Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/VudN-Ex6Ot_9gi-OEh22LXlU9XM.roa
File:                     VudN-Ex6Ot_9gi-OEh22LXlU9XM.roa (raw, json)
Hash identifier:          MgRWo+UXaw4EUkvZuHE8jLlw1FHkQcvEQMjeIH2VATo=
Subject key identifier:   56:E7:4D:F8:4C:7A:3A:DF:FD:82:2F:8E:12:1D:B6:2D:79:54:F5:73
Certificate issuer:       /CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0
Certificate serial:       0186883F9972D9983458CFBE643B27173E09
Authority key identifier: 23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/VudN-Ex6Ot_9gi-OEh22LXlU9XM.roa
Signing time:             Sat 25 Feb 2023 11:05:14 +0000
ROA not before:           Sat 25 Feb 2023 11:05:14 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208131
IP address blocks:        45.157.151.0/24 maxlen: 24
                          45.157.150.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:88:3f:99:72:d9:98:34:58:cf:be:64:3b:27:17:3e:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0
        Validity
            Not Before: Feb 25 11:05:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=56e74df84c7a3adffd822f8e121db62d7954f573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c8:91:7e:0d:60:f8:cc:06:9c:42:34:e9:40:
                    d5:d7:9f:6a:a5:2d:69:ca:dc:97:20:f5:8d:4b:fb:
                    58:47:48:37:9d:62:0b:bb:90:58:b7:13:d4:8d:dd:
                    f0:85:4f:52:24:e6:97:9c:ca:b2:ff:75:0d:64:e5:
                    e2:aa:56:06:b4:80:11:55:39:18:9e:c1:73:c6:6c:
                    81:85:a7:8a:27:4d:ed:dd:02:c6:30:5e:db:88:97:
                    5f:50:84:c5:47:1f:5d:10:db:f0:24:96:09:d2:a8:
                    bd:02:07:53:24:20:eb:41:6d:a4:db:59:a3:6c:db:
                    f4:ca:9b:36:e1:3c:d3:3d:cb:cd:0d:85:8e:ae:f4:
                    24:fb:c7:61:11:59:1e:ca:04:74:be:c8:ae:29:c6:
                    cc:c6:d6:fd:79:27:7d:91:f1:02:4b:ab:de:94:ad:
                    28:84:b1:a3:1a:e6:36:21:ae:3c:01:f9:a3:66:d9:
                    98:48:78:66:4f:0e:4b:52:b3:d0:94:2b:24:b3:41:
                    f4:f3:33:fd:b9:c5:7f:7b:da:d2:dc:c5:d5:62:fd:
                    99:dd:9a:ce:b5:1e:fc:e3:c3:69:68:ad:03:cf:57:
                    19:1e:9f:f7:2c:80:80:72:3e:b7:f3:4d:2a:cf:8f:
                    ad:bb:c4:69:7e:78:0e:95:72:88:76:e0:15:c6:aa:
                    83:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E7:4D:F8:4C:7A:3A:DF:FD:82:2F:8E:12:1D:B6:2D:79:54:F5:73
            X509v3 Authority Key Identifier:
                keyid:23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/VudN-Ex6Ot_9gi-OEh22LXlU9XM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.157.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:a6:e4:54:7b:ac:46:15:39:ab:61:b0:05:b6:d6:d5:95:ad:
         16:29:19:8a:59:6b:e9:21:d1:56:5e:05:f5:5b:bb:eb:ca:0c:
         02:1f:a4:bf:5b:a8:8e:f9:3a:e9:d8:cc:40:09:5b:f5:51:c8:
         df:fa:ef:01:bb:55:4b:3c:12:a7:f6:c6:ec:d6:e6:1b:74:6a:
         01:b9:62:2d:81:91:07:55:5d:6a:22:ab:27:08:bb:cb:73:a3:
         0e:68:9a:a3:0d:7d:6a:24:ac:e6:b1:95:66:2c:83:57:e0:6e:
         3f:44:00:76:a1:de:65:35:de:e7:5c:8e:15:8b:fe:c9:c9:31:
         2b:23:e0:10:7d:22:5f:f2:49:eb:24:1c:85:4d:2d:da:94:08:
         da:f8:cc:16:8c:70:5d:bc:a3:8a:8d:6c:ea:0f:28:f2:f2:4c:
         50:74:6b:b1:c6:6f:c3:37:71:99:5e:76:3c:82:c4:80:39:2c:
         e9:cd:b8:ec:8b:16:69:01:7b:f9:6c:e5:d5:9d:22:d4:cd:ff:
         9b:6f:16:f6:e6:ac:b8:a6:71:9c:76:46:d2:8a:89:51:2c:d0:
         6b:04:a3:75:42:4c:b6:07:38:cd:20:98:b2:ae:88:7b:4a:8f:
         72:0a:0d:2e:ce:65:30:24:34:8b:ea:69:4a:35:80:6b:cc:5b:
         50:6c:89:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:14 2024 by rpki-client on console-ams.rpki-client.org