Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/7QvxZ4GWhKLZ5bfSGdKFa8IBoyM.roa
File:                     7QvxZ4GWhKLZ5bfSGdKFa8IBoyM.roa (raw, json)
Hash identifier:          vszKHQx+IQ+Gfu4dqljuVCWQIlj2M8j0NzmfI4uQkM0=
Subject key identifier:   ED:0B:F1:67:81:96:84:A2:D9:E5:B7:D2:19:D2:85:6B:C2:01:A3:23
Certificate issuer:       /CN=30c409613fea0a2b442ce112e9cbdb485e01188f
Certificate serial:       01856DEF6B00B22005CE6984141370C4F414
Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/7QvxZ4GWhKLZ5bfSGdKFa8IBoyM.roa
Signing time:             Sun 01 Jan 2023 15:24:45 +0000
ROA not before:           Sun 01 Jan 2023 15:24:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     41092
IP address blocks:        148.81.127.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:ef:6b:00:b2:20:05:ce:69:84:14:13:70:c4:f4:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f
        Validity
            Not Before: Jan  1 15:24:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ed0bf167819684a2d9e5b7d219d2856bc201a323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b9:a7:92:18:26:8a:05:02:0b:28:78:cc:ed:
                    c8:37:39:22:ac:8f:49:57:02:4b:ee:6d:3e:3e:c0:
                    6c:49:d1:f4:d7:c1:ae:5c:1c:ae:26:b5:2e:cd:da:
                    46:fa:34:9e:8b:50:6e:02:22:1e:1e:f0:c7:e4:a3:
                    79:10:9b:b0:2d:76:0d:8c:ea:04:07:af:73:3a:43:
                    60:dc:6b:41:ea:6c:36:61:3b:85:27:05:c1:3c:2a:
                    7d:57:09:0a:c0:89:52:2a:a7:3b:8d:d3:57:83:e3:
                    6f:18:ab:0e:f7:87:33:e7:f1:4a:64:ab:d9:31:bb:
                    58:89:e0:de:9f:c4:a5:7e:ca:f1:cb:1e:00:c5:1b:
                    36:1d:59:0c:38:38:46:ba:bf:a1:49:46:c5:5f:98:
                    18:5d:61:a6:19:ce:a2:b5:48:57:48:f8:82:f3:9a:
                    79:22:fa:fa:83:45:4d:6b:84:14:85:1d:aa:4a:95:
                    8e:a6:64:a3:bd:ad:cc:d0:d8:f5:14:f9:09:5e:23:
                    6f:22:cf:15:83:4a:1c:71:5f:b4:ba:38:cf:b2:1c:
                    03:ae:88:55:a7:b3:90:67:a5:a5:84:af:42:69:15:
                    55:d2:10:66:13:9b:e8:67:65:a5:c1:0c:08:f6:05:
                    b5:ad:4d:13:d3:39:94:75:8a:12:77:d3:d6:ca:68:
                    60:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0B:F1:67:81:96:84:A2:D9:E5:B7:D2:19:D2:85:6B:C2:01:A3:23
            X509v3 Authority Key Identifier:
                keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/7QvxZ4GWhKLZ5bfSGdKFa8IBoyM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.81.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:e0:cf:31:85:85:24:62:29:04:85:b8:89:09:15:6c:a5:73:
         ad:15:0d:5e:c2:b7:8d:b8:89:06:96:fa:e6:30:61:d5:1b:83:
         4f:a4:a3:72:fd:cf:73:35:c8:74:70:7b:5e:d6:8b:71:d0:2e:
         7a:73:2b:11:9f:02:5b:c6:24:9a:f8:e8:91:d3:1d:be:05:df:
         3e:5f:ae:8f:56:87:a7:eb:50:50:56:db:75:91:8c:2e:d3:91:
         10:28:a8:55:fe:44:e1:0f:2f:41:aa:00:a5:db:56:c0:1f:0b:
         09:f8:3f:1b:d4:c1:18:f7:cf:9d:d2:a4:eb:28:59:dd:5d:21:
         2f:05:ad:21:16:df:e4:ee:90:26:39:49:8b:87:bf:c7:18:fd:
         0f:f5:59:53:89:d7:d2:a2:17:cd:86:0d:73:a9:12:db:b7:61:
         4d:6e:ca:b4:e8:92:dd:03:2d:58:23:fd:a7:85:c8:c5:18:fc:
         a8:39:99:f3:3d:80:6e:3e:3c:6a:ee:b7:3f:d1:28:ab:7f:91:
         9b:54:f1:74:25:2f:ca:e2:ce:2b:44:20:05:58:db:fc:59:fd:
         11:3a:ec:b3:85:6c:4d:90:e4:ba:05:fb:69:86:31:fc:9a:a3:
         f6:ae:01:ea:88:35:e4:7d:9d:fe:c3:ba:ed:6d:f9:fa:12:08:
         86:fc:44:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:21 2024 by rpki-client on console-ams.rpki-client.org