Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/LPMGF5WA9GFUVzH5Z93os6WEPwg.roa
File:                     LPMGF5WA9GFUVzH5Z93os6WEPwg.roa (raw, json)
Hash identifier:          4wFsCb3WP58YAt9dz9EJjxctei/ImYa06kkB1Vi2qY4=
Subject key identifier:   2C:F3:06:17:95:80:F4:61:54:57:31:F9:67:DD:E8:B3:A5:84:3F:08
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       01856FF98744458F62E97239FCA443F8753A
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/LPMGF5WA9GFUVzH5Z93os6WEPwg.roa
Signing time:             Mon 02 Jan 2023 00:55:02 +0000
ROA not before:           Mon 02 Jan 2023 00:55:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201406
IP address blocks:        92.247.112.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:f9:87:44:45:8f:62:e9:72:39:fc:a4:43:f8:75:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: Jan  2 00:55:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2cf306179580f461545731f967dde8b3a5843f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:67:a5:9e:a7:62:01:e8:3b:fc:35:4e:4c:33:
                    0a:1c:d1:6a:d9:d3:ec:9a:2b:0c:3f:9f:c6:99:a9:
                    8c:92:32:b5:bc:16:98:56:2e:e9:5d:a5:23:58:79:
                    db:f6:bd:0d:19:57:65:59:eb:ed:8f:ce:a3:9f:cb:
                    e1:82:db:69:fe:ac:1c:21:31:de:b1:64:7a:bb:08:
                    4b:98:5d:01:77:18:44:22:9e:8f:9f:aa:d5:a4:77:
                    7c:6d:e7:6a:9d:bf:31:55:f6:3e:3e:41:ef:a3:bd:
                    b8:9c:7f:20:66:c1:92:29:14:8f:2c:27:87:49:e0:
                    c0:3b:db:f4:58:af:4e:24:62:b0:f3:8b:cc:eb:98:
                    18:46:1d:9a:92:a6:45:9d:15:72:df:fd:0a:be:ac:
                    f6:7d:94:5d:f0:6c:2f:4f:b4:ae:f6:31:b0:3b:e9:
                    25:ce:4f:aa:e4:b3:7a:4a:b3:ce:1c:bc:c4:b1:89:
                    0d:26:82:6a:a1:4e:ba:5d:a8:3d:46:75:46:00:27:
                    2e:33:82:01:de:0e:ba:26:e3:03:67:70:be:a6:6c:
                    c7:cb:e3:79:9f:cd:55:14:d9:9d:51:71:6f:ba:11:
                    9e:dc:4f:de:47:82:fe:90:f7:a2:4a:cf:7d:29:93:
                    f8:bf:07:76:15:88:41:11:fc:c9:1d:0e:f3:d4:1f:
                    c3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F3:06:17:95:80:F4:61:54:57:31:F9:67:DD:E8:B3:A5:84:3F:08
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/LPMGF5WA9GFUVzH5Z93os6WEPwg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.247.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:98:3e:1d:66:f4:a9:76:d9:9e:14:cf:6b:a7:12:7e:c9:a8:
         85:f4:b6:dd:92:e7:22:00:f5:36:c0:a5:3b:fd:81:10:e4:ad:
         3f:6b:db:de:27:43:9f:8f:99:cf:ad:de:b9:c5:25:bd:c2:6f:
         26:92:1d:0a:97:4f:cc:09:94:4f:ca:e9:02:be:82:cd:cf:16:
         68:eb:4a:12:a8:db:43:a3:be:dc:53:72:c8:5c:38:ca:11:44:
         5a:b6:bb:75:36:6e:82:b3:d5:e7:93:16:4f:e2:44:7f:35:6a:
         9c:55:34:ee:b9:fa:b3:e0:bd:d7:dc:ef:1b:43:c7:1a:90:34:
         ec:af:b2:22:2a:45:1b:03:cd:26:8b:ca:de:6a:1a:56:10:63:
         af:64:52:fd:73:04:bd:dd:3d:29:33:d3:d3:68:91:38:7c:c3:
         5b:2c:00:77:04:f8:82:2c:12:84:af:6f:25:8b:6d:04:00:d5:
         00:07:6a:96:0d:63:32:07:02:60:bd:0e:e2:0e:5b:5b:51:84:
         13:b7:be:51:87:0c:f0:f5:dd:18:ac:4a:73:16:cb:59:ce:ee:
         a5:6c:e1:cf:4f:46:97:e7:4e:6a:41:3b:fd:a3:2a:83:6a:0a:
         2a:8c:34:a0:68:70:4d:1c:4a:e1:e5:bd:a3:4e:10:58:50:6e:
         54:0c:65:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:44 2024 by rpki-client on console-ams.rpki-client.org