Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/R2kkCX2hHHISf1vVvgsj3Ol38CE.roa
File:                     R2kkCX2hHHISf1vVvgsj3Ol38CE.roa (raw, json)
Hash identifier:          7mTtsmxrEgfc3Liv07Y+kW5YC9ArS9rp1wc64Bq4i6w=
Subject key identifier:   47:69:24:09:7D:A1:1C:72:12:7F:5B:D5:BE:0B:23:DC:E9:77:F0:21
Certificate issuer:       /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial:       01856FCB935A2F9AB7A3379DB8CC3B3A3E21
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/R2kkCX2hHHISf1vVvgsj3Ol38CE.roa
Signing time:             Mon 02 Jan 2023 00:04:50 +0000
ROA not before:           Mon 02 Jan 2023 00:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        45.81.151.0/24 maxlen: 24
                          45.92.28.0/24 maxlen: 24
                          45.92.28.0/23 maxlen: 23
                          45.92.29.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:cb:93:5a:2f:9a:b7:a3:37:9d:b8:cc:3b:3a:3e:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
        Validity
            Not Before: Jan  2 00:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=476924097da11c72127f5bd5be0b23dce977f021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:07:dd:70:b1:4c:3d:ec:49:c8:c3:4b:16:47:
                    67:dc:13:6b:96:6d:b3:5d:27:f8:4d:f8:2b:94:6c:
                    c4:d2:19:5c:62:5c:cf:76:72:a5:15:6d:bc:9e:23:
                    42:8e:53:f3:0f:95:56:d4:dd:8a:a5:57:30:c5:60:
                    a1:94:0b:26:f1:68:ca:f5:cf:c5:02:21:03:57:6f:
                    f4:77:12:d5:77:9b:96:09:0d:40:28:1b:aa:82:27:
                    7b:8b:8a:a2:f9:24:d8:2f:9f:9e:48:e7:97:dd:db:
                    75:bc:f2:c5:ec:c8:85:fb:e2:fe:50:45:aa:a4:41:
                    0a:04:f9:7d:39:ec:fa:62:c1:fd:fb:a8:01:78:49:
                    59:00:ee:84:2d:a9:f8:85:73:5b:6b:07:20:1b:dc:
                    06:75:56:c0:3e:80:a1:39:c1:bd:38:7d:9a:00:0e:
                    09:01:3b:9c:96:e5:2f:a0:b7:5f:8e:e0:fd:4c:0f:
                    2d:ff:4c:b0:7d:25:c1:45:82:2b:ed:43:73:fb:d5:
                    28:6e:c6:1b:47:09:53:29:c7:f6:50:77:ba:d6:f3:
                    1a:7a:55:8e:fc:84:ef:a6:d0:54:62:86:f7:05:ee:
                    ca:46:0d:35:01:d8:17:b8:f3:37:fa:bd:74:40:fb:
                    27:e1:1a:e3:6c:66:b0:3f:b7:23:28:55:8e:d8:66:
                    94:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:69:24:09:7D:A1:1C:72:12:7F:5B:D5:BE:0B:23:DC:E9:77:F0:21
            X509v3 Authority Key Identifier:
                keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/R2kkCX2hHHISf1vVvgsj3Ol38CE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.81.151.0/24
                  45.92.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:de:2f:88:7b:0c:dd:35:14:05:7f:e6:99:78:4c:07:61:56:
         f9:2d:f1:ec:07:94:4e:e4:84:76:de:5b:a9:2b:20:16:9b:e8:
         5d:7f:9b:7d:bc:79:05:86:0d:c0:8e:f1:bf:1e:50:2e:08:8c:
         95:88:ba:48:89:5a:3e:de:9c:b8:b7:b8:9d:63:ac:5f:54:db:
         14:07:28:84:4f:58:28:ac:e2:09:ba:2e:56:bb:57:23:32:14:
         26:77:db:d0:cb:a4:64:bf:b9:be:2b:fd:b2:c1:f3:11:33:8b:
         a9:a8:da:89:21:d6:ae:5b:7a:cd:f4:93:94:fa:55:65:44:86:
         b8:ce:c3:3c:d8:ff:25:1b:32:f3:3c:9b:41:2a:cc:54:87:0e:
         1b:e1:71:4b:dc:26:fe:c7:2b:ed:55:58:b5:ac:d8:42:df:9e:
         fd:72:27:06:29:41:d0:28:9a:f7:cc:5a:af:94:e2:67:4a:d6:
         45:f8:d3:c3:01:5a:b0:60:82:16:80:93:7f:f3:0c:24:9e:d3:
         67:5e:6a:8f:96:9f:5c:73:02:91:84:d4:79:29:bd:0f:e5:dc:
         36:e8:ce:77:28:fa:3e:c7:65:a5:fb:f8:9e:2c:f4:78:5e:7c:
         6e:3e:c7:5b:e2:23:2c:3b:73:e4:6c:e7:66:86:0b:08:15:d7:
         92:ce:6a:3a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVvy5NaL5q3ozeduMw7Oj4hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYzhiNzNhYjdiZGViNzZmZjQ4YjJjYTA5OTYxNmVkYmU3
MWM0MjYwHhcNMjMwMTAyMDAwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzY5MjQwOTdkYTExYzcyMTI3ZjViZDViZTBiMjNkY2U5NzdmMDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwfdcLFMPexJyMNLFkdn3BNrlm2z
XSf4TfgrlGzE0hlcYlzPdnKlFW28niNCjlPzD5VW1N2KpVcwxWChlAsm8WjK9c/F
AiEDV2/0dxLVd5uWCQ1AKBuqgid7i4qi+STYL5+eSOeX3dt1vPLF7MiF++L+UEWq
pEEKBPl9Oez6YsH9+6gBeElZAO6ELan4hXNbawcgG9wGdVbAPoChOcG9OH2aAA4J
ATucluUvoLdfjuD9TA8t/0ywfSXBRYIr7UNz+9UobsYbRwlTKcf2UHe61vMaelWO
/ITvptBUYob3Be7KRg01AdgXuPM3+r10QPsn4RrjbGawP7cjKFWO2GaU3QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEdpJAl9oRxyEn9b1b4LI9zpd/AhMB8GA1UdIwQY
MBaAFIHItzq3vet2/0iyygmWFu2+ccQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUt
ZDg0ODhiM2FiNDJmLzEvUjJra0NYMmhISElTZjF2VnZnc2ozT2wzOENFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUtZDg0ODhiM2FiNDJm
LzEvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVGXAwQB
LVwcMA0GCSqGSIb3DQEBCwUAA4IBAQAz3i+IewzdNRQFf+aZeEwHYVb5LfHsB5RO
5IR23lupKyAWm+hdf5t9vHkFhg3AjvG/HlAuCIyViLpIiVo+3py4t7idY6xfVNsU
ByiET1gorOIJui5Wu1cjMhQmd9vQy6Rkv7m+K/2ywfMRM4upqNqJIdauW3rN9JOU
+lVlRIa4zsM82P8lGzLzPJtBKsxUhw4b4XFL3Cb+xyvtVVi1rNhC3579cicGKUHQ
KJr3zFqvlOJnStZF+NPDAVqwYIIWgJN/8wwkntNnXmqPlp9ccwKRhNR5Kb0P5dw2
6M53KPo+x2Wl+/ieLPR4XnxuPsdb4iMsO3PkbOdmhgsIFdeSzmo6
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:32 2023 by rpki-client on console-ams.rpki-client.org