Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/enBxnYXnMRNIci8-zwABmlBWItk.roa
File:                     enBxnYXnMRNIci8-zwABmlBWItk.roa (raw, json)
Hash identifier:          uDg+bv6S+fHMLnAH4q3R6i0tE9Qa+fIfJuZFeNxGDAA=
Subject key identifier:   7A:70:71:9D:85:E7:31:13:48:72:2F:3E:CF:00:01:9A:50:56:22:D9
Certificate issuer:       /CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
Certificate serial:       0185DEFDE12A0DF456907FC1C6970A24B999
Authority key identifier: C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/enBxnYXnMRNIci8-zwABmlBWItk.roa
Signing time:             Mon 23 Jan 2023 14:17:38 +0000
ROA not before:           Mon 23 Jan 2023 14:17:38 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212865
IP address blocks:        185.82.103.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:de:fd:e1:2a:0d:f4:56:90:7f:c1:c6:97:0a:24:b9:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9fe703d3790cdb8514a603e7a45ee50eeffa962
        Validity
            Not Before: Jan 23 14:17:38 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7a70719d85e7311348722f3ecf00019a505622d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:38:01:40:3b:89:cc:cf:b4:85:18:59:60:e6:
                    64:95:c5:2f:3f:5e:9b:cb:b9:0e:17:c7:a4:6a:1e:
                    c7:00:3a:69:77:69:23:7a:7c:08:82:b4:40:19:6a:
                    14:bf:2d:25:6e:f8:a7:7f:66:96:90:dc:95:ff:5e:
                    b3:d6:85:14:e8:4f:d6:89:28:ba:2c:f5:cb:22:d6:
                    13:e8:6a:31:70:aa:c7:54:01:11:8c:2a:a4:3f:42:
                    62:b4:49:8e:b8:74:c2:6b:60:8d:92:44:6c:52:0e:
                    07:de:12:3f:42:cc:37:bb:72:98:01:48:50:a3:4a:
                    d1:43:16:db:af:e8:be:df:26:68:9b:40:9d:40:8a:
                    ee:85:90:70:65:1b:b8:56:d2:e0:dc:1e:9b:4e:85:
                    24:ce:39:bb:80:ff:47:07:54:a9:05:86:d6:01:4e:
                    c3:c3:93:07:94:0f:15:ce:72:2c:61:50:a0:1e:46:
                    af:87:d0:7e:31:31:cd:ba:2f:1a:9b:60:18:23:07:
                    ee:92:fa:de:1a:f2:90:f9:ae:35:91:09:84:a3:1a:
                    53:02:72:03:3e:cb:69:e2:62:9f:0e:3d:54:14:84:
                    27:48:2e:47:04:46:98:e7:78:5a:6b:7b:fc:1a:bf:
                    34:97:07:f5:52:c3:c5:6e:1a:68:95:2c:d8:16:3d:
                    db:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:70:71:9D:85:E7:31:13:48:72:2F:3E:CF:00:01:9A:50:56:22:D9
            X509v3 Authority Key Identifier:
                keyid:C9:FE:70:3D:37:90:CD:B8:51:4A:60:3E:7A:45:EE:50:EE:FF:A9:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yf5wPTeQzbhRSmA-ekXuUO7_qWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/enBxnYXnMRNIci8-zwABmlBWItk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/4c3d5a-a27f-4b9b-9d08-74c8da294d5c/1/yf5wPTeQzbhRSmA-ekXuUO7_qWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.82.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:29:50:dd:cd:3b:af:8e:42:b0:d2:a4:0f:01:68:0c:d3:aa:
         48:8b:9d:a2:e0:de:0c:fc:fb:e4:3f:52:ca:d8:b0:b3:c3:79:
         08:f3:7f:f7:73:28:ca:9c:3a:30:2c:83:72:e7:19:3c:d3:51:
         7e:a4:23:86:a5:f6:ba:58:5c:d4:1c:2a:77:8f:33:17:9b:19:
         55:62:2a:1f:a4:05:24:af:59:94:ca:28:c6:dd:d0:11:9a:e0:
         05:35:78:89:e5:3b:f9:3d:2e:ea:51:dc:55:f1:05:ad:15:6f:
         2e:a7:d7:2b:cf:24:19:fb:99:69:63:9c:45:a7:2a:06:95:3c:
         5b:2a:38:b4:b0:30:be:a5:8c:63:5f:72:53:3f:c1:b9:ed:8e:
         9d:15:86:dc:4b:29:5f:6d:2d:c3:4b:2e:b7:8f:ae:66:f1:eb:
         e5:a5:ed:9b:99:2f:04:25:ef:4b:1d:06:89:57:5c:27:52:72:
         77:8a:bc:83:b7:68:7b:67:19:66:85:ff:bb:31:f3:0c:0d:63:
         20:88:99:42:59:57:35:ae:08:0d:86:f2:23:9a:d9:8f:ca:21:
         69:e0:61:63:28:cb:e7:0d:28:2b:5b:ff:7e:10:3d:88:fe:0b:
         b1:4c:26:3e:d5:2e:7c:dc:df:06:44:f7:d3:63:1c:27:e9:2f:
         9a:86:a3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:50 2023 by rpki-client on console-fra.rpki-client.org