Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/9TTs61SIHvJ52zmJjnjOewPlA9I.roa
File:                     9TTs61SIHvJ52zmJjnjOewPlA9I.roa (raw, json)
Hash identifier:          pgiDjissuartF4IgyqeRKjs4vlT/qtfuvI34296eClc=
Subject key identifier:   F5:34:EC:EB:54:88:1E:F2:79:DB:39:89:8E:78:CE:7B:03:E5:03:D2
Certificate issuer:       /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial:       01856E8B5443ABD2EF86A19B56A5D6764928
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/9TTs61SIHvJ52zmJjnjOewPlA9I.roa
Signing time:             Sun 01 Jan 2023 18:15:02 +0000
ROA not before:           Sun 01 Jan 2023 18:15:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211439
IP address blocks:        45.8.184.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:8b:54:43:ab:d2:ef:86:a1:9b:56:a5:d6:76:49:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
        Validity
            Not Before: Jan  1 18:15:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f534eceb54881ef279db39898e78ce7b03e503d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c5:80:0b:01:d7:bd:ac:6b:f7:5e:6f:b6:ef:
                    5d:6a:d1:38:9b:2f:92:86:2f:0e:55:4f:1e:c2:28:
                    e9:94:88:75:b2:44:ff:57:b0:d7:88:69:da:60:df:
                    de:ba:07:c1:0d:b4:6e:6e:a7:6f:30:e4:cb:ee:75:
                    be:c1:cc:de:0e:a1:a8:b3:1d:47:1a:52:0f:ec:8f:
                    99:3c:cd:15:90:82:9f:6d:54:7c:dc:f8:ff:8f:b6:
                    04:fb:01:ed:68:92:27:29:da:d0:d7:6a:d5:b4:94:
                    b2:e9:c8:57:61:b5:13:f5:66:ff:94:b0:9d:52:1f:
                    54:c1:85:25:dc:21:dc:7c:30:02:a7:f5:a0:1f:5f:
                    30:4a:f8:00:4a:e2:b0:04:c7:67:38:c8:92:9a:38:
                    21:2c:22:eb:3b:b6:22:6a:a6:16:e3:a3:7b:ab:9c:
                    9f:ec:b8:1d:98:db:0f:53:1a:67:f4:40:48:b4:f6:
                    40:a9:f6:1c:5d:a2:a3:36:8c:85:70:c8:97:97:e7:
                    b1:8c:09:46:ca:0e:53:bf:28:79:9e:36:f1:27:e8:
                    05:93:37:5a:2a:a6:63:f3:76:31:25:ad:5d:8c:80:
                    29:85:12:de:fc:bc:70:85:d5:24:89:cf:5a:f9:45:
                    29:82:06:98:8f:56:ff:71:0b:17:32:0c:ee:25:68:
                    91:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:34:EC:EB:54:88:1E:F2:79:DB:39:89:8E:78:CE:7B:03:E5:03:D2
            X509v3 Authority Key Identifier:
                keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/9TTs61SIHvJ52zmJjnjOewPlA9I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:ca:15:69:b7:a3:30:92:bf:4f:88:9d:b3:34:3e:51:d5:4d:
         8f:84:e0:89:e7:50:7a:df:f2:3d:e5:5e:e9:80:17:ac:7d:94:
         bb:11:51:7a:15:77:5d:26:f1:fe:2b:62:a9:4b:00:c4:69:2a:
         58:22:29:3b:7a:23:69:06:29:31:89:9b:da:1e:63:2f:08:78:
         48:71:e3:11:37:17:cf:37:46:46:76:0f:f4:2b:20:31:7c:be:
         1c:91:8d:97:fd:23:e0:2e:23:ae:1a:74:99:b7:31:8a:b7:61:
         8a:f2:db:b4:61:5a:62:6e:11:ff:e2:f1:2e:82:8a:13:b0:dd:
         d5:fe:9d:d7:e2:09:20:c3:24:db:9f:0a:b6:41:87:05:1d:f7:
         f6:44:ef:f8:d8:38:7c:68:dd:45:7d:72:22:79:e4:57:eb:24:
         f6:2d:4e:af:64:9c:4d:ce:d8:9b:1b:d3:76:54:8a:7e:ad:87:
         53:1d:00:59:90:ef:63:a8:f5:25:99:74:29:1a:b6:42:b6:c4:
         58:d0:04:2a:6d:1f:05:fa:04:a9:77:8b:e1:5a:5b:9b:f8:2a:
         ae:74:6e:80:50:64:a6:81:fa:c8:c8:6a:01:7d:e8:cc:67:28:
         17:ce:b4:7b:f5:4d:bf:75:e4:a3:63:99:b0:ce:f7:42:cc:66:
         93:50:9d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 18 10:56:51 2023 by rpki-client on console-fra.rpki-client.org