Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/rEPdQHUxfLwoyaz99Vz9KESZ6Gs.roa
File:                     rEPdQHUxfLwoyaz99Vz9KESZ6Gs.roa (raw, json)
Hash identifier:          KodOeoeo81/am3zyVCqVXINTeDjBg0i5RGi19J00ZFs=
Subject key identifier:   AC:43:DD:40:75:31:7C:BC:28:C9:AC:FD:F5:5C:FD:28:44:99:E8:6B
Certificate issuer:       /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial:       018A904008925D5C6F7867EDA0D26C77D82F
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/rEPdQHUxfLwoyaz99Vz9KESZ6Gs.roa
Signing time:             Wed 13 Sep 2023 20:33:50 +0000
ROA not before:           Wed 13 Sep 2023 20:33:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62387
IP address blocks:        45.156.44.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:90:40:08:92:5d:5c:6f:78:67:ed:a0:d2:6c:77:d8:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
        Validity
            Not Before: Sep 13 20:33:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ac43dd4075317cbc28c9acfdf55cfd284499e86b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:93:69:1e:24:99:5e:aa:b5:d5:5f:e3:8f:06:
                    ac:cb:db:bd:45:e6:d6:d5:f2:d2:8e:39:5b:f7:90:
                    ce:94:eb:a6:42:cc:7d:95:4b:e4:9f:31:e4:da:fc:
                    e5:a0:8c:68:c4:ff:12:41:39:d5:a4:ea:76:18:0b:
                    ad:be:40:8d:09:74:e9:6a:23:98:ac:04:b7:6b:89:
                    66:b5:54:4a:68:0d:6c:82:9e:04:49:66:b8:48:8b:
                    5c:84:4c:64:19:10:fb:9b:c9:3e:1e:b0:fd:93:74:
                    a0:43:39:88:a7:58:52:97:84:7e:fc:4b:b3:62:32:
                    31:47:04:ac:0f:1e:4d:57:f1:88:47:6a:bf:26:09:
                    36:c2:6f:0c:43:fc:d3:92:c7:98:61:3e:43:1b:88:
                    47:3a:3f:f0:51:00:43:d6:e1:32:57:3a:9e:f9:9b:
                    88:6d:6e:28:0f:28:24:c3:fb:14:1c:65:ea:c3:c3:
                    b8:50:b9:f1:d4:15:ee:93:f2:7f:18:e2:a7:00:2e:
                    aa:28:b9:5a:d4:90:cc:21:ba:72:d9:39:e6:57:ba:
                    62:c1:0c:5f:a5:2a:0b:0d:9c:de:e8:e2:a7:d8:73:
                    74:7f:c9:c7:40:38:b7:f0:30:4c:b5:d8:a9:e1:05:
                    82:20:5f:da:0c:04:b8:1a:7e:20:49:98:bd:a1:9b:
                    36:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:43:DD:40:75:31:7C:BC:28:C9:AC:FD:F5:5C:FD:28:44:99:E8:6B
            X509v3 Authority Key Identifier:
                keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/rEPdQHUxfLwoyaz99Vz9KESZ6Gs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.156.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:28:7a:12:08:cf:ed:b5:d7:52:f3:79:e9:5d:2c:72:12:49:
         3d:97:1f:51:a3:90:7c:3b:68:42:c5:2a:12:2c:aa:ea:a3:d4:
         b5:ea:03:8a:5c:cc:dd:6a:9c:90:19:ce:f7:d6:01:3f:da:2e:
         1f:12:a0:5c:24:d4:ea:2a:da:17:96:01:ba:8e:6d:f9:cb:0e:
         2e:b8:87:9a:e0:76:f2:53:d2:0e:ba:05:d2:60:2f:08:00:65:
         2f:4e:9b:55:56:6a:77:74:65:35:60:82:0c:5c:71:99:cc:5c:
         11:ef:d2:21:d1:ff:9e:25:ab:32:d6:85:64:ca:c7:82:86:1b:
         09:8b:3c:f3:29:1d:f9:d9:39:21:cd:d0:8e:e3:ca:08:eb:0a:
         5b:c3:8c:a2:51:ad:35:ee:ec:42:b3:ba:ee:b9:9b:13:79:18:
         c1:b2:95:18:f2:5d:bd:40:fd:79:dc:a2:ee:41:92:ea:bc:b0:
         7f:49:fd:5f:46:67:9c:8f:31:d7:5c:03:a9:37:34:01:99:a5:
         09:84:15:f6:5d:16:cd:7f:9c:1e:62:26:f5:12:5c:4d:73:6f:
         d7:5c:37:48:18:70:9c:d0:13:29:63:86:e7:12:96:d5:e5:85:
         1d:62:06:4a:e8:ea:37:81:9c:36:38:d0:6a:c5:4c:e7:2c:91:
         12:a6:90:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqQQAiSXVxveGftoNJsd9gvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNTgwOGYzZjkyMWJjOGMzZWVhODdjNzU4NGM1ODRjMTAw
MGIwNTEwHhcNMjMwOTEzMjAzMzUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzQzZGQ0MDc1MzE3Y2JjMjhjOWFjZmRmNTVjZmQyODQ0OTllODZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5NpHiSZXqq11V/jjwasy9u9RebW
1fLSjjlb95DOlOumQsx9lUvknzHk2vzloIxoxP8SQTnVpOp2GAutvkCNCXTpaiOY
rAS3a4lmtVRKaA1sgp4ESWa4SItchExkGRD7m8k+HrD9k3SgQzmIp1hSl4R+/Euz
YjIxRwSsDx5NV/GIR2q/Jgk2wm8MQ/zTkseYYT5DG4hHOj/wUQBD1uEyVzqe+ZuI
bW4oDygkw/sUHGXqw8O4ULnx1BXuk/J/GOKnAC6qKLla1JDMIbpy2TnmV7piwQxf
pSoLDZze6OKn2HN0f8nHQDi38DBMtdip4QWCIF/aDAS4Gn4gSZi9oZs2KwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKxD3UB1MXy8KMms/fVc/ShEmehrMB8GA1UdIwQY
MBaAFOFYCPP5IbyMPuqHx1hMWEwQALBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAt
YWIxOWZjYjBjZTY0LzEvckVQZFFIVXhmTHdveWF6OTlWejlLRVNaNkdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAtYWIxOWZjYjBjZTY0
LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZwsMA0G
CSqGSIb3DQEBCwUAA4IBAQBdKHoSCM/ttddS83npXSxyEkk9lx9Ro5B8O2hCxSoS
LKrqo9S16gOKXMzdapyQGc731gE/2i4fEqBcJNTqKtoXlgG6jm35yw4uuIea4Hby
U9IOugXSYC8IAGUvTptVVmp3dGU1YIIMXHGZzFwR79Ih0f+eJasy1oVkyseChhsJ
izzzKR352TkhzdCO48oI6wpbw4yiUa017uxCs7ruuZsTeRjBspUY8l29QP153KLu
QZLqvLB/Sf1fRmecjzHXXAOpNzQBmaUJhBX2XRbNf5weYib1ElxNc2/XXDdIGHCc
0BMpY4bnEpbV5YUdYgZK6Oo3gZw2ONBqxUznLJESppDu
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:53:09 2024 by rpki-client on console-fra.rpki-client.org