Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS61440.roa
File:                     AS61440.roa (raw, json)
Hash identifier:          lBBFmsj0Z180YSyKh0ojX4cIzw5OMIQk/r0tv0dVavE=
Subject key identifier:   90:75:35:25:20:16:5E:A8:42:97:29:75:CD:B7:AF:AC:4E:DE:63:70
Certificate issuer:       /CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
Certificate serial:       12D98991130920AFE1A33C666E296A4CED95ECEE
Authority key identifier: 61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS61440.roa
Signing time:             Wed 17 May 2023 09:53:07 +0000
ROA not before:           Wed 17 May 2023 09:48:07 +0000
ROA not after:            Wed 15 May 2024 09:53:07 +0000
asID:                     61440
IP address blocks:        181.214.128.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:d9:89:91:13:09:20:af:e1:a3:3c:66:6e:29:6a:4c:ed:95:ec:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b1bb4447718f16b3d36675d205c4dea41bba0a
        Validity
            Not Before: May 17 09:48:07 2023 GMT
            Not After : May 15 09:53:07 2024 GMT
        Subject: CN=9075352520165EA842972975CDB7AFAC4EDE6370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:79:e1:48:6b:5f:2e:2d:b8:4f:48:89:3a:e7:
                    dc:43:b0:4d:87:24:56:3a:fe:ef:1a:59:0e:fd:00:
                    d3:23:b3:5f:0f:76:58:16:61:a1:af:15:67:41:06:
                    2d:87:68:3a:3c:0d:88:b9:67:32:8d:fb:53:7c:15:
                    21:55:f2:c6:f1:63:f7:0d:72:c8:8b:75:79:f9:a1:
                    8b:a3:d5:4e:60:4d:54:dd:3f:47:c7:8c:94:11:87:
                    41:9a:c1:fd:21:39:31:1c:d6:0e:61:45:68:0b:ab:
                    dc:f0:ed:c6:af:53:58:19:19:07:ec:e4:38:36:ea:
                    db:c2:04:a0:93:d2:04:ba:61:27:e0:8c:08:3f:4e:
                    45:1f:5f:8d:3f:0a:fb:fb:84:9e:51:ee:3f:b0:7a:
                    9f:a7:cc:2b:d0:3e:a0:68:a0:f8:8b:93:cb:c3:a3:
                    4e:d2:ab:b1:e7:19:89:d5:34:78:52:dd:03:11:ba:
                    04:91:61:c2:07:92:89:58:12:30:e2:b5:48:7a:5f:
                    63:f5:88:85:de:42:45:7d:79:e1:31:47:a6:b7:59:
                    4d:c8:0d:1f:03:46:db:ae:c6:84:df:87:58:4f:ce:
                    78:5d:bc:07:11:f8:9b:e5:7f:31:f1:18:0c:ef:d3:
                    d2:84:52:86:f8:05:cd:64:b3:cf:a1:0f:3b:c8:7e:
                    51:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:75:35:25:20:16:5E:A8:42:97:29:75:CD:B7:AF:AC:4E:DE:63:70
            X509v3 Authority Key Identifier:
                keyid:61:B1:BB:44:47:71:8F:16:B3:D3:66:75:D2:05:C4:DE:A4:1B:BA:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/61B1BB4447718F16B3D36675D205C4DEA41BBA0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbG7REdxjxaz02Z10gXE3qQbugo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/537459e7-2a83-43d1-9aa1-58417abac4b6/1/AS61440.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.214.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:77:c1:38:1a:cf:78:22:c2:f1:2e:bc:00:f2:8e:56:4b:86:
         71:cd:0d:b6:24:88:39:4d:5a:65:78:a6:9e:91:0a:ca:dd:b3:
         c8:7f:9b:a1:10:a9:57:1e:f3:a9:a7:71:ad:92:de:a9:21:12:
         f0:80:22:61:eb:7b:a0:4d:e2:55:41:47:c1:72:a8:c7:a6:d6:
         4a:60:44:b2:06:db:0e:66:93:34:ca:2f:49:b5:2b:b5:b7:b7:
         30:78:e0:b3:7f:a1:82:7b:1f:68:92:11:49:c8:24:d0:ff:e5:
         98:33:5d:79:e6:6e:bc:cd:c3:21:11:f0:40:dd:cf:be:c2:aa:
         6d:cc:31:88:4d:4c:63:a6:7d:d8:98:22:15:7c:9f:92:e9:f4:
         34:a5:29:d0:9f:b4:be:c0:74:d1:23:d1:dd:08:57:a4:9f:b2:
         5d:06:31:03:eb:ae:b0:a8:f8:9b:ed:7d:67:27:03:0e:95:bb:
         c3:aa:33:58:9a:9b:53:e0:da:d5:9f:e2:8c:c0:d6:4d:9e:de:
         38:4b:73:72:8a:4d:73:9b:9f:bb:ce:68:cd:6f:65:3e:eb:a1:
         de:fe:43:62:d3:dc:6f:a5:f7:72:75:fc:37:14:7a:7c:1c:4d:
         c5:d1:da:32:4b:b2:08:60:95:7b:79:cf:fd:57:6c:fe:05:08:
         f8:7f:06:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:12:47 2023 by rpki-client on console-ams.rpki-client.org