Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/18Jpe2uAvoWIlFAKMkdqK6hXK7Y.roa
File:                     18Jpe2uAvoWIlFAKMkdqK6hXK7Y.roa (raw, json)
Hash identifier:          mDuzj9j3qcu5kvDaGHp5GbDCE4l+qi3Rd+IdRGE7xlw=
Subject key identifier:   D7:C2:69:7B:6B:80:BE:85:88:94:50:0A:32:47:6A:2B:A8:57:2B:B6
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       018890E03910B15D0D32CA9E151BF9A19037
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/18Jpe2uAvoWIlFAKMkdqK6hXK7Y.roa
Signing time:             Tue 06 Jun 2023 13:23:13 +0000
ROA not before:           Tue 06 Jun 2023 13:23:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61138
IP address blocks:        163.5.66.0/24 maxlen: 24
                          163.5.84.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:90:e0:39:10:b1:5d:0d:32:ca:9e:15:1b:f9:a1:90:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Jun  6 13:23:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d7c2697b6b80be858894500a32476a2ba8572bb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8d:17:18:8e:b6:00:6d:b7:dd:b2:e9:9d:0d:
                    33:16:78:9d:b9:ad:ce:39:b4:89:a3:1a:76:0c:bb:
                    5a:33:b9:ef:d5:c5:6c:75:03:14:26:b5:ca:5d:37:
                    56:e0:f6:de:9e:0a:65:75:fd:bc:21:b6:8c:43:04:
                    87:03:9d:31:7a:03:42:b3:48:dd:62:fa:da:00:e1:
                    2e:c5:d3:33:d3:7a:c9:66:06:db:b7:c3:6b:3b:6e:
                    6b:b9:21:ec:fc:24:97:bf:e2:c1:75:23:83:e6:6b:
                    91:8e:47:40:69:b3:b6:2e:6d:92:ff:02:1a:9c:8a:
                    47:69:4a:b1:d4:b6:20:c8:17:38:a5:53:29:2b:34:
                    32:88:ad:b6:de:37:96:3e:c3:38:29:5a:67:03:2c:
                    fb:49:f6:2d:ae:59:a6:eb:21:56:83:8e:f1:a1:c7:
                    c0:b9:20:b1:ff:69:ea:2c:79:37:03:c0:f4:a1:ab:
                    e4:0c:f7:89:32:d0:71:73:9d:31:71:66:0f:02:1a:
                    d6:52:6b:6a:82:dd:68:95:e0:4e:18:83:46:52:57:
                    8a:2c:d0:02:89:85:3a:80:62:23:51:7d:d6:c3:79:
                    09:1b:21:83:6e:e6:d9:fc:2a:b0:da:3e:1d:72:a8:
                    92:0e:e4:d9:80:e4:6d:dc:17:6e:3e:4d:b4:29:66:
                    cb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C2:69:7B:6B:80:BE:85:88:94:50:0A:32:47:6A:2B:A8:57:2B:B6
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/18Jpe2uAvoWIlFAKMkdqK6hXK7Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.66.0/24
                  163.5.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:6a:dd:9a:77:65:9d:1a:f2:b5:14:b5:bb:c0:fd:78:99:04:
         b9:15:fb:be:3d:78:19:35:82:ad:2d:8b:46:80:05:eb:f0:e6:
         7c:50:cd:45:92:3f:f8:b8:8f:b5:3b:a7:9e:7c:d1:13:d6:02:
         a0:50:f5:63:4c:46:d4:ad:55:cb:c7:6c:f7:cd:be:9e:4d:b5:
         0b:b1:61:99:87:b0:62:a2:6d:1c:a1:58:02:99:63:1c:0d:48:
         73:86:b3:8b:13:b2:a4:16:ae:04:7a:18:d4:84:5f:59:81:df:
         26:61:fc:c5:34:16:56:4f:3a:e7:6c:80:5d:46:21:9e:82:78:
         62:ec:09:27:90:3a:96:a9:73:a4:26:15:ce:ef:a9:1e:38:98:
         a7:2e:96:3a:5b:4e:d8:68:91:0d:e4:3b:e7:ea:79:9a:8a:19:
         54:70:d2:de:2a:c6:5c:46:e8:8b:19:a7:b0:07:ee:0c:cf:4b:
         fd:97:5e:c9:63:f3:83:58:1b:37:81:f6:20:3c:09:fd:51:76:
         fd:99:9a:be:07:82:48:34:f2:4e:21:f5:4f:1b:91:63:fc:30:
         31:05:8e:a1:2b:e5:c9:65:9d:53:53:6d:85:da:67:a3:ed:29:
         d9:2f:42:75:71:45:da:44:af:af:ab:98:78:5e:0d:01:d4:ce:
         ab:3a:5c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:19 2023 by rpki-client on console-fra.rpki-client.org