Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/5ELFlJwtvdw1uAgg4BcW_exK5I4.roa
File:                     5ELFlJwtvdw1uAgg4BcW_exK5I4.roa (raw, json)
Hash identifier:          sBq6kOH/3P4ozkD1uqBtecriCBnIxGnh6fnLoMBPQmk=
Subject key identifier:   E4:42:C5:94:9C:2D:BD:DC:35:B8:08:20:E0:17:16:FD:EC:4A:E4:8E
Certificate issuer:       /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial:       0188D83703F7F842F8ED29C0F030AF859576
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/5ELFlJwtvdw1uAgg4BcW_exK5I4.roa
Signing time:             Tue 20 Jun 2023 09:51:04 +0000
ROA not before:           Tue 20 Jun 2023 09:51:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     52053
IP address blocks:        193.38.250.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:d8:37:03:f7:f8:42:f8:ed:29:c0:f0:30:af:85:95:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
        Validity
            Not Before: Jun 20 09:51:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e442c5949c2dbddc35b80820e01716fdec4ae48e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8e:4b:90:a8:48:35:d3:79:07:86:43:0b:d2:
                    f2:66:60:b4:f9:24:3e:18:ba:4a:0b:6d:14:bd:e3:
                    2d:bb:df:b6:90:a0:fc:98:2b:05:ea:31:30:8b:3e:
                    4e:93:a3:04:c9:09:b6:83:c7:6c:c9:a4:f4:62:12:
                    4d:8a:8d:d2:64:f2:e1:03:6d:8f:ea:9b:5b:9f:f9:
                    fe:8c:c8:ef:73:80:83:27:ce:da:92:b2:c8:8b:b5:
                    5e:29:70:59:50:3f:01:21:53:38:b2:c8:03:1b:73:
                    16:67:5d:7e:34:9d:c8:6c:e4:29:e3:54:da:06:83:
                    de:dd:8e:18:fa:12:10:e4:df:96:e6:d0:49:c1:03:
                    d3:15:e4:35:b2:2f:ac:5f:27:41:58:ef:5f:e3:5b:
                    86:e7:1e:4d:fb:84:09:fc:fa:5a:51:60:ea:97:dc:
                    13:3c:b2:b5:56:a7:1a:b0:3b:9c:ab:ff:16:3b:04:
                    af:ea:d9:5d:2e:09:39:2f:73:9e:81:8d:d9:ea:3b:
                    08:b5:68:bd:72:ac:2e:10:8b:12:f8:19:58:fa:d7:
                    4c:6e:1d:44:fc:a4:90:35:07:16:4d:13:99:84:f0:
                    86:39:4b:ec:18:53:cf:b2:91:42:54:d4:40:13:14:
                    7b:8c:58:5d:60:eb:4d:6b:c3:c5:df:c2:b4:08:7e:
                    81:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:42:C5:94:9C:2D:BD:DC:35:B8:08:20:E0:17:16:FD:EC:4A:E4:8E
            X509v3 Authority Key Identifier:
                keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/5ELFlJwtvdw1uAgg4BcW_exK5I4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.38.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:c9:f8:ee:cd:d7:10:dc:fa:30:72:70:c2:ed:91:10:9d:14:
         7d:c3:ec:6e:61:c1:7c:83:a6:9a:72:57:d7:25:07:75:e8:b5:
         85:da:f0:0a:e8:55:13:4c:80:ab:69:e0:8c:9c:f7:b7:be:38:
         38:ea:ba:19:49:b3:3d:b4:67:b1:b2:40:95:79:ab:27:a5:56:
         83:16:68:f4:b0:92:08:4f:78:70:a2:92:16:6b:4e:41:e8:be:
         ce:9e:6e:70:ca:87:a3:01:b7:21:bf:e1:56:5b:84:10:38:2b:
         f8:ab:b3:10:3d:74:b6:6f:d7:56:da:2a:22:4d:b4:98:25:b0:
         e6:83:9f:48:d7:cf:34:6f:de:c6:a6:2b:98:7e:c4:9c:22:ff:
         1a:fc:a9:ca:63:85:9c:36:0e:ea:7c:82:70:0f:10:c1:15:a9:
         fb:75:eb:04:c6:2f:46:2a:89:39:ca:1f:9e:7e:93:08:3e:79:
         dc:c2:a7:45:80:57:94:ef:55:45:27:9a:f0:83:d2:23:d3:d6:
         f4:8c:97:40:41:1d:ce:5a:dd:a9:41:38:be:d8:9f:0a:1f:d7:
         df:3d:76:80:17:93:2f:18:71:9b:25:b5:d0:5a:25:31:2d:9b:
         a8:91:63:4d:c6:04:b2:5e:f1:2b:64:2d:28:5c:d4:b6:3a:6b:
         1c:9e:9d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 22 20:31:13 2023 by rpki-client on console-fra.rpki-client.org