Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/EanWtpVM-r8BnnlwNNpVfOaoo0g.roa
File:                     EanWtpVM-r8BnnlwNNpVfOaoo0g.roa (raw, json)
Hash identifier:          iAGjwESu6AbCUP5ceEdItq5x+9BjAsSt5c+DZ0Qy/N8=
Subject key identifier:   11:A9:D6:B6:95:4C:FA:BF:01:9E:79:70:34:DA:55:7C:E6:A8:A3:48
Certificate issuer:       /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial:       018708CCB7E35E81DD663D14FC6DFA3BAE6B
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/EanWtpVM-r8BnnlwNNpVfOaoo0g.roa
Signing time:             Wed 22 Mar 2023 10:10:46 +0000
ROA not before:           Wed 22 Mar 2023 10:10:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        45.146.202.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:08:cc:b7:e3:5e:81:dd:66:3d:14:fc:6d:fa:3b:ae:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
        Validity
            Not Before: Mar 22 10:10:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=11a9d6b6954cfabf019e797034da557ce6a8a348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:56:dc:a9:a4:bb:2e:8b:30:84:da:40:e3:3c:
                    71:e3:5a:f4:1f:99:b9:07:c0:68:e5:be:aa:a7:92:
                    28:c2:47:6a:60:39:75:f5:65:10:e7:47:4f:a6:14:
                    c4:37:22:2d:97:6f:e9:b3:5b:f4:b3:6c:c4:42:83:
                    62:54:eb:d9:b4:c9:4d:44:31:da:16:16:c9:0c:e1:
                    87:4b:ea:e7:11:e5:d8:7f:0a:03:84:f0:ac:87:f4:
                    40:1e:7e:91:1a:c7:d5:da:b4:47:88:1e:c3:77:a0:
                    c8:ae:31:ed:5a:e9:17:de:1b:34:01:e2:e8:13:18:
                    f2:fe:29:7c:c7:cf:0b:1b:d3:2f:63:24:02:76:c7:
                    d8:d0:a6:94:90:b7:9a:6b:f6:8f:a5:1b:ca:41:52:
                    e1:03:9b:4f:09:35:e6:75:70:98:05:52:42:d4:fb:
                    19:dd:75:7d:9c:71:6a:0a:27:ed:83:6f:1a:d8:10:
                    76:e2:96:59:4d:89:e5:77:0a:7a:00:87:da:54:0a:
                    c6:dc:84:71:6e:b7:41:df:76:82:fc:80:22:db:7c:
                    c3:20:0c:05:39:55:de:78:cf:ee:0c:3b:75:a9:ed:
                    93:57:c2:59:d9:6e:03:64:7f:c0:f6:93:70:92:69:
                    41:b9:61:41:94:7f:f6:87:2d:18:b3:d7:93:e2:ca:
                    ab:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A9:D6:B6:95:4C:FA:BF:01:9E:79:70:34:DA:55:7C:E6:A8:A3:48
            X509v3 Authority Key Identifier:
                keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/EanWtpVM-r8BnnlwNNpVfOaoo0g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.146.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:17:2e:ed:55:8d:21:39:2c:c1:7e:1b:cd:f6:fe:19:3e:61:
         37:f7:37:fa:fe:e3:0e:e8:ff:2a:0a:6d:31:a8:c6:dc:72:bb:
         f2:9a:18:09:dd:cc:4a:83:a0:4c:eb:d5:6e:c6:85:f4:f6:76:
         05:68:f3:7d:3b:fe:89:92:dd:d8:f2:fc:7d:21:e3:b7:be:57:
         5e:a2:3c:b8:30:f8:4f:f7:2c:c6:34:42:f8:85:71:3e:02:4f:
         bd:5c:f6:30:1e:b2:48:87:42:aa:85:3b:7b:59:16:84:d3:6d:
         f8:0b:ae:16:b3:9c:cb:16:c2:50:85:92:38:d6:ab:7d:a3:5f:
         b8:60:69:dc:28:ec:47:a4:bf:2c:63:29:03:f7:30:fb:8c:d5:
         1b:03:2a:a6:47:45:cf:fe:6b:77:2b:88:8b:54:df:f5:3d:86:
         68:f0:53:21:60:41:18:9d:ce:7e:ac:6d:af:63:7e:35:5e:73:
         81:fa:3c:2e:90:6e:a5:e4:c3:dc:00:56:e0:fe:eb:86:1c:e0:
         53:ab:3b:24:04:75:8b:b8:1d:83:6c:84:40:d6:9f:56:a8:e5:
         a9:4a:53:06:a2:82:54:5a:96:54:1b:c4:b6:c9:65:39:59:6f:
         f2:21:65:aa:4b:b6:be:46:b6:dc:12:ff:25:77:3e:6b:05:8c:
         11:cc:e6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:24 2023 by rpki-client on console-ams.rpki-client.org