Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/kdXaA4Qb8RkzDqrTYACJ0vlENdY.roa
File:                     kdXaA4Qb8RkzDqrTYACJ0vlENdY.roa (raw, json)
Hash identifier:          pcqETnZcEufjEHSYZHtlRTUBA6bitPGsJlAXjt01Ecs=
Subject key identifier:   91:D5:DA:03:84:1B:F1:19:33:0E:AA:D3:60:00:89:D2:F9:44:35:D6
Certificate issuer:       /CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
Certificate serial:       01856E142CAA627060BFC19D8E7BC558137C
Authority key identifier: 79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/kdXaA4Qb8RkzDqrTYACJ0vlENdY.roa
Signing time:             Sun 01 Jan 2023 16:04:53 +0000
ROA not before:           Sun 01 Jan 2023 16:04:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     0
IP address blocks:        194.42.48.0/24 maxlen: 32
                          2001:7f8:c::/48 maxlen: 128

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:14:2c:aa:62:70:60:bf:c1:9d:8e:7b:c5:58:13:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=790d1ca78761310ac39a714ff62f3b92b2e77d8a
        Validity
            Not Before: Jan  1 16:04:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=91d5da03841bf119330eaad3600089d2f94435d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:03:22:6e:66:b8:c1:65:37:9e:78:0a:46:05:
                    b4:b2:14:37:a1:0b:1d:5b:0a:65:ef:a3:45:fe:28:
                    da:20:05:f7:4e:da:2b:cd:8a:f8:c8:41:a1:2c:15:
                    0e:5d:cd:86:9a:98:5b:07:96:f4:4f:c9:af:e6:17:
                    64:eb:1e:07:5b:1b:7c:2c:34:f9:c9:f0:d8:8d:ae:
                    44:13:e9:ba:05:7f:62:50:17:03:73:62:ca:aa:78:
                    99:55:bd:47:03:e2:5f:20:52:a0:d2:95:7b:5f:06:
                    ec:fa:e8:37:35:a2:02:07:b7:16:ed:b0:ff:b8:11:
                    57:36:f1:88:9c:dc:f6:a7:2e:c9:90:5c:16:6b:a8:
                    69:ca:9d:1e:62:76:ed:6a:c7:f5:51:1d:e5:17:ea:
                    bf:cb:0d:2e:08:4d:20:be:4d:6d:ff:82:a6:a8:f6:
                    e7:f8:4d:02:2e:e3:be:2d:91:c4:f6:b7:d7:ad:35:
                    5f:a0:ad:5a:82:55:38:d4:d3:f0:ad:33:bf:47:6d:
                    55:4c:4e:a0:31:a6:fa:a4:2d:95:ac:85:ee:5a:2d:
                    7f:fe:6c:a1:82:e3:93:90:ce:66:d0:ef:05:39:8b:
                    f5:a6:f5:31:96:66:2c:67:86:e0:3e:23:1e:1e:15:
                    e9:e3:73:c2:40:22:a5:72:f7:4c:af:ed:5f:38:64:
                    3c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D5:DA:03:84:1B:F1:19:33:0E:AA:D3:60:00:89:D2:F9:44:35:D6
            X509v3 Authority Key Identifier:
                keyid:79:0D:1C:A7:87:61:31:0A:C3:9A:71:4F:F6:2F:3B:92:B2:E7:7D:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ0cp4dhMQrDmnFP9i87krLnfYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/kdXaA4Qb8RkzDqrTYACJ0vlENdY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/a3ccce-c0d6-49a8-bbb8-b8ae16b35c31/1/eQ0cp4dhMQrDmnFP9i87krLnfYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.42.48.0/24
                IPv6:
                  2001:7f8:c::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:8f:4a:3d:a5:90:b4:2d:0b:5b:d7:e9:f4:8f:b8:6f:3c:1f:
         03:40:56:a8:a9:40:be:6e:b2:4c:0f:8d:be:17:fa:f0:fe:29:
         8d:8e:71:4f:d2:9b:23:0b:7c:1a:ab:db:24:00:90:66:06:56:
         81:40:3c:57:c5:40:63:c5:41:05:17:9f:06:a9:db:04:8d:8f:
         2c:bb:96:d9:5c:f0:25:e6:64:32:ac:99:b4:7a:15:83:10:47:
         76:6a:8e:8d:bc:ec:c4:93:ab:8e:61:8c:32:47:94:5d:53:c2:
         30:98:3a:e0:79:d5:84:d6:3d:bc:52:06:d1:c1:3a:33:ab:c2:
         95:d8:9c:6c:d6:ac:09:35:17:7b:74:d2:93:f5:eb:61:c6:54:
         e9:9c:c2:a8:15:d1:4e:59:64:a6:16:08:b8:c7:f0:05:df:45:
         d1:03:66:71:fd:a8:30:5d:12:b1:d0:d7:0a:ee:e6:2d:03:6c:
         f2:23:0a:3f:62:b1:6c:c1:de:05:a6:20:1e:91:4c:3c:08:ed:
         da:f9:be:e9:7d:3f:d8:c6:8b:5a:bd:59:a6:ae:02:3e:96:48:
         1d:4c:20:8e:0f:4f:c7:80:a7:e6:b2:e0:05:c6:a4:4e:bd:a6:
         2e:95:d9:5e:61:c2:4c:b9:cf:ae:65:7a:d0:d4:4e:32:27:7f:
         a9:98:e5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:39:59 2024 by rpki-client on console-ams.rpki-client.org