Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/fFGQKO3Ua5V7cVMiOcfvDljr0aA.roa
File:                     fFGQKO3Ua5V7cVMiOcfvDljr0aA.roa (raw, json)
Hash identifier:          QQWv1rUHSYOLVlRfnK9yqNP2lZPoQTenjZCXUWEFeSY=
Subject key identifier:   7C:51:90:28:ED:D4:6B:95:7B:71:53:22:39:C7:EF:0E:58:EB:D1:A0
Certificate issuer:       /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial:       01869ED9F59214AA6E083A05D23E74E55B9C
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/fFGQKO3Ua5V7cVMiOcfvDljr0aA.roa
Signing time:             Wed 01 Mar 2023 20:25:29 +0000
ROA not before:           Wed 01 Mar 2023 20:25:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50809
IP address blocks:        45.158.46.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:9e:d9:f5:92:14:aa:6e:08:3a:05:d2:3e:74:e5:5b:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
        Validity
            Not Before: Mar  1 20:25:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7c519028edd46b957b71532239c7ef0e58ebd1a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5f:59:2d:26:60:34:19:3d:cd:e8:92:32:b5:
                    fa:cb:8a:e8:35:c8:d8:6b:83:c1:71:da:6d:80:1e:
                    1f:2e:f7:18:5b:55:3e:00:bd:86:8d:dd:22:5c:96:
                    6a:56:c3:23:82:0a:f0:a4:07:81:a6:10:fe:c6:59:
                    87:1b:08:60:34:4b:f1:ef:20:dc:67:5a:49:ae:30:
                    1a:02:a7:fa:5f:4a:66:22:61:f0:b3:c2:73:89:21:
                    f6:11:2a:bd:33:c5:05:9f:fe:b0:8d:a1:ef:6b:ed:
                    ab:35:46:e3:9c:f2:2c:df:7b:60:e3:a7:c7:38:0c:
                    b2:f7:92:c6:52:a3:51:89:b6:63:03:85:65:7f:80:
                    c4:65:82:83:65:29:71:97:8f:c7:10:05:9b:c5:62:
                    c7:34:bb:3a:13:ba:ea:5c:c4:8b:3e:cd:da:be:54:
                    4b:e7:46:3f:85:63:f2:18:e0:3f:0e:4f:69:96:64:
                    3d:7d:15:4b:51:22:f7:98:e5:84:23:e1:a4:c7:49:
                    79:a2:aa:16:13:a5:12:ef:e9:47:ab:56:a7:a0:20:
                    61:76:06:cd:12:5b:8a:0b:37:5a:70:f4:7c:26:13:
                    d7:71:b4:f9:f4:ee:12:ea:35:41:b8:69:96:14:a3:
                    d2:00:39:a7:6e:f2:57:a0:89:77:1b:13:6c:a4:61:
                    e0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:51:90:28:ED:D4:6B:95:7B:71:53:22:39:C7:EF:0E:58:EB:D1:A0
            X509v3 Authority Key Identifier:
                keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/fFGQKO3Ua5V7cVMiOcfvDljr0aA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.158.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:06:5d:95:71:98:df:8f:61:a4:32:e2:44:26:93:f8:f9:d5:
         73:37:af:70:c9:00:a3:f5:27:e0:19:69:a5:17:7f:5c:bd:89:
         6b:56:da:06:90:41:81:77:66:de:25:eb:f2:f0:98:b9:57:75:
         3d:c2:8e:3a:57:00:78:e3:7c:42:f9:af:e8:a8:70:d0:05:dc:
         7f:9a:de:39:94:85:4a:7b:3a:48:1f:62:1e:61:7e:54:eb:55:
         03:e4:3f:5e:a4:48:69:29:c9:fc:de:2d:ef:a2:2a:b5:a0:c2:
         31:66:68:98:00:74:80:24:e1:a7:99:9a:04:3c:c2:05:88:80:
         98:aa:62:1a:a5:df:8b:53:e6:b0:46:9d:fd:67:ed:e4:ec:b0:
         78:8a:a0:ed:5a:85:90:30:1f:63:29:3f:2d:46:f5:d5:b5:20:
         e8:9b:8a:3b:d4:93:33:33:bd:1b:4e:07:a7:f3:e2:87:c8:c2:
         2c:e8:ce:e0:e5:de:48:89:6d:cb:87:92:d0:ef:fc:60:77:74:
         b5:0f:9b:81:95:b6:b5:c0:e0:bf:6c:e5:3b:f9:c2:63:0e:b5:
         d8:e0:7b:82:42:d2:af:85:0d:35:6b:5d:86:b1:49:01:f5:a5:
         15:35:6a:3c:7b:11:b2:de:aa:71:19:46:79:1d:c2:f5:15:f5:
         f8:5a:74:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:10 2023 by rpki-client on console-fra.rpki-client.org