Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS207817.roa
File:                     AS207817.roa (raw, json)
Hash identifier:          0vfH5UN6WZFwFECX7mhyDfFtJpOMWWMxB5vUhT39xAc=
Subject key identifier:   C4:36:95:DB:A5:65:B8:99:B3:85:C9:70:57:7C:46:FD:01:A2:D0:32
Certificate issuer:       /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial:       71152673B2B5D44A2A4C1EBD7648722889E3AF06
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS207817.roa
Signing time:             Sat 15 Apr 2023 21:02:16 +0000
ROA not before:           Sat 15 Apr 2023 20:57:16 +0000
ROA not after:            Sat 13 Apr 2024 21:02:16 +0000
asID:                     207817
IP address blocks:        45.155.17.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:15:26:73:b2:b5:d4:4a:2a:4c:1e:bd:76:48:72:28:89:e3:af:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
        Validity
            Not Before: Apr 15 20:57:16 2023 GMT
            Not After : Apr 13 21:02:16 2024 GMT
        Subject: CN=C43695DBA565B899B385C970577C46FD01A2D032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:91:2c:6a:c3:6f:59:f8:71:3b:08:f0:3f:e9:
                    78:aa:e1:2e:c9:90:27:23:c1:6e:e7:69:63:6a:4b:
                    ba:f8:91:91:c9:77:df:37:76:11:bb:2b:3b:1d:9a:
                    22:50:23:6b:ee:08:dc:3a:2e:fc:3d:50:e7:e0:0a:
                    77:1c:d6:86:f2:e1:1d:b2:53:0a:bf:15:11:83:c0:
                    57:fe:3f:b8:27:1f:a2:e1:34:ac:40:a7:44:40:be:
                    da:d0:66:f9:9e:c1:b3:a4:87:8a:6f:23:98:96:84:
                    19:74:d0:62:36:74:80:6a:50:65:b8:c3:5d:b6:1d:
                    40:02:1c:3b:df:80:e3:64:9f:f4:d7:eb:19:b4:6f:
                    47:de:6c:b0:3f:09:da:71:30:ab:a1:1e:d7:de:fe:
                    9d:7e:92:3d:5d:f4:35:c4:c7:d9:a4:36:39:f3:89:
                    c8:2e:20:9a:3f:a8:7c:c2:4e:47:33:7b:a9:11:02:
                    4f:9e:86:f1:aa:21:25:97:a3:d5:f8:e4:ac:f2:d2:
                    d5:67:3a:91:5d:90:c2:71:43:95:e4:0c:1c:86:69:
                    0d:f9:6c:c9:15:a5:7e:50:70:93:58:85:37:76:93:
                    8d:de:9b:cb:15:c3:24:da:22:16:a3:a4:88:9b:59:
                    e7:cf:19:45:24:3b:18:40:46:66:6f:0e:e4:38:2b:
                    52:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:36:95:DB:A5:65:B8:99:B3:85:C9:70:57:7C:46:FD:01:A2:D0:32
            X509v3 Authority Key Identifier:
                keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS207817.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.155.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:d4:bc:32:cd:f1:8c:b3:25:68:74:54:6f:70:09:1b:73:95:
         33:9a:e4:13:1c:98:63:c7:bf:ee:f2:71:c0:63:06:eb:ff:11:
         a4:30:e7:e7:27:90:5e:4c:e3:3d:18:73:9e:91:ce:33:4f:c7:
         0d:c2:82:4e:e9:31:a0:58:c9:3d:d6:c9:cd:4f:96:6b:a3:b8:
         be:b1:74:89:6e:ca:92:24:bb:b6:da:22:a9:02:4d:a4:4b:42:
         4a:ca:45:cc:82:6f:59:79:bb:48:21:47:35:2d:82:17:fe:28:
         04:83:dc:5a:d6:fe:21:28:8a:4f:ce:36:ed:59:c6:a3:51:1e:
         3e:2d:85:50:9f:b9:20:55:af:3c:5c:4a:01:82:57:3f:86:05:
         b6:15:1a:f4:b5:19:be:c1:3a:a2:04:6b:77:78:fc:e0:3c:c1:
         91:12:92:1e:1f:43:f4:9f:d7:45:ef:1f:57:20:36:1a:24:d7:
         ba:61:dd:63:73:88:4d:90:4d:4b:f9:db:3d:ba:f4:04:1a:96:
         53:4a:42:82:ec:f8:ae:65:07:c6:ef:4b:42:18:33:2c:d7:92:
         17:94:6e:fe:91:97:c4:e0:26:67:a6:fe:84:8d:37:b7:a7:92:
         ee:57:ac:8f:c3:32:5e:7e:8a:59:ad:76:db:d3:f8:45:b9:d2:
         f3:c1:ab:c5
-----BEGIN CERTIFICATE-----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Generated at Thu Nov 16 10:49:32 2023 by rpki-client on console-ams.rpki-client.org