Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/eDnZ2U_iPjGNurFh4kEOSoNeXc4.roa
File:                     eDnZ2U_iPjGNurFh4kEOSoNeXc4.roa (raw, json)
Hash identifier:          EAcUMNgDDQAWga8Iu7473dgIO9LZ5YTrHcPPm1y/y4M=
Subject key identifier:   78:39:D9:D9:4F:E2:3E:31:8D:BA:B1:61:E2:41:0E:4A:83:5E:5D:CE
Certificate issuer:       /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial:       018A5AC288D50E64F5B1E2530A6948C09CCF
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/eDnZ2U_iPjGNurFh4kEOSoNeXc4.roa
Signing time:             Sun 03 Sep 2023 11:16:53 +0000
ROA not before:           Sun 03 Sep 2023 11:16:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     0
IP address blocks:        45.88.148.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:5a:c2:88:d5:0e:64:f5:b1:e2:53:0a:69:48:c0:9c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
        Validity
            Not Before: Sep  3 11:16:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7839d9d94fe23e318dbab161e2410e4a835e5dce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5c:4b:a1:35:eb:f4:86:f9:85:40:4a:b3:ba:
                    78:1e:c4:e7:12:47:62:e6:33:7d:17:db:6b:2a:e4:
                    3e:90:99:6d:b0:0a:31:84:b9:92:81:8b:6e:5d:89:
                    eb:62:03:90:5e:cc:40:7d:e8:af:3d:ff:1f:da:30:
                    d8:25:89:08:bf:ce:72:a3:f3:71:34:22:7b:ee:c5:
                    c2:fb:2b:1b:8b:61:43:c0:70:4b:a1:14:c8:27:16:
                    29:da:3a:ca:04:a4:d1:95:9e:ca:ee:c4:21:73:9c:
                    1d:86:71:14:6f:fd:9e:a5:e7:49:8e:1d:46:03:0c:
                    40:93:5c:62:77:41:76:97:ed:37:78:6f:1b:ae:91:
                    23:ad:b3:71:30:8b:db:9c:30:fe:9e:58:d0:98:90:
                    64:4b:65:95:98:7d:8c:6e:b5:7a:6d:0f:8b:4f:f0:
                    17:ca:39:84:54:84:99:68:83:47:b9:0d:d0:bd:14:
                    e8:f1:65:62:65:44:79:56:48:19:b1:92:90:67:e7:
                    4a:30:01:e2:0d:64:a8:37:ec:7a:55:11:15:56:bc:
                    a2:d3:6d:69:0e:de:aa:58:22:17:78:ca:69:34:7c:
                    22:f4:bf:0a:19:2b:21:72:f6:03:39:2d:51:20:23:
                    3e:13:53:20:4c:8c:0c:6d:8a:26:cc:54:16:3c:a3:
                    1f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:39:D9:D9:4F:E2:3E:31:8D:BA:B1:61:E2:41:0E:4A:83:5E:5D:CE
            X509v3 Authority Key Identifier:
                keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/eDnZ2U_iPjGNurFh4kEOSoNeXc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.88.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:83:7b:04:f4:ac:53:de:29:c2:e7:80:b9:ea:56:e5:75:48:
         28:aa:fb:92:ed:cd:db:c4:10:9b:68:34:de:c0:e8:d3:e5:70:
         18:88:c3:f8:fe:84:71:bd:1a:c5:99:cc:09:cc:9a:d3:95:df:
         95:39:cf:d1:2a:53:2c:67:0a:8c:eb:02:9f:68:88:55:38:aa:
         dc:56:14:a6:aa:ac:e5:f8:b6:f1:2b:50:d7:25:a7:94:7b:15:
         69:01:57:6b:60:44:10:b0:c8:fd:80:3d:c1:67:87:7c:f5:72:
         5a:d3:aa:f9:8f:54:6e:ab:90:ad:bc:10:ec:d6:72:14:73:43:
         21:40:48:55:4b:a4:f5:d2:a5:ab:2e:3c:f9:1f:e7:56:d4:51:
         d5:23:4e:eb:2e:8e:9a:26:e5:fc:eb:62:6a:d3:bd:e7:39:80:
         d0:22:98:a7:dc:cb:ba:3f:9b:18:c4:88:f8:d8:2b:85:71:81:
         8c:5b:71:2c:31:3b:32:99:7f:65:37:9b:9b:b6:77:ff:69:6c:
         a6:31:e7:42:ec:3d:fa:68:f3:02:88:44:e4:c1:ba:10:7c:8e:
         ed:85:df:24:e9:65:83:0b:51:19:65:52:b9:f5:f2:cb:6b:1c:
         77:85:e0:df:7a:e8:df:53:59:b6:27:59:17:1b:20:7c:25:c2:
         04:c0:c1:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYpawojVDmT1seJTCmlIwJzPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjMwOTAzMTExNjUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODM5ZDlkOTRmZTIzZTMxOGRiYWIxNjFlMjQxMGU0YTgzNWU1ZGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolxLoTXr9Ib5hUBKs7p4HsTnEkdi
5jN9F9trKuQ+kJltsAoxhLmSgYtuXYnrYgOQXsxAfeivPf8f2jDYJYkIv85yo/Nx
NCJ77sXC+ysbi2FDwHBLoRTIJxYp2jrKBKTRlZ7K7sQhc5wdhnEUb/2epedJjh1G
AwxAk1xid0F2l+03eG8brpEjrbNxMIvbnDD+nljQmJBkS2WVmH2MbrV6bQ+LT/AX
yjmEVISZaINHuQ3QvRTo8WViZUR5VkgZsZKQZ+dKMAHiDWSoN+x6VREVVryi021p
Dt6qWCIXeMppNHwi9L8KGSshcvYDOS1RICM+E1MgTIwMbYomzFQWPKMfmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHg52dlP4j4xjbqxYeJBDkqDXl3OMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvZURuWjJVX2lQakdOdXJGaDRrRU9Tb05lWGM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLViUMA0G
CSqGSIb3DQEBCwUAA4IBAQBMg3sE9KxT3inC54C56lbldUgoqvuS7c3bxBCbaDTe
wOjT5XAYiMP4/oRxvRrFmcwJzJrTld+VOc/RKlMsZwqM6wKfaIhVOKrcVhSmqqzl
+LbxK1DXJaeUexVpAVdrYEQQsMj9gD3BZ4d89XJa06r5j1Ruq5CtvBDs1nIUc0Mh
QEhVS6T10qWrLjz5H+dW1FHVI07rLo6aJuX862Jq073nOYDQIpin3Mu6P5sYxIj4
2CuFcYGMW3EsMTsymX9lN5ubtnf/aWymMedC7D36aPMCiETkwboQfI7thd8k6WWD
C1EZZVK59fLLaxx3heDfeujfU1m2J1kXGyB8JcIEwMEK
Generated at Sun Sep 3 12:18:23 2023 by rpki-client on console-ams.rpki-client.org