Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/58IbYwTdL-zS3YUdYVvY3dth4LU.roa
File:                     58IbYwTdL-zS3YUdYVvY3dth4LU.roa (raw, json)
Hash identifier:          jJFCpOUvallH0TzFFKoqoj/8WhFIh3NsrS1Ie/1eiqI=
Subject key identifier:   E7:C2:1B:63:04:DD:2F:EC:D2:DD:85:1D:61:5B:D8:DD:DB:61:E0:B5
Certificate issuer:       /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial:       0185710317BA187EBB47DF7DE0B0E57AF3DE
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/58IbYwTdL-zS3YUdYVvY3dth4LU.roa
Signing time:             Mon 02 Jan 2023 05:45:06 +0000
ROA not before:           Mon 02 Jan 2023 05:45:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206150
IP address blocks:        45.130.82.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:03:17:ba:18:7e:bb:47:df:7d:e0:b0:e5:7a:f3:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
        Validity
            Not Before: Jan  2 05:45:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e7c21b6304dd2fecd2dd851d615bd8dddb61e0b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:13:e1:10:cb:a0:54:b7:e7:d6:ad:8c:7e:65:
                    4a:76:e5:1c:bf:e7:c3:2f:68:fe:85:d0:8f:ce:21:
                    4b:cd:2a:cc:7d:c4:1c:4c:c6:48:83:d1:7a:eb:41:
                    e1:c8:f6:cf:f5:a4:38:75:c4:25:a1:b9:1e:c4:ef:
                    d6:b9:48:56:d4:e0:6d:91:5c:76:95:48:3f:20:93:
                    72:26:da:4d:5c:a3:aa:49:b7:5b:42:7d:54:08:0a:
                    85:ce:64:26:a9:d8:3f:68:0f:f1:18:20:1e:14:a1:
                    c3:9b:eb:82:4c:87:cd:46:76:08:25:7b:7f:c5:41:
                    47:5a:88:4d:40:73:bf:2d:44:e3:5c:e2:0c:c7:fc:
                    7d:55:b3:1e:6e:7f:33:70:fb:40:dd:bf:3a:29:d1:
                    2c:0e:01:5f:84:8f:5a:35:39:ec:76:81:23:7e:2f:
                    d2:ce:76:d4:b5:c9:36:ab:a4:2a:bf:70:d7:42:4e:
                    69:d7:63:0e:cf:76:79:fe:a2:a8:e2:7b:c4:84:ec:
                    f3:28:8e:22:e9:36:0e:57:5b:e3:c0:70:25:ee:6d:
                    44:3c:32:0f:6c:68:95:9e:2f:26:d9:28:9e:d9:42:
                    fe:56:20:9c:a8:9f:ba:42:43:93:19:73:a1:4a:f5:
                    f5:f4:1d:f5:e9:99:3b:d4:f0:9f:32:38:a7:95:7f:
                    3a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C2:1B:63:04:DD:2F:EC:D2:DD:85:1D:61:5B:D8:DD:DB:61:E0:B5
            X509v3 Authority Key Identifier:
                keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/58IbYwTdL-zS3YUdYVvY3dth4LU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.130.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:96:a5:7f:a1:ba:a9:ea:68:6b:3a:57:6f:79:22:63:8a:9c:
         83:7e:b1:82:75:eb:3b:ef:a5:d4:d5:92:b9:6c:f0:9e:b6:b2:
         80:cc:fc:9c:4d:5f:b1:0a:8e:29:a7:3f:3d:5f:5d:1f:7f:5b:
         21:01:aa:ab:b9:d1:a3:9d:dc:95:14:2f:da:1c:2b:cb:c7:39:
         0f:cd:0f:f9:3e:19:2b:97:da:11:c4:ac:ed:7e:cb:3f:ec:e6:
         05:5c:8c:ce:db:02:f6:8c:c2:fc:16:db:e7:1d:c9:8c:e2:dd:
         71:96:0d:dd:1a:4d:3b:9a:2e:82:84:38:56:c4:3b:30:4e:23:
         22:48:d5:7d:5e:17:4a:f6:9b:f4:8f:b7:ca:64:6c:51:54:6e:
         79:f5:1c:fe:10:fb:0d:3c:16:db:ef:73:7a:cd:3a:69:3d:24:
         c0:7a:a9:64:7b:a7:7b:d5:57:56:ee:39:a0:9c:f8:25:7d:46:
         a8:ac:65:db:66:81:4c:b5:24:5e:00:7f:31:cd:47:31:71:25:
         1d:3b:74:31:fa:03:3e:42:39:c3:86:0d:7b:bc:33:8e:2d:3a:
         97:a6:dc:8b:f4:f9:23:1f:2f:92:de:86:dd:61:bf:f7:2d:44:
         8f:41:19:79:1f:87:24:3e:cc:61:15:fa:5e:a7:a3:15:ca:4b:
         c2:70:a8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 09:48:50 2023 by rpki-client on console-ams.rpki-client.org