Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/9fchIr0i-AspQdQC05o_R3RvCmg.roa
File:                     9fchIr0i-AspQdQC05o_R3RvCmg.roa (raw, json)
Hash identifier:          9U7SrKhkgwFDz7ZJDvbZdhj7YAc4fa+ueakhjWZVohM=
Subject key identifier:   F5:F7:21:22:BD:22:F8:0B:29:41:D4:02:D3:9A:3F:47:74:6F:0A:68
Certificate issuer:       /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial:       01883298CBF1CFF176269E8E3617FACFEB4D
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/9fchIr0i-AspQdQC05o_R3RvCmg.roa
Signing time:             Fri 19 May 2023 06:00:54 +0000
ROA not before:           Fri 19 May 2023 06:00:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     18811
IP address blocks:        81.31.244.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:32:98:cb:f1:cf:f1:76:26:9e:8e:36:17:fa:cf:eb:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
        Validity
            Not Before: May 19 06:00:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f5f72122bd22f80b2941d402d39a3f47746f0a68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:86:42:1c:6b:66:d2:a1:30:24:b3:18:c0:65:
                    23:bd:49:bb:80:3b:53:4f:bf:b9:a5:11:11:b9:0f:
                    db:83:78:80:47:e2:5e:5e:12:62:1c:b5:3d:f5:56:
                    cc:d7:bc:d4:f3:1e:b0:80:04:87:64:c9:bd:64:7f:
                    1e:c0:ba:04:0b:70:fa:28:05:4e:ee:50:cf:c1:35:
                    dc:28:8a:c2:0a:db:e5:64:46:b5:58:16:65:9e:57:
                    59:07:6a:1e:98:c4:fc:6b:bb:a0:31:60:05:1d:bd:
                    38:40:ff:b0:21:2d:6c:bf:e2:8a:9b:d5:06:f2:90:
                    79:4f:a0:01:12:dd:33:9f:0e:61:63:54:81:e7:62:
                    0b:5b:44:93:ea:9d:29:1d:79:f5:66:18:bd:52:6b:
                    ea:2f:2a:33:58:6f:02:82:07:4a:fa:6a:23:33:47:
                    85:ff:ec:0a:48:ba:76:c5:a2:eb:46:50:e8:aa:7e:
                    2b:d1:76:1b:43:b7:2a:e1:74:89:49:a4:c0:d8:ab:
                    11:20:a8:59:f8:13:2b:ad:07:c9:56:70:89:b4:b7:
                    09:47:ce:38:0a:86:d9:81:2e:d4:4a:31:02:51:a2:
                    09:47:9b:c4:87:6f:95:35:0e:1d:f3:7f:48:f3:ff:
                    8c:c9:ac:ca:29:fb:54:9b:3a:18:c9:07:54:a6:8b:
                    cd:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F7:21:22:BD:22:F8:0B:29:41:D4:02:D3:9A:3F:47:74:6F:0A:68
            X509v3 Authority Key Identifier:
                keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/9fchIr0i-AspQdQC05o_R3RvCmg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.31.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:72:b8:ee:a9:b4:8a:55:01:02:27:4d:de:8a:f5:8c:c3:db:
         df:7c:40:32:37:e0:ad:63:e9:e2:7b:30:b0:67:0f:bf:86:f8:
         88:8b:9d:e7:79:77:64:1d:4b:16:46:f9:46:e3:21:9b:cd:bd:
         02:53:c0:d2:06:d9:37:cd:ad:a7:a2:bc:85:48:e6:45:6f:3f:
         3b:c4:eb:ef:46:b3:5e:c4:3f:fb:8a:c4:73:0a:6f:ae:8b:c4:
         83:9b:fb:f4:07:a7:56:9b:33:ff:7e:9d:1e:77:97:99:50:af:
         83:db:8a:3a:e0:18:fa:97:25:fc:5c:bd:04:9b:f0:cd:c7:ce:
         fb:37:85:db:28:1b:cf:2d:ff:01:b2:ee:c7:22:10:ed:98:38:
         41:8f:cd:43:9d:ae:92:57:ac:7f:0e:4d:ca:4a:2a:fe:3b:c4:
         12:b0:7a:a3:84:15:d7:14:94:47:b2:96:23:da:8d:61:2b:b7:
         a3:24:9d:a6:9e:3c:37:29:4a:5a:82:7a:d8:c9:99:e7:cd:22:
         ad:f4:44:8b:f1:64:6a:1f:9a:7a:44:2d:8a:93:f4:8a:60:ef:
         2d:3a:de:47:3f:92:d3:85:f4:2f:79:8f:8b:5e:ef:6d:f7:a8:
         a6:ec:b7:6c:17:b1:56:0b:d1:7d:2a:06:47:e9:66:fc:ad:0e:
         64:9f:e0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:09 2023 by rpki-client on console-fra.rpki-client.org