Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/SNRv_hIDextPU3gW_LiNTClRUi8.roa
File:                     SNRv_hIDextPU3gW_LiNTClRUi8.roa (raw, json)
Hash identifier:          VgUaEG+trIBYomDCmNgDjFTJsfu6XverhrXe8SXrj44=
Subject key identifier:   48:D4:6F:FE:12:03:7B:1B:4F:53:78:16:FC:B8:8D:4C:29:51:52:2F
Certificate issuer:       /CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Certificate serial:       018570B9819F2F30628231C64012195A90E1
Authority key identifier: BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/SNRv_hIDextPU3gW_LiNTClRUi8.roa
Signing time:             Mon 02 Jan 2023 04:24:43 +0000
ROA not before:           Mon 02 Jan 2023 04:24:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        45.81.116.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:b9:81:9f:2f:30:62:82:31:c6:40:12:19:5a:90:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
        Validity
            Not Before: Jan  2 04:24:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=48d46ffe12037b1b4f537816fcb88d4c2951522f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:1d:65:30:59:98:90:fa:ca:83:58:31:1d:94:
                    09:19:e3:a6:52:40:c8:f3:36:2f:dc:16:2f:be:5f:
                    dc:32:70:25:08:73:fc:99:01:ab:a1:7e:0f:df:a1:
                    e9:1d:73:38:8d:72:ee:85:ee:34:6d:67:49:8a:28:
                    e5:6d:fd:2c:fe:de:b4:90:2d:71:9a:31:5c:9f:5a:
                    e8:82:29:c2:c4:1f:17:66:ac:7a:dd:92:95:c2:c0:
                    2b:55:29:81:1d:7b:16:11:0d:25:d4:2c:4b:48:33:
                    38:d5:b9:e5:b1:97:b8:fc:43:8f:50:42:65:62:0d:
                    de:f0:c9:6a:1a:3b:f3:01:1d:cc:6c:4b:f1:0f:54:
                    59:df:b0:c3:44:04:70:f2:de:3e:48:3d:25:b7:36:
                    66:31:a1:d6:d7:5e:f7:87:28:34:98:62:6a:67:5e:
                    30:3d:82:26:e0:74:bd:60:5f:94:d5:b3:b0:42:08:
                    61:c2:7c:e5:e2:54:76:9a:c0:24:ca:39:31:6c:c5:
                    89:ec:96:a9:83:7c:eb:b0:6c:8e:bd:fa:dd:83:90:
                    bb:b8:99:07:b3:19:83:90:d9:df:37:27:94:6b:53:
                    96:06:45:dd:c4:df:43:7b:fd:2c:52:e0:04:4e:4f:
                    04:76:43:9c:d0:08:b1:64:42:c8:2c:0a:3c:8a:70:
                    0f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D4:6F:FE:12:03:7B:1B:4F:53:78:16:FC:B8:8D:4C:29:51:52:2F
            X509v3 Authority Key Identifier:
                keyid:BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/SNRv_hIDextPU3gW_LiNTClRUi8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.81.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:3d:cb:e9:b9:2d:60:62:62:d5:c3:de:de:40:39:2b:72:1d:
         ce:dc:4b:36:bc:e7:68:5d:54:f6:07:36:78:cf:c1:64:a1:38:
         16:c5:34:a2:13:69:64:d2:0f:76:b3:47:21:61:69:26:5e:72:
         e3:da:58:6f:53:d5:34:a6:d0:b2:08:50:e1:d3:b9:78:aa:bd:
         96:f1:f6:a5:a5:1b:c5:ad:42:2c:b0:43:a5:19:ba:2f:cf:4e:
         20:51:54:30:1b:e6:07:87:3c:52:13:45:44:b8:5a:b1:65:8a:
         60:b1:52:15:6e:45:74:e5:7c:7e:e1:e4:26:fd:41:2a:39:34:
         d4:c4:76:b9:f5:cb:49:24:78:37:f8:19:6b:ab:91:40:44:55:
         7d:98:05:27:7d:b2:5d:42:99:ae:f1:22:7b:d8:a9:77:4a:49:
         d6:e7:72:e4:9b:99:20:ee:18:cf:d9:ae:3f:de:b7:6f:86:b6:
         48:62:55:b9:aa:f0:87:18:47:ff:ea:1e:b7:7a:79:fd:44:01:
         90:69:9e:e4:01:06:1a:6e:04:41:a5:b6:59:47:84:d3:5c:af:
         7c:6d:f4:a4:75:88:1e:1f:4d:b2:ce:a7:2e:3c:74:02:8d:30:
         a6:cd:f9:a9:f8:27:13:e5:e6:ea:cb:b7:d8:93:ab:14:0a:80:
         82:d2:92:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:50 2024 by rpki-client on console-fra.rpki-client.org