Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/6NMou7gIvTcwmBFxKTjKcQb2AEg.roa
File:                     6NMou7gIvTcwmBFxKTjKcQb2AEg.roa (raw, json)
Hash identifier:          RLLIyYGGxeklNgdV4wtIj08U+aMsf9hLUMljF7cIWzM=
Subject key identifier:   E8:D3:28:BB:B8:08:BD:37:30:98:11:71:29:38:CA:71:06:F6:00:48
Certificate issuer:       /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial:       0185A5EFAB34846E78992A6CC4E12A6BA4ED
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/6NMou7gIvTcwmBFxKTjKcQb2AEg.roa
Signing time:             Thu 12 Jan 2023 12:23:45 +0000
ROA not before:           Thu 12 Jan 2023 12:23:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57844
IP address blocks:        45.83.136.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:a5:ef:ab:34:84:6e:78:99:2a:6c:c4:e1:2a:6b:a4:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
        Validity
            Not Before: Jan 12 12:23:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e8d328bbb808bd37309811712938ca7106f60048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:63:48:08:20:96:fd:d6:f1:e0:90:fa:f6:38:
                    99:7e:52:77:cd:5e:ad:b6:51:60:22:5a:f3:c1:33:
                    17:95:07:4a:c1:3d:6b:d4:c8:02:6d:f1:1a:30:37:
                    20:54:3f:3f:77:26:bd:e3:27:9d:f8:ab:db:9a:d9:
                    84:17:b5:3d:79:f2:9c:ff:0f:7c:fb:df:e2:21:56:
                    08:b8:75:a5:2a:3c:b2:12:28:6a:11:1a:ce:97:cf:
                    0d:69:58:54:2d:01:bb:18:0f:dd:2c:b1:f9:58:08:
                    6e:b9:a9:f1:a8:8c:a2:f2:22:d9:30:53:71:e5:cf:
                    d7:0d:ef:01:b2:d9:f6:ae:13:20:34:cb:d0:3a:57:
                    10:75:e7:1d:02:7c:3a:63:09:eb:c0:eb:c7:99:4d:
                    ed:92:d9:be:af:1d:cc:ce:9c:1c:b0:cf:4d:52:4d:
                    ff:f7:2f:d7:fc:ad:d3:05:02:ec:2c:25:95:28:83:
                    32:d4:3e:87:51:4e:7c:c7:82:60:41:7e:2f:c4:0c:
                    de:07:17:0b:07:c5:d4:5b:22:83:53:2c:29:09:73:
                    96:c3:9f:e1:d7:bb:10:66:d7:34:8c:0f:16:fb:37:
                    51:97:07:a0:14:e6:26:b9:58:18:7b:41:0f:f1:82:
                    67:72:93:e9:a6:7c:a7:a2:f9:62:cb:8c:54:83:97:
                    67:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D3:28:BB:B8:08:BD:37:30:98:11:71:29:38:CA:71:06:F6:00:48
            X509v3 Authority Key Identifier:
                keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/6NMou7gIvTcwmBFxKTjKcQb2AEg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.83.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c4:40:1e:45:de:fc:37:05:21:b4:d5:1c:c7:92:d8:bf:80:22:
         58:91:01:39:29:63:16:15:2c:cd:b6:a7:03:df:3e:28:2b:ac:
         f2:ff:e0:2f:ef:e8:dd:6f:98:8d:7d:85:43:e4:07:a5:f3:64:
         32:de:72:7e:68:0c:53:4a:d7:c0:3a:48:9b:a9:76:5a:72:49:
         9e:74:1b:3f:e3:02:95:ca:00:88:59:92:02:d2:45:d9:e8:71:
         88:28:15:23:b3:d5:84:0f:a6:11:b1:b9:84:5e:85:6d:46:4a:
         da:76:be:49:8e:50:07:5c:03:ac:6d:6c:cc:62:84:e5:2e:9f:
         0a:92:71:da:58:e4:09:fc:26:53:6a:3d:a9:88:cc:1d:f7:80:
         8b:21:27:eb:80:86:03:ae:23:dc:ac:89:3a:34:ac:7b:55:99:
         1a:88:ce:c7:27:e9:62:95:5b:62:a8:94:73:da:22:11:78:2a:
         97:d1:5d:32:83:cc:34:7a:d1:36:04:ba:75:4f:ed:8a:af:f4:
         99:c9:c1:42:1d:2f:c1:64:21:04:54:af:bd:33:7a:a7:b0:88:
         00:5b:1b:d4:4b:be:3f:77:52:f4:f0:73:61:7f:a1:4b:3c:9e:
         65:af:ee:04:bc:0a:7a:7f:4e:f7:ca:57:de:22:ce:53:41:e1:
         f2:83:51:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:33:27 2024 by rpki-client on console-ams.rpki-client.org