Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/RnyD_RPDYFPPNEVy4T4opFdcMxg.roa
File:                     RnyD_RPDYFPPNEVy4T4opFdcMxg.roa (raw, json)
Hash identifier:          D78E/4N5JKV+pkq3EUj4wo4wrWA3k3Wq96oAsk+8UrE=
Subject key identifier:   46:7C:83:FD:13:C3:60:53:CF:34:45:72:E1:3E:28:A4:57:5C:33:18
Certificate issuer:       /CN=edb926f8c603aab79cb46a883bf632564a3faabf
Certificate serial:       018672FF92F696331DE76D05DE64A5518FC1
Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/RnyD_RPDYFPPNEVy4T4opFdcMxg.roa
Signing time:             Tue 21 Feb 2023 08:03:17 +0000
ROA not before:           Tue 21 Feb 2023 08:03:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     396998
IP address blocks:        185.62.206.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:72:ff:92:f6:96:33:1d:e7:6d:05:de:64:a5:51:8f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf
        Validity
            Not Before: Feb 21 08:03:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=467c83fd13c36053cf344572e13e28a4575c3318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:be:d4:52:09:4f:3f:8f:b5:9e:0e:07:9e:05:
                    f0:2c:de:ba:9d:56:46:54:61:ef:3c:5c:25:33:2c:
                    6e:11:07:d6:b2:cb:96:11:ce:dc:02:b4:64:9c:07:
                    ee:b4:64:3c:ff:16:6c:a5:7c:f3:d4:a8:86:01:10:
                    70:ff:f9:d7:03:4f:1b:1c:7a:22:64:3d:db:63:8a:
                    de:33:ce:5f:f9:85:ea:c2:c5:68:ee:ba:46:a3:d4:
                    29:c4:64:03:c9:76:6d:3f:5b:f0:de:56:91:29:ca:
                    ca:e2:05:e1:ac:f1:c3:19:a6:3c:30:f2:1c:5a:05:
                    05:1c:ec:b0:1a:e3:58:b6:78:e4:2f:2e:5f:15:bd:
                    14:7a:c3:35:56:e5:59:66:22:89:06:9d:b2:d0:aa:
                    5d:00:a4:e3:a7:7d:79:16:ad:d6:91:32:96:12:fe:
                    d6:e3:c3:83:c0:b3:aa:4b:1a:d0:ec:9b:e5:7c:fc:
                    95:2d:c5:53:11:6c:0f:c9:74:1b:c5:5f:34:f2:e4:
                    6f:f3:f9:0a:12:78:b9:d6:af:4c:34:41:3e:83:a8:
                    b3:a5:7d:c2:07:d4:36:fd:c4:06:3f:27:ef:a5:4e:
                    32:c8:fe:54:0e:87:00:39:5e:2d:97:43:9e:10:1c:
                    c6:e1:47:45:8e:61:7c:89:66:24:c5:49:71:ee:84:
                    45:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:7C:83:FD:13:C3:60:53:CF:34:45:72:E1:3E:28:A4:57:5C:33:18
            X509v3 Authority Key Identifier:
                keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/RnyD_RPDYFPPNEVy4T4opFdcMxg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.62.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:ef:3f:a5:c6:1f:12:24:61:92:87:5e:05:7c:34:e9:af:62:
         f0:d2:c0:6f:5e:1a:fc:32:d8:01:5b:5f:8e:91:ac:80:ea:e0:
         d9:60:3a:93:52:f0:e0:98:cb:41:8d:44:42:56:e2:d7:94:39:
         69:f3:65:3c:54:bd:cc:88:d4:d8:9a:05:9f:d7:54:58:4d:fd:
         25:cf:1a:51:49:4a:ef:d5:52:ef:51:3c:92:eb:10:56:85:9b:
         8f:04:f9:c1:0d:10:c3:e9:7f:e5:1d:52:c8:af:e9:e6:ed:9f:
         4c:76:2e:85:5d:f7:7d:63:f6:00:d4:9e:81:ab:a4:80:1c:e6:
         f6:f0:bc:e7:41:f5:71:0a:54:98:b4:83:da:0b:3d:21:20:97:
         81:05:54:a2:52:20:27:d4:3a:df:fd:74:77:4c:7a:2d:09:9a:
         87:be:b0:50:5b:fd:1e:e6:92:58:bb:e0:22:ae:19:f0:66:29:
         e1:b8:09:d5:fd:85:e1:55:43:44:a1:9d:a4:40:99:a2:1d:d6:
         a0:ab:a5:26:1c:65:72:45:ac:25:08:21:27:3d:05:ab:97:a9:
         57:3c:2a:3c:1b:de:8b:b7:33:43:ca:9d:a1:f2:fd:de:d1:93:
         fa:5f:a4:6c:79:46:4f:b8:59:34:d9:0d:40:ed:f0:7d:00:c7:
         c3:32:3c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:52 2023 by rpki-client on console-fra.rpki-client.org