Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/EtizN-RLB42BK2TMHO5f7ghbZy4.roa
File:                     EtizN-RLB42BK2TMHO5f7ghbZy4.roa (raw, json)
Hash identifier:          Hf+Cyu+axEjU1/sdDRR4SReQ6ersyfT6y0lGBL6Q5MY=
Subject key identifier:   12:D8:B3:37:E4:4B:07:8D:81:2B:64:CC:1C:EE:5F:EE:08:5B:67:2E
Certificate issuer:       /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial:       018773E2FD8C7C8A23D2CD2313A34A761BFA
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/EtizN-RLB42BK2TMHO5f7ghbZy4.roa
Signing time:             Wed 12 Apr 2023 05:14:28 +0000
ROA not before:           Wed 12 Apr 2023 05:14:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     58061
IP address blocks:        45.137.197.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:73:e2:fd:8c:7c:8a:23:d2:cd:23:13:a3:4a:76:1b:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
        Validity
            Not Before: Apr 12 05:14:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=12d8b337e44b078d812b64cc1cee5fee085b672e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:af:9e:58:d2:5e:43:f6:2a:f6:87:8b:cb:16:
                    d8:a5:fa:fa:2f:b3:d5:90:7b:3f:59:59:57:1d:9c:
                    da:7b:89:21:ac:02:ea:b7:ea:03:ff:de:37:49:dd:
                    de:dc:24:8c:8d:dd:66:fa:5b:2a:09:07:a3:13:15:
                    34:e7:8f:70:a3:0e:45:e9:60:d3:49:8b:1c:f6:60:
                    b5:ee:5b:ca:17:61:c3:30:f9:f7:b1:e5:e6:58:a2:
                    3c:bc:89:bd:85:42:5f:fd:86:3b:19:69:41:b6:0c:
                    92:16:2e:b0:5a:0b:bf:64:d5:f5:54:dd:fe:3f:ca:
                    87:9f:e1:66:30:59:22:9f:ae:0a:29:1f:a5:f1:7b:
                    3f:d6:b7:f0:4a:10:0c:c2:06:12:bb:5a:67:13:4f:
                    45:df:3f:d2:43:74:80:5a:36:b0:1f:9f:f0:ab:af:
                    f0:56:f0:f3:fc:9a:63:50:16:95:71:8a:a4:fd:8f:
                    a5:c7:2b:d1:6e:af:6e:31:94:37:ec:33:59:73:32:
                    49:5d:c7:c4:5e:07:74:f3:73:bc:a0:fb:be:51:ad:
                    69:5d:a2:f3:53:79:09:53:ea:9b:c0:78:ea:b2:00:
                    05:0e:26:96:4c:d0:f6:aa:d8:5b:bb:d5:10:a5:27:
                    9e:8f:68:ec:62:36:78:d2:88:19:dc:19:c9:fa:b2:
                    7a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D8:B3:37:E4:4B:07:8D:81:2B:64:CC:1C:EE:5F:EE:08:5B:67:2E
            X509v3 Authority Key Identifier:
                keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/EtizN-RLB42BK2TMHO5f7ghbZy4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.137.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:1f:48:01:5e:f9:bf:38:a2:a3:6b:9e:e3:ea:a9:9d:7f:b0:
         8a:82:72:9c:80:7e:28:61:ef:f9:05:70:9e:3a:42:4d:1e:cc:
         96:b8:0c:72:85:60:c7:d0:63:80:a1:2c:a9:98:d0:18:de:cd:
         56:be:75:e7:e1:82:50:cc:93:81:df:a4:65:21:66:d6:59:9d:
         ff:7e:7c:e6:77:d8:04:95:9d:6d:0e:90:d3:b9:1e:01:1a:e9:
         99:d4:05:02:d9:7d:6f:07:7d:6e:c5:4a:c5:bd:e2:d6:d0:be:
         51:51:95:f9:77:f6:97:30:7f:03:27:0d:85:af:7d:8a:79:28:
         fd:45:72:a7:b4:de:0f:8b:83:1c:d8:37:10:f3:24:2b:c9:c2:
         70:e7:1c:91:65:89:05:bb:6f:6b:28:42:91:82:87:11:a6:fb:
         02:dc:54:50:56:4c:54:9d:25:8f:e0:e0:1a:4c:31:00:2a:59:
         20:9f:2d:af:ac:45:23:17:f8:2f:32:7e:89:10:02:d4:ac:d1:
         05:d6:cf:51:d6:e7:b7:fc:80:8a:57:c2:24:08:69:fb:f4:5d:
         24:11:4f:a0:f3:7b:13:bc:2b:b6:db:79:dd:b0:4f:e2:b1:16:
         f1:98:ea:e9:09:80:9d:f8:73:9b:81:12:9f:05:3b:47:63:ae:
         75:85:9c:47
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdz4v2MfIoj0s0jE6NKdhv6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjMwNDEyMDUxNDI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmQ4YjMzN2U0NGIwNzhkODEyYjY0Y2MxY2VlNWZlZTA4NWI2NzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6+eWNJeQ/Yq9oeLyxbYpfr6L7PV
kHs/WVlXHZzae4khrALqt+oD/943Sd3e3CSMjd1m+lsqCQejExU0549wow5F6WDT
SYsc9mC17lvKF2HDMPn3seXmWKI8vIm9hUJf/YY7GWlBtgySFi6wWgu/ZNX1VN3+
P8qHn+FmMFkin64KKR+l8Xs/1rfwShAMwgYSu1pnE09F3z/SQ3SAWjawH5/wq6/w
VvDz/JpjUBaVcYqk/Y+lxyvRbq9uMZQ37DNZczJJXcfEXgd083O8oPu+Ua1pXaLz
U3kJU+qbwHjqsgAFDiaWTND2qthbu9UQpSeej2jsYjZ40ogZ3BnJ+rJ62QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBLYszfkSweNgStkzBzuX+4IW2cuMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvRXRpek4tUkxCNDJCSzJUTUhPNWY3Z2hiWnk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYnFMA0G
CSqGSIb3DQEBCwUAA4IBAQC/H0gBXvm/OKKja57j6qmdf7CKgnKcgH4oYe/5BXCe
OkJNHsyWuAxyhWDH0GOAoSypmNAY3s1WvnXn4YJQzJOB36RlIWbWWZ3/fnzmd9gE
lZ1tDpDTuR4BGumZ1AUC2X1vB31uxUrFveLW0L5RUZX5d/aXMH8DJw2Fr32KeSj9
RXKntN4Pi4Mc2DcQ8yQrycJw5xyRZYkFu29rKEKRgocRpvsC3FRQVkxUnSWP4OAa
TDEAKlkgny2vrEUjF/gvMn6JEALUrNEF1s9R1ue3/ICKV8IkCGn79F0kEU+g83sT
vCu223ndsE/isRbxmOrpCYCd+HObgRKfBTtHY651hZxH
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:57 2024 by rpki-client on console-fra.rpki-client.org