Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/m5ML6hQWnlklnJmuFXk4y_ikuQM.roa
File:                     m5ML6hQWnlklnJmuFXk4y_ikuQM.roa (raw, json)
Hash identifier:          L90WBtRSV+7Up/Kxpu8lN/SIPQdrKspgJPUSo24ChRw=
Subject key identifier:   9B:93:0B:EA:14:16:9E:59:25:9C:99:AE:15:79:38:CB:F8:A4:B9:03
Certificate issuer:       /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Certificate serial:       0189AC01CFAEA9C3271EA4727EF1E658DB0A
Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/m5ML6hQWnlklnJmuFXk4y_ikuQM.roa
Signing time:             Mon 31 Jul 2023 12:52:27 +0000
ROA not before:           Mon 31 Jul 2023 12:52:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8100
IP address blocks:        45.155.78.0/24 maxlen: 24
                          45.155.79.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:ac:01:cf:ae:a9:c3:27:1e:a4:72:7e:f1:e6:58:db:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
        Validity
            Not Before: Jul 31 12:52:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9b930bea14169e59259c99ae157938cbf8a4b903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:47:6c:c6:ab:3b:e9:3d:39:45:94:8a:10:70:
                    b3:3a:98:50:69:b7:8c:0b:74:58:75:21:67:a3:31:
                    95:9a:b6:9b:16:0e:c1:6a:92:fc:4a:8d:bc:1e:4a:
                    ad:14:5d:57:f7:ae:b2:d1:ba:ad:94:d0:5b:51:1f:
                    5d:d4:a9:ee:36:bf:bf:0d:27:0e:4d:57:f4:c3:20:
                    cd:4a:30:b1:96:6e:d3:78:8c:26:87:f4:45:99:6b:
                    ce:96:9e:90:aa:2b:db:dc:81:53:bc:28:4e:39:40:
                    9e:b6:6e:62:07:84:32:a2:92:8d:57:60:1a:dd:64:
                    eb:eb:5b:e9:6f:df:b2:39:a5:c9:9d:41:89:2a:30:
                    5e:eb:18:76:47:41:d2:3f:00:b9:29:00:63:b2:c2:
                    df:ee:ce:59:51:77:76:22:b6:31:4c:fa:e9:62:6e:
                    6b:0c:db:ea:a1:6a:ab:2f:78:84:a4:b1:bd:db:53:
                    ed:55:74:13:b3:9c:84:df:48:e6:e3:1e:f1:34:91:
                    91:04:e3:2b:93:51:28:ca:54:0e:81:b8:51:60:ec:
                    a7:21:1d:4c:a6:3b:6e:bc:fb:45:01:a5:0e:44:ac:
                    c0:b8:12:59:d8:ae:35:03:1e:2e:3a:54:b7:65:50:
                    6f:c4:55:5d:1c:80:ed:1f:af:57:26:7e:0d:88:e7:
                    d2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:93:0B:EA:14:16:9E:59:25:9C:99:AE:15:79:38:CB:F8:A4:B9:03
            X509v3 Authority Key Identifier:
                keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/m5ML6hQWnlklnJmuFXk4y_ikuQM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:ea:f8:c0:53:ca:57:e1:00:ce:6f:29:70:e7:a0:38:0e:9d:
         fe:3d:53:25:c0:e9:31:ab:f2:b4:73:fa:4d:0c:11:b5:11:12:
         84:d6:c8:56:16:9b:ae:3c:0f:ee:1a:49:53:ce:72:13:7e:80:
         73:6e:19:6f:94:c1:9f:75:b0:9d:79:96:65:40:b2:90:d5:c1:
         98:f4:e5:56:e3:f9:44:1e:73:ba:3d:a3:00:e3:40:e7:bc:70:
         94:3b:d4:12:9e:09:ec:84:6b:64:0f:81:b3:1f:3a:87:79:51:
         c0:44:10:69:a6:f5:76:78:48:a4:82:48:90:ac:3d:03:f4:55:
         d1:cb:26:4b:e8:75:ec:62:c8:c6:76:53:c7:69:f9:2c:86:57:
         0e:76:6b:2a:f3:69:da:b5:74:18:df:64:91:60:13:01:69:b9:
         c6:03:f2:2b:7e:e4:80:ee:21:b4:8a:d2:c8:a2:da:96:09:8d:
         81:ae:6e:4c:a6:49:f4:c8:24:7e:e5:ab:cb:d0:d8:c0:32:b2:
         1b:e3:49:24:84:4f:30:8d:15:22:28:46:ae:93:0f:18:f3:65:
         44:52:8a:b9:0d:7c:bc:a4:e9:55:64:01:09:6b:0b:dd:2d:b1:
         3b:3c:8b:06:f4:00:7f:8c:71:52:c7:68:2c:58:fb:b9:b6:87:
         1d:ca:d5:5f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYmsAc+uqcMnHqRyfvHmWNsKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNDc0YWM3Y2E4NWUwOWMyZDQ4YjMzZTdiZjY2ZjhlZDc2
NGRlMGYwHhcNMjMwNzMxMTI1MjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjkzMGJlYTE0MTY5ZTU5MjU5Yzk5YWUxNTc5MzhjYmY4YTRiOTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEdsxqs76T05RZSKEHCzOphQabeM
C3RYdSFnozGVmrabFg7BapL8So28HkqtFF1X966y0bqtlNBbUR9d1KnuNr+/DScO
TVf0wyDNSjCxlm7TeIwmh/RFmWvOlp6Qqivb3IFTvChOOUCetm5iB4QyopKNV2Aa
3WTr61vpb9+yOaXJnUGJKjBe6xh2R0HSPwC5KQBjssLf7s5ZUXd2IrYxTPrpYm5r
DNvqoWqrL3iEpLG921PtVXQTs5yE30jm4x7xNJGRBOMrk1EoylQOgbhRYOynIR1M
pjtuvPtFAaUORKzAuBJZ2K41Ax4uOlS3ZVBvxFVdHIDtH69XJn4NiOfSXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJuTC+oUFp5ZJZyZrhV5OMv4pLkDMB8GA1UdIwQY
MBaAFDJHSsfKheCcLUizPnv2b47XZN4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzkt
MTJlYzIyYzljNWEyLzEvbTVNTDZoUVdubGtsbkptdUZYazR5X2lrdVFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzktMTJlYzIyYzljNWEy
LzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZtOMA0G
CSqGSIb3DQEBCwUAA4IBAQAT6vjAU8pX4QDObylw56A4Dp3+PVMlwOkxq/K0c/pN
DBG1ERKE1shWFpuuPA/uGklTznITfoBzbhlvlMGfdbCdeZZlQLKQ1cGY9OVW4/lE
HnO6PaMA40DnvHCUO9QSngnshGtkD4GzHzqHeVHARBBppvV2eEikgkiQrD0D9FXR
yyZL6HXsYsjGdlPHafkshlcOdmsq82natXQY32SRYBMBabnGA/IrfuSA7iG0itLI
otqWCY2Brm5Mpkn0yCR+5avL0NjAMrIb40kkhE8wjRUiKEaukw8Y82VEUoq5DXy8
pOlVZAEJawvdLbE7PIsG9AB/jHFSx2gsWPu5tocdytVf
Generated at Wed Aug 23 22:59:46 2023 by rpki-client on console-ams.rpki-client.org