Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/SLVD53dGeiJl6eAua-1Ib47NsD8.roa
File:                     SLVD53dGeiJl6eAua-1Ib47NsD8.roa (raw, json)
Hash identifier:          GVNfpECtKKKX/+OT2awxUe1mXA4EurVNqNmNo7+VUsU=
Subject key identifier:   48:B5:43:E7:77:46:7A:22:65:E9:E0:2E:6B:ED:48:6F:8E:CD:B0:3F
Certificate issuer:       /CN=9a6e147448289634b98688ee5a5af447d42cbb07
Certificate serial:       018570D5301821FCCD61A7A5EE38F040577B
Authority key identifier: 9A:6E:14:74:48:28:96:34:B9:86:88:EE:5A:5A:F4:47:D4:2C:BB:07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/SLVD53dGeiJl6eAua-1Ib47NsD8.roa
Signing time:             Mon 02 Jan 2023 04:54:57 +0000
ROA not before:           Mon 02 Jan 2023 04:54:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6643
IP address blocks:        45.12.196.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:d5:30:18:21:fc:cd:61:a7:a5:ee:38:f0:40:57:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a6e147448289634b98688ee5a5af447d42cbb07
        Validity
            Not Before: Jan  2 04:54:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=48b543e777467a2265e9e02e6bed486f8ecdb03f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:35:49:da:27:73:63:7c:9f:96:4f:79:d4:74:
                    4f:68:b6:e8:dc:e5:7d:8f:e8:e2:65:7b:01:ac:c1:
                    fe:4a:7a:04:4e:14:29:27:ab:7f:c0:ed:96:ff:da:
                    51:b4:fe:a7:cf:a4:bb:98:2b:6a:31:ac:ee:68:b6:
                    02:f3:92:b4:71:61:6e:64:50:7a:62:46:2a:ae:61:
                    8e:9a:30:e2:ea:ac:e6:11:0b:fa:16:05:96:ac:d0:
                    34:d0:f4:2b:1a:69:5c:ab:08:53:c3:7c:40:5c:9e:
                    25:1c:23:95:9d:42:a5:53:0e:f8:df:1d:c6:8c:0f:
                    83:65:d0:c8:a5:38:bc:d9:73:ef:52:62:16:81:16:
                    8f:0e:25:10:41:dc:a3:84:8e:26:03:1a:96:74:4e:
                    87:23:1c:16:98:b9:6f:42:f4:ba:f5:34:82:74:f4:
                    58:a2:1b:c2:0d:a7:9c:52:8c:95:59:ce:14:cf:c6:
                    12:5d:d1:6b:1f:46:4d:22:4c:06:8a:79:39:50:8e:
                    e4:7b:e7:d4:cf:dd:dd:c2:c2:1a:7f:90:fb:56:99:
                    a8:30:08:34:32:b8:1e:a5:ed:39:0b:a6:5d:7b:7f:
                    8e:9e:63:75:05:be:1d:53:1d:53:9c:4c:e0:5b:8a:
                    ab:12:1b:7d:c5:92:94:3d:38:1a:0b:b1:fb:c3:f3:
                    0f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B5:43:E7:77:46:7A:22:65:E9:E0:2E:6B:ED:48:6F:8E:CD:B0:3F
            X509v3 Authority Key Identifier:
                keyid:9A:6E:14:74:48:28:96:34:B9:86:88:EE:5A:5A:F4:47:D4:2C:BB:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/SLVD53dGeiJl6eAua-1Ib47NsD8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.12.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:a7:52:3c:85:4d:b5:ac:8d:23:34:cd:a6:ac:d5:d0:d2:79:
         cd:f6:4a:a3:0a:f8:64:75:91:01:a5:44:0f:4b:9c:fe:ef:af:
         57:e8:ac:4d:8d:30:bd:6a:b2:7f:a4:18:87:5b:7b:ba:21:d3:
         c9:14:0f:c3:8a:15:1f:bd:19:1c:90:5e:48:88:3f:1c:f4:a0:
         7a:2e:24:c1:cc:aa:5f:35:54:c5:88:26:15:f0:51:8d:bc:db:
         44:57:ac:70:c4:f9:22:c7:55:a6:f3:39:93:da:1f:10:82:90:
         97:51:9a:13:d2:14:96:4c:68:46:b5:87:cc:bf:e3:6e:d5:c9:
         15:75:e6:3e:4c:9f:c2:5f:10:47:f3:b8:59:54:0e:bf:36:98:
         9a:c8:a6:b5:ec:6c:43:89:59:2d:61:8c:9a:38:2f:32:db:50:
         79:94:b6:8c:a4:37:21:2e:8b:d6:7d:37:da:2f:ba:4d:0a:3d:
         ba:b4:d4:57:57:a8:ce:12:47:1f:e1:10:df:2b:bd:e6:f7:94:
         3e:01:e5:04:01:f1:f2:ee:a0:12:b6:30:4c:cb:fc:a5:d2:64:
         c3:97:3f:9e:07:b4:70:11:cc:5b:bb:30:6f:17:61:62:8b:85:
         ae:e2:66:74:66:2d:55:e4:2e:cd:ed:03:20:e0:9a:7c:9d:0d:
         eb:0f:50:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:49 2024 by rpki-client on console-ams.rpki-client.org