Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/DzevJywKFVd_6lNp3qGb9h25Z9w.roa
File:                     DzevJywKFVd_6lNp3qGb9h25Z9w.roa (raw, json)
Hash identifier:          P+HyysOTvT4uQhV3CB+7BGMpSdIILdDPYm5KfLyKjgI=
Subject key identifier:   0F:37:AF:27:2C:0A:15:57:7F:EA:53:69:DE:A1:9B:F6:1D:B9:67:DC
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       01856FF98D244144857948487F46AAF17D20
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/DzevJywKFVd_6lNp3qGb9h25Z9w.roa
Signing time:             Mon 02 Jan 2023 00:55:03 +0000
ROA not before:           Mon 02 Jan 2023 00:55:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206410
IP address blocks:        78.83.164.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:f9:8d:24:41:44:85:79:48:48:7f:46:aa:f1:7d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: Jan  2 00:55:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0f37af272c0a15577fea5369dea19bf61db967dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d0:0b:c1:ff:05:9c:22:52:ba:a8:fe:20:c4:
                    2a:9b:b0:70:74:43:24:d7:9a:51:5b:13:c6:94:90:
                    c3:dc:bb:7a:9d:98:97:63:df:ea:9f:10:ee:a1:41:
                    4b:53:00:ce:5a:af:d2:48:34:81:e6:57:1b:90:16:
                    5c:a7:9c:a5:cf:c9:ab:fa:3e:51:0e:e6:54:36:98:
                    43:4c:21:08:d0:dd:c4:93:fd:4d:cc:e1:a2:b8:95:
                    bd:3e:e7:3c:d3:6b:ab:38:9f:66:77:c6:2d:20:bc:
                    5c:ba:65:3f:2a:ad:f6:fb:00:ea:fd:a3:39:5f:db:
                    d2:68:18:06:ba:83:88:01:9b:79:ff:20:c0:0e:86:
                    38:9b:83:11:25:ec:ed:be:5d:b5:f1:95:74:54:d8:
                    08:81:07:ec:69:f6:bc:d3:a4:f3:cb:df:e7:d8:54:
                    f5:3a:4a:1e:a8:a2:77:70:9e:1f:ad:ef:fe:e3:60:
                    4c:77:ac:b5:94:0b:eb:98:97:15:d8:81:53:3c:53:
                    57:59:33:8e:b5:1d:97:a9:bf:4f:0f:51:e0:cd:f2:
                    ac:a6:fd:5b:66:c1:a9:d9:8e:2b:70:78:09:a3:32:
                    38:6a:f4:82:dc:96:59:5c:60:d7:58:42:17:75:6f:
                    72:d6:30:53:4f:fc:9f:ec:13:28:cc:a2:f3:b7:c7:
                    ad:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:37:AF:27:2C:0A:15:57:7F:EA:53:69:DE:A1:9B:F6:1D:B9:67:DC
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/DzevJywKFVd_6lNp3qGb9h25Z9w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  78.83.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:5e:5c:d6:e3:07:0d:41:bc:7b:70:08:08:ef:89:ab:2d:34:
         20:62:cc:f8:ad:b7:76:9d:37:7d:27:dc:ba:2d:67:71:30:ee:
         66:54:3f:27:7b:20:00:eb:be:27:b9:f2:f7:fa:b8:29:d1:cb:
         47:c8:7d:42:33:ad:e2:6e:b9:37:7f:45:d7:4c:10:bd:c4:29:
         b3:6a:6f:4d:46:6b:f9:2a:39:90:a3:db:c3:48:86:97:54:d9:
         6d:2e:76:85:9e:0b:94:f5:8e:d8:bf:6e:39:72:e0:16:8e:84:
         ad:2e:8d:91:45:c5:20:f0:78:f7:c3:e5:aa:aa:68:a1:03:58:
         6a:63:67:a0:79:e9:f3:26:03:65:0a:cb:94:0b:d4:86:04:9b:
         a1:37:15:b3:e9:b8:30:95:8a:2b:e3:ee:64:32:f2:10:ac:65:
         05:28:da:30:cb:62:3d:89:df:9f:ee:d3:a9:15:b4:65:6b:fe:
         0c:e6:a8:27:e4:69:27:fc:13:25:6c:1e:f6:c3:5e:25:b7:9d:
         be:e2:e8:94:fc:bd:9d:38:8f:dc:b9:d0:54:10:b3:29:69:10:
         7f:98:f2:f9:fd:7e:54:85:cd:b9:b2:5d:01:de:13:a9:c1:75:
         d1:3c:80:10:02:23:06:c2:5d:f9:e7:f1:79:84:5b:b9:47:ee:
         12:65:dc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:00 2024 by rpki-client on console-fra.rpki-client.org