Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bf08c8-5057-4831-93f7-ae02e91af8d9/1/sbrVky-mlLD6TN5bjTlj0PHZ3Lw.roa
File:                     sbrVky-mlLD6TN5bjTlj0PHZ3Lw.roa (raw, json)
Hash identifier:          XWgDAw1g0onjkETRQsUWNdaIosw0u4uezsxitcGqzQk=
Subject key identifier:   B1:BA:D5:93:2F:A6:94:B0:FA:4C:DE:5B:8D:39:63:D0:F1:D9:DC:BC
Certificate issuer:       /CN=f74799f7f1848d13b0ff25f455f7f3776ae5e09e
Certificate serial:       01856FB1131CEB61BBEAE5D54701A8F90FF3
Authority key identifier: F7:47:99:F7:F1:84:8D:13:B0:FF:25:F4:55:F7:F3:77:6A:E5:E0:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/90eZ9_GEjROw_yX0Vffzd2rl4J4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/bf08c8-5057-4831-93f7-ae02e91af8d9/1/sbrVky-mlLD6TN5bjTlj0PHZ3Lw.roa
Signing time:             Sun 01 Jan 2023 23:35:53 +0000
ROA not before:           Sun 01 Jan 2023 23:35:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     42209
IP address blocks:        185.216.51.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:b1:13:1c:eb:61:bb:ea:e5:d5:47:01:a8:f9:0f:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f74799f7f1848d13b0ff25f455f7f3776ae5e09e
        Validity
            Not Before: Jan  1 23:35:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b1bad5932fa694b0fa4cde5b8d3963d0f1d9dcbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1e:93:14:14:57:f8:b2:2f:cb:77:33:ca:30:
                    18:11:12:81:81:d0:a0:7f:49:26:11:72:34:5a:b5:
                    06:4d:d5:33:fd:91:83:85:9c:d4:e4:68:08:74:bc:
                    80:63:70:29:35:c2:11:a7:e6:52:a6:82:f8:f2:0c:
                    43:c1:bb:a0:e9:b3:01:75:fd:cf:69:52:96:ab:8d:
                    49:e3:52:fb:08:e8:2e:49:30:33:3b:a5:eb:c9:93:
                    7c:bc:e2:37:9b:c2:20:d9:41:77:7f:45:25:f4:da:
                    18:f6:93:d4:b5:5f:58:2a:59:cc:5b:53:eb:e3:f0:
                    bf:f8:3b:26:ef:3c:88:25:65:0a:50:95:48:0f:7f:
                    41:99:22:a3:79:17:3c:37:1a:7f:95:76:ec:a1:45:
                    2a:cf:59:13:77:87:b4:a0:bf:c8:43:7e:32:a0:ff:
                    22:1f:c7:ca:72:0f:ab:af:f5:67:07:89:0b:16:80:
                    27:21:78:ac:77:8d:ac:6c:41:07:d9:46:c0:2b:51:
                    d4:69:6a:eb:4a:af:18:ee:a0:4c:cc:48:3c:41:fc:
                    cc:da:e2:0b:a7:17:47:fd:ea:37:96:e7:85:01:0f:
                    17:5d:62:b2:9c:13:e6:04:2a:25:13:8c:6c:57:4c:
                    83:d3:71:f9:f1:7b:38:97:f2:e0:cd:65:99:d2:c1:
                    dc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BA:D5:93:2F:A6:94:B0:FA:4C:DE:5B:8D:39:63:D0:F1:D9:DC:BC
            X509v3 Authority Key Identifier:
                keyid:F7:47:99:F7:F1:84:8D:13:B0:FF:25:F4:55:F7:F3:77:6A:E5:E0:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90eZ9_GEjROw_yX0Vffzd2rl4J4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bf08c8-5057-4831-93f7-ae02e91af8d9/1/sbrVky-mlLD6TN5bjTlj0PHZ3Lw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bf08c8-5057-4831-93f7-ae02e91af8d9/1/90eZ9_GEjROw_yX0Vffzd2rl4J4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.216.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:65:f6:69:24:b0:d5:1e:2f:e2:3b:28:00:e1:07:2e:cc:bc:
         ee:5d:fb:46:87:71:f5:0f:f7:ea:05:e3:df:b6:df:b5:e4:32:
         aa:24:70:a6:82:a5:f6:1d:28:49:f9:dc:a2:a0:78:1e:ef:c5:
         cf:59:0c:91:c4:35:21:af:0f:24:b1:a1:d1:8e:5a:67:1c:95:
         de:07:31:c5:8a:40:66:a3:d3:20:e6:fd:35:16:96:c9:58:45:
         9e:9a:8a:52:e4:83:e2:89:5d:0a:c1:e5:5f:05:a4:74:a6:6e:
         0e:a5:17:a8:40:32:5d:43:0c:99:fe:67:34:80:b5:63:0b:82:
         f4:f8:06:2b:49:30:d5:25:c2:0f:58:0d:70:1d:f3:6b:f9:ae:
         e9:4e:60:7f:05:1d:31:3a:40:ad:d6:f3:55:61:02:7b:83:62:
         63:59:e5:84:77:3f:e2:14:e9:2b:93:d2:ab:0c:16:e3:3d:58:
         a9:07:7a:29:ae:84:3f:90:f6:98:20:79:a5:82:27:20:fd:1f:
         69:7b:36:e8:72:02:76:17:52:e1:ee:34:3a:9e:bc:c8:79:42:
         19:53:ad:c2:5a:6d:e3:a0:b2:80:12:94:64:b5:1b:12:d5:ba:
         32:c8:52:5b:b4:62:76:1b:f8:5b:96:e3:20:08:c3:55:42:aa:
         d5:f3:08:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:19 2024 by rpki-client on console-ams.rpki-client.org