Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/E-O5petjInrV_zUDr7VROcosmzk.roa
File:                     E-O5petjInrV_zUDr7VROcosmzk.roa (raw, json)
Hash identifier:          9IbpsTUgM7KpnuF0AYIepF9KZAK9hjwSUBbuQOTEFso=
Subject key identifier:   13:E3:B9:A5:EB:63:22:7A:D5:FF:35:03:AF:B5:51:39:CA:2C:9B:39
Certificate issuer:       /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial:       018B09B429441F4956EDFB24E5BB3EFBDEE7
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/E-O5petjInrV_zUDr7VROcosmzk.roa
Signing time:             Sat 07 Oct 2023 10:34:43 +0000
ROA not before:           Sat 07 Oct 2023 10:34:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        85.208.104.0/24 maxlen: 24
                          45.9.2.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:09:b4:29:44:1f:49:56:ed:fb:24:e5:bb:3e:fb:de:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
        Validity
            Not Before: Oct  7 10:34:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=13e3b9a5eb63227ad5ff3503afb55139ca2c9b39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:36:64:35:d3:01:81:46:64:3d:70:53:5e:55:
                    53:34:ef:45:ce:a8:1a:a7:ed:cd:3c:c7:e4:b7:71:
                    a6:62:0c:99:5e:7d:9a:d9:9f:09:d2:67:65:d8:69:
                    15:38:d0:a3:82:51:5c:fb:09:80:69:aa:08:ba:9f:
                    9a:d0:a6:d9:12:7e:47:78:f9:c9:63:cc:d3:ef:83:
                    6e:0a:dd:07:dd:17:f2:27:51:4d:9d:cc:52:3e:28:
                    be:77:91:18:e8:44:33:25:d2:57:1c:ff:aa:47:62:
                    ab:76:56:6e:5e:cc:19:17:ad:3a:f1:6a:3b:66:d3:
                    b0:1e:56:38:51:e6:57:ca:f2:60:c1:fd:f5:8b:1b:
                    d7:31:9f:ad:ab:92:35:51:92:95:14:ee:a9:58:12:
                    a5:79:04:6e:6d:a9:4b:84:3a:a7:f6:ae:d9:db:b9:
                    84:5f:80:4f:dc:fb:67:35:14:72:f5:97:1c:61:b0:
                    9b:44:2c:b9:f2:96:9d:91:40:12:b8:56:52:eb:bd:
                    fe:44:b8:33:8d:38:a3:b1:ce:2a:dd:83:56:51:3f:
                    ac:dd:55:ad:06:9b:3a:b5:d6:c8:05:8d:ff:00:49:
                    60:fd:c9:5d:b4:75:19:75:d4:a0:c8:61:be:66:27:
                    75:b7:b3:9c:2b:df:a3:56:64:11:24:d0:60:8d:3f:
                    53:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E3:B9:A5:EB:63:22:7A:D5:FF:35:03:AF:B5:51:39:CA:2C:9B:39
            X509v3 Authority Key Identifier:
                keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/E-O5petjInrV_zUDr7VROcosmzk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.9.2.0/24
                  85.208.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:51:62:79:ea:6a:04:7b:f9:9b:7a:01:50:f0:7a:32:d5:4a:
         b4:45:00:01:aa:cc:f2:81:44:73:4a:e4:7b:51:17:72:99:e3:
         33:62:34:dc:72:d6:d6:ca:87:a0:e4:85:19:8a:41:c4:7a:5d:
         c4:72:24:28:55:4c:03:51:e7:b5:4a:29:b4:3b:d9:9f:2d:0a:
         ce:ce:fe:e3:0f:d5:0f:53:23:95:ec:6b:57:3b:62:a4:07:a2:
         46:da:39:3b:2a:38:f8:e7:c9:8f:81:61:d2:cc:7f:f3:29:ad:
         fb:e1:58:16:49:50:d8:76:c9:6a:fb:96:8a:c3:e3:06:2c:6e:
         7c:9a:f8:48:4d:46:7d:c3:49:a7:b6:b4:3f:9b:60:fe:12:7c:
         2a:9d:96:eb:af:5f:8f:42:70:ac:b4:c5:2a:08:49:ab:0e:7e:
         97:97:68:bd:69:17:cf:37:fd:9d:f5:f2:fc:cd:2b:03:55:6b:
         28:cc:c7:f8:77:62:b2:1e:d0:89:bf:de:92:b4:2b:51:ad:52:
         47:39:a8:08:96:1f:8d:cd:13:dd:5d:f8:25:37:c3:2b:3c:a6:
         7b:76:d5:26:a3:f9:ee:8a:90:95:e3:9c:be:57:11:56:3b:8d:
         d0:67:25:c3:e7:1b:4b:e8:4f:37:23:85:e8:d7:80:f8:71:6e:
         55:e3:32:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 7 15:36:09 2023 by rpki-client on console-ams.rpki-client.org