Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/v_26FDVCn9yKJhou3jH8T9KvqHs.roa
File:                     v_26FDVCn9yKJhou3jH8T9KvqHs.roa (raw, json)
Hash identifier:          mQgn+5fD+pkTqem6OE5GIStG98zpnArtW2EQdfX0HVc=
Subject key identifier:   BF:FD:BA:14:35:42:9F:DC:8A:26:1A:2E:DE:31:FC:4F:D2:AF:A8:7B
Certificate issuer:       /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial:       01856FF97298901A00DFCDB7A346314CAB41
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/v_26FDVCn9yKJhou3jH8T9KvqHs.roa
Signing time:             Mon 02 Jan 2023 00:54:56 +0000
ROA not before:           Mon 02 Jan 2023 00:54:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43943
IP address blocks:        92.247.110.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:f9:72:98:90:1a:00:df:cd:b7:a3:46:31:4c:ab:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
        Validity
            Not Before: Jan  2 00:54:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bffdba1435429fdc8a261a2ede31fc4fd2afa87b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:64:ce:7b:38:9b:aa:bc:4f:6c:4e:e6:2d:39:
                    71:e1:d6:82:f4:12:13:89:56:b3:02:f7:ee:ea:84:
                    e4:47:a6:a1:fd:15:3f:df:23:7f:eb:c8:1e:b2:8f:
                    76:bd:91:3c:de:93:7f:a1:09:fd:d7:57:82:2a:30:
                    56:bb:85:59:73:c5:85:43:78:6b:ed:a4:a9:cc:f3:
                    43:3c:ab:3d:53:9f:7e:e9:12:2d:60:fc:08:a6:9a:
                    01:24:f6:b7:aa:33:95:55:20:e9:64:62:09:52:dd:
                    83:c4:82:0e:31:e2:16:81:92:06:20:6f:82:ff:1a:
                    70:95:2e:35:bf:2c:17:4d:f1:57:3e:b0:4c:a6:f9:
                    26:65:2a:d6:18:49:69:3c:46:c6:30:92:a0:4c:c0:
                    b6:23:d3:84:0e:03:ec:e9:9f:90:43:95:c5:c7:d6:
                    0e:12:b3:d4:5f:63:ae:92:01:63:d5:53:65:4c:7a:
                    6b:04:26:7f:09:4c:dd:9e:c9:70:19:6e:21:86:32:
                    a7:ed:f4:47:14:9e:92:6f:d5:5e:ab:3f:87:28:45:
                    3e:2c:c6:24:78:b8:aa:2e:7a:96:3e:6f:e4:ff:99:
                    2e:89:a0:11:dd:76:3b:bb:32:0f:bb:64:74:3e:95:
                    a6:de:7f:58:c3:ef:a6:0c:c3:1d:66:19:9e:93:2a:
                    da:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:FD:BA:14:35:42:9F:DC:8A:26:1A:2E:DE:31:FC:4F:D2:AF:A8:7B
            X509v3 Authority Key Identifier:
                keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/v_26FDVCn9yKJhou3jH8T9KvqHs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.247.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:74:e8:17:5b:e4:c1:09:ac:7d:ae:eb:81:02:93:71:90:31:
         a5:b1:aa:90:64:8b:56:13:b1:98:4a:23:ad:a2:d7:11:c4:cf:
         f7:45:c7:5c:72:2a:c1:e6:2b:3d:b9:34:2e:c7:2b:31:59:aa:
         68:82:4a:7e:21:bd:73:5f:de:d1:7e:73:ee:2e:87:ca:6f:9a:
         55:dc:f4:c0:da:24:1d:3d:c1:1a:24:67:95:96:64:13:db:bd:
         c2:56:63:28:e3:88:ed:5b:e2:84:e6:e3:be:f7:55:02:01:2c:
         3a:96:dc:01:37:7a:f2:3f:eb:99:45:1a:78:4f:c0:fe:cc:49:
         e1:20:74:ed:ae:b7:55:22:92:6a:db:b6:5f:e7:3c:35:3c:ca:
         31:cf:8a:7b:fe:7d:4b:e4:35:a6:c9:f8:f0:f4:95:e0:83:f4:
         2a:b0:59:e2:a9:f4:bf:a5:e5:b8:4e:6c:d4:f4:4f:a7:f4:13:
         1a:c0:9d:46:9a:51:e0:81:4f:58:2d:5f:96:f7:b7:46:48:ad:
         24:e9:13:ff:33:e0:a8:8a:3a:3b:37:0e:1e:60:d6:71:82:9f:
         e0:c4:23:ee:8c:b8:ea:5a:c6:84:3c:e1:eb:c3:a8:08:7e:72:
         51:36:a8:b0:00:a5:a0:2f:c4:44:d4:bf:2f:ef:b7:53:6b:74:
         b2:dc:64:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:01 2024 by rpki-client on console-fra.rpki-client.org