Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/ABrqV03EGx9Ml9jtd0S0gAmNwi8.roa
File:                     ABrqV03EGx9Ml9jtd0S0gAmNwi8.roa (raw, json)
Hash identifier:          sspxVTqqQtaOkCKl8BA9hGRl2VNnrowVCXjzq6RPQuw=
Subject key identifier:   00:1A:EA:57:4D:C4:1B:1F:4C:97:D8:ED:77:44:B4:80:09:8D:C2:2F
Certificate issuer:       /CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
Certificate serial:       018573F1811B257A93934176613F5FC3DACE
Authority key identifier: DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/ABrqV03EGx9Ml9jtd0S0gAmNwi8.roa
Signing time:             Mon 02 Jan 2023 19:24:45 +0000
ROA not before:           Mon 02 Jan 2023 19:24:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203546
IP address blocks:        45.150.69.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:f1:81:1b:25:7a:93:93:41:76:61:3f:5f:c3:da:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
        Validity
            Not Before: Jan  2 19:24:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=001aea574dc41b1f4c97d8ed7744b480098dc22f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:7f:25:02:3d:ce:a0:05:63:d2:89:31:3f:d4:
                    7c:2b:51:2f:e8:a9:2f:8e:3e:2e:0a:e2:65:e2:b1:
                    2d:48:a4:f9:22:39:35:82:c8:50:a6:cd:9b:eb:2f:
                    8a:db:08:c7:2c:e7:cf:a7:42:30:c9:a1:45:0e:63:
                    1a:8e:97:b1:e4:6d:d5:ec:a9:d5:d2:8a:67:75:3e:
                    0d:5e:2e:7b:c6:a9:27:6a:3b:97:3e:5a:7a:83:90:
                    8b:7b:3f:6e:3e:79:c0:07:db:e8:7a:28:56:7d:a9:
                    ae:47:27:f1:09:92:8a:5e:6c:42:8a:ed:c6:2c:81:
                    c9:e4:35:c9:a8:c8:c8:ed:65:29:17:6d:e7:cb:bd:
                    6e:82:3f:77:13:a3:5d:d2:5f:6d:28:b0:2b:bc:59:
                    e8:b2:bf:63:fa:97:2d:9d:9a:b3:82:d8:9c:c2:08:
                    a8:bd:23:dd:c1:70:44:cd:f2:85:c3:3c:a4:b3:cf:
                    e3:04:86:e4:f1:43:18:c7:2e:1c:f2:ba:97:9a:e7:
                    ef:2f:df:d1:b9:10:74:85:c9:5e:f0:b0:b6:66:89:
                    d3:db:65:f4:94:17:10:53:45:2a:c8:ec:9a:67:d3:
                    10:a0:ff:ae:d9:83:dd:4a:00:ee:2b:9a:3d:29:57:
                    fb:9b:60:8d:e9:4e:d3:90:19:c7:da:83:8b:f1:73:
                    83:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:1A:EA:57:4D:C4:1B:1F:4C:97:D8:ED:77:44:B4:80:09:8D:C2:2F
            X509v3 Authority Key Identifier:
                keyid:DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/ABrqV03EGx9Ml9jtd0S0gAmNwi8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.150.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:fb:ce:78:b5:f9:ce:48:6a:5e:fe:19:4c:b4:78:5b:c8:7d:
         82:bf:55:73:68:30:87:7f:e8:5a:0e:46:c3:09:2c:4a:ed:fc:
         94:2e:5f:07:bb:27:bd:f2:7c:65:eb:97:5f:4d:b3:04:26:4b:
         0d:50:54:74:f4:14:f0:83:9a:5b:80:c9:6c:a0:9e:f2:d6:bf:
         9a:1e:8b:b9:f8:70:4a:b9:6b:20:d0:ad:e0:7e:5d:08:b1:d2:
         0b:a2:6c:1d:77:32:cc:3f:35:2e:c4:d1:36:80:62:ca:02:c2:
         f1:03:31:a2:0c:33:db:be:88:0e:cc:06:cb:fa:7c:f3:83:4f:
         53:63:7f:0b:59:33:86:04:fe:65:06:5c:2f:57:50:38:f6:a3:
         fb:e1:b6:13:3f:8c:1c:58:a2:df:7d:7a:f9:2b:c5:1c:f2:fc:
         76:84:fc:b4:cc:92:47:25:dd:55:63:94:f5:fd:3e:88:bf:d2:
         65:1f:86:7a:dc:db:34:bf:91:2e:c4:a8:68:09:12:26:f2:bf:
         54:52:0b:91:cd:ec:c6:f0:34:75:12:a2:f2:14:11:8a:ce:15:
         a9:1c:75:65:c3:cf:08:64:c4:4d:c0:a5:d5:b3:48:43:c1:11:
         55:6d:f0:ca:57:53:c3:8b:54:dc:f6:54:97:a7:33:00:ed:ea:
         21:4a:b8:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVz8YEbJXqTk0F2YT9fw9rOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMWZkMDA3ZGZmYTUwOGYzMDA2M2ZiZTRkNTNhMmIyZTFl
OGM0ZGUwHhcNMjMwMTAyMTkyNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDFhZWE1NzRkYzQxYjFmNGM5N2Q4ZWQ3NzQ0YjQ4MDA5OGRjMjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhn8lAj3OoAVj0okxP9R8K1Ev6Kkv
jj4uCuJl4rEtSKT5Ijk1gshQps2b6y+K2wjHLOfPp0IwyaFFDmMajpex5G3V7KnV
0opndT4NXi57xqknajuXPlp6g5CLez9uPnnAB9voeihWfamuRyfxCZKKXmxCiu3G
LIHJ5DXJqMjI7WUpF23ny71ugj93E6Nd0l9tKLArvFnosr9j+pctnZqzgticwgio
vSPdwXBEzfKFwzyks8/jBIbk8UMYxy4c8rqXmufvL9/RuRB0hcle8LC2ZonT22X0
lBcQU0UqyOyaZ9MQoP+u2YPdSgDuK5o9KVf7m2CN6U7TkBnH2oOL8XODyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAAa6ldNxBsfTJfY7XdEtIAJjcIvMB8GA1UdIwQY
MBaAFNwf0Aff+lCPMAY/vk1TorLh6MTeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0JfUUI5XzZVSTh3QmotLVRWT2lzdUhveE40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8wNzUzNzctZTQyNi00OTJmLWE1OWMt
YWU0Yzk1Yzk0MDA1LzEvQUJycVYwM0VHeDlNbDlqdGQwUzBnQW1Od2k4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8wNzUzNzctZTQyNi00OTJmLWE1OWMtYWU0Yzk1Yzk0MDA1
LzEvM0JfUUI5XzZVSTh3QmotLVRWT2lzdUhveE40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZZFMA0G
CSqGSIb3DQEBCwUAA4IBAQA5+854tfnOSGpe/hlMtHhbyH2Cv1VzaDCHf+haDkbD
CSxK7fyULl8Huye98nxl65dfTbMEJksNUFR09BTwg5pbgMlsoJ7y1r+aHou5+HBK
uWsg0K3gfl0IsdILomwddzLMPzUuxNE2gGLKAsLxAzGiDDPbvogOzAbL+nzzg09T
Y38LWTOGBP5lBlwvV1A49qP74bYTP4wcWKLffXr5K8Uc8vx2hPy0zJJHJd1VY5T1
/T6Iv9JlH4Z63Ns0v5EuxKhoCRIm8r9UUguRzezG8DR1EqLyFBGKzhWpHHVlw88I
ZMRNwKXVs0hDwRFVbfDKV1PDi1Tc9lSXpzMA7eohSrjk
-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:42 2024 by rpki-client on console-fra.rpki-client.org