Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/O5bCdsfJ3gFNC9VLHLBJT08lBTE.roa
File:                     O5bCdsfJ3gFNC9VLHLBJT08lBTE.roa (raw, json)
Hash identifier:          WBj4/3C7c4eX8zV8CL5ykhS/TAFcM/LdwESJFXqrcrs=
Subject key identifier:   3B:96:C2:76:C7:C9:DE:01:4D:0B:D5:4B:1C:B0:49:4F:4F:25:05:31
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       0186E171F837A24C3B03723258670DAE76FA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/O5bCdsfJ3gFNC9VLHLBJT08lBTE.roa
Signing time:             Tue 14 Mar 2023 18:46:28 +0000
ROA not before:           Tue 14 Mar 2023 18:46:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48011
IP address blocks:        81.161.236.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:e1:71:f8:37:a2:4c:3b:03:72:32:58:67:0d:ae:76:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Mar 14 18:46:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3b96c276c7c9de014d0bd54b1cb0494f4f250531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:fb:1f:b2:21:92:cd:05:1f:64:19:22:cc:67:
                    ee:c7:27:40:1d:cd:57:5a:2b:7d:7f:58:95:a6:63:
                    70:1a:bc:30:cd:97:18:b6:8e:2b:c4:af:03:c5:09:
                    43:d0:d3:ac:04:a7:c3:2f:34:88:69:81:a9:29:24:
                    0a:35:25:63:b1:7d:2b:5c:f9:4e:d2:5d:1a:82:0c:
                    e6:cb:32:28:46:57:75:83:50:b5:d7:62:b6:98:df:
                    cc:0d:5c:42:58:56:a3:b0:95:0d:84:58:18:92:12:
                    84:2f:7b:fe:75:29:fb:da:21:67:a5:fa:0d:e8:47:
                    57:7b:e8:ac:fa:2f:99:67:08:0a:bc:4b:c5:a3:3c:
                    14:ff:86:6a:60:15:fd:65:90:f9:45:a7:00:0b:86:
                    60:73:8d:7e:2b:1b:1b:c7:2c:5b:40:d6:be:73:79:
                    9b:5a:bf:f4:fa:7a:ea:5a:fa:d1:00:c8:1e:bd:94:
                    9e:e8:68:1f:8f:75:87:31:39:f0:68:6b:90:c1:0e:
                    d4:09:16:fc:09:ee:86:1b:40:2a:af:e4:5d:76:a8:
                    05:f6:8f:06:46:b2:77:e8:3b:d5:4c:0a:04:d6:96:
                    b0:28:5e:bf:3c:ce:bc:5c:78:2a:4d:76:99:5d:ba:
                    ba:05:22:9e:81:49:a0:96:c7:33:3a:39:e1:2c:36:
                    dc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:96:C2:76:C7:C9:DE:01:4D:0B:D5:4B:1C:B0:49:4F:4F:25:05:31
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/O5bCdsfJ3gFNC9VLHLBJT08lBTE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.161.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:28:97:ac:b9:85:dd:57:84:72:05:d8:1a:26:00:c3:2d:f8:
         ec:9b:cf:c6:65:33:d5:1b:8e:20:d4:0f:e2:1c:5d:3d:f1:54:
         de:2f:63:39:93:57:4c:95:96:f6:37:7e:2e:52:ed:23:5e:c8:
         d8:2f:7c:06:d9:11:32:61:04:b0:d8:33:b0:d1:59:55:04:a5:
         a3:b3:71:db:65:2d:c7:44:c7:6b:12:20:08:e6:54:a5:f5:16:
         c9:5c:5d:56:e7:1d:1c:42:d1:e6:2c:bc:8f:d8:aa:e1:5f:04:
         f4:a6:27:f4:67:08:63:ac:67:ac:c5:0d:08:c5:a2:61:ca:e3:
         4f:24:df:d9:26:b4:c4:fe:31:13:76:55:11:68:0e:bd:ba:15:
         be:40:09:22:dd:9b:72:82:54:a9:23:60:e7:1e:ea:44:f9:67:
         ea:78:09:25:74:83:bb:4b:5e:61:23:84:ba:04:53:5b:bf:8d:
         11:c6:19:b8:32:07:8a:31:b5:1d:95:42:86:92:0c:c2:dd:59:
         8e:62:80:38:c8:c3:dc:fc:44:34:a0:c6:88:85:af:63:f1:51:
         dc:2a:62:c3:6b:7d:27:66:d8:72:3e:34:05:fb:fd:fe:5a:83:
         ea:ea:18:7a:9a:fb:b5:58:b5:1e:a2:1e:86:66:65:8b:c5:39:
         cb:74:6e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-ams.rpki-client.org