af:c2:92:24:57:ea:98:bd:f5:66:
         1e:67:a3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:02 2024 by rpki-client on console-fra.rpki-client.org