Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211975.roa
File:                     AS211975.roa (raw, json)
Hash identifier:          KsTazStaCbqmpy/B1qXaAmna9IcbbcBiPdu07lqUwKQ=
Subject key identifier:   12:4D:97:E5:78:41:FE:49:1C:44:84:AF:CD:7C:F2:E4:01:64:E0:76
Certificate issuer:       /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial:       4676B953A736CDA9D03804112B9E0F8FB9033EFB
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211975.roa
Signing time:             Tue 10 Jan 2023 14:07:16 +0000
ROA not before:           Tue 10 Jan 2023 14:02:16 +0000
ROA not after:            Tue 09 Jan 2024 14:07:16 +0000
asID:                     211975
IP address blocks:        45.149.185.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:76:b9:53:a7:36:cd:a9:d0:38:04:11:2b:9e:0f:8f:b9:03:3e:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
        Validity
            Not Before: Jan 10 14:02:16 2023 GMT
            Not After : Jan  9 14:07:16 2024 GMT
        Subject: CN=124D97E57841FE491C4484AFCD7CF2E40164E076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8c:9f:ff:4c:86:15:0f:6c:59:04:86:88:8a:
                    25:81:b5:79:3b:dc:31:d5:74:e5:8b:bc:e7:5e:99:
                    d6:10:c3:24:dd:97:f4:c3:53:d8:89:2f:31:ca:3d:
                    51:8c:8c:ab:81:6b:11:48:65:8b:4f:b1:ca:ca:c2:
                    a7:36:bd:86:45:9a:89:dc:11:90:6d:59:8f:e9:49:
                    4b:90:7f:4d:96:d4:06:71:df:e8:32:03:cf:b5:2a:
                    f6:43:4f:94:b8:ec:d8:e3:22:cc:76:1d:5e:8b:89:
                    a5:ae:fa:70:ec:ad:3c:34:6b:9a:95:69:c3:9b:e9:
                    99:b9:1a:8b:d2:62:74:dd:b5:53:9c:e4:ab:2d:1e:
                    2a:fe:39:e6:d6:c1:51:d3:a7:7b:02:3d:c4:e3:14:
                    33:43:48:da:0e:8d:17:06:dd:d4:42:b9:90:c8:62:
                    b7:25:41:60:4b:e3:f8:38:76:1d:4e:2a:b5:14:8a:
                    b6:b3:70:e7:d8:c2:f9:77:0e:a2:ea:57:19:33:30:
                    aa:a4:c4:c4:ba:50:d6:c3:ae:c2:01:ff:62:34:55:
                    37:80:f3:0a:28:65:e9:35:d3:c5:53:53:3c:d9:6e:
                    19:81:31:47:9e:bb:06:bf:3b:b1:55:11:7b:c0:52:
                    6f:d3:cf:b3:d3:23:5a:84:4e:2b:f4:1d:91:09:4c:
                    ae:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4D:97:E5:78:41:FE:49:1C:44:84:AF:CD:7C:F2:E4:01:64:E0:76
            X509v3 Authority Key Identifier:
                keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS211975.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.149.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:c3:03:23:f2:be:b4:51:fc:9b:ad:85:7a:85:e7:64:26:ed:
         d7:cf:ae:c2:bd:54:93:a8:c3:af:4e:62:c4:8b:60:7f:6b:0c:
         75:e2:1b:42:a0:23:b2:02:87:2d:13:f1:73:04:32:50:ed:be:
         b9:03:27:27:c4:a5:51:bd:b4:a9:2c:39:2b:18:6e:ac:78:21:
         99:1b:0b:cc:7e:52:b2:f0:33:b1:f8:45:8f:61:b3:64:7e:8b:
         b4:f1:14:04:d0:84:c7:60:14:c3:d6:41:26:0e:c4:97:50:a7:
         44:25:e2:05:04:58:c8:1d:e9:e5:25:c7:e8:a7:8c:bf:2b:2f:
         27:a5:6f:4e:09:54:49:54:7a:14:7b:c7:f1:30:f9:ec:5e:91:
         65:b1:6d:12:04:97:17:7d:aa:98:ac:5b:91:85:c2:ba:98:2e:
         f5:f9:bc:88:e5:5e:94:11:13:97:e5:b0:53:35:8b:a0:ae:be:
         22:54:eb:5c:48:0f:7b:db:87:35:00:f7:30:0f:7f:cc:d0:f3:
         65:18:65:ce:97:e2:d5:15:e0:03:42:7f:49:94:02:8f:61:06:
         53:50:71:66:dd:b9:07:3a:91:3e:f2:b1:65:a4:4d:00:ae:c0:
         f5:bd:97:ef:55:b1:92:20:d7:fa:38:37:6f:f9:6e:8d:2b:a1:
         a5:59:ad:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:58 2023 by rpki-client on console-fra.rpki-client.org