Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5jyuUuuZwFtlrP-uXe73IydCf58.roa
File:                     5jyuUuuZwFtlrP-uXe73IydCf58.roa (raw, json)
Hash identifier:          0m8t5SgemrKJwNx9kh64uSN3EB82ecBvMPMrqjj5lWU=
Subject key identifier:   E6:3C:AE:52:EB:99:C0:5B:65:AC:FF:AE:5D:EE:F7:23:27:42:7F:9F
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       0185CEC909140EE25C4FD3121FA6CB694C2A
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5jyuUuuZwFtlrP-uXe73IydCf58.roa
Signing time:             Fri 20 Jan 2023 10:45:59 +0000
ROA not before:           Fri 20 Jan 2023 10:45:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62068
IP address blocks:        163.5.188.0/24 maxlen: 24
                          163.5.170.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:ce:c9:09:14:0e:e2:5c:4f:d3:12:1f:a6:cb:69:4c:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Jan 20 10:45:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e63cae52eb99c05b65acffae5deef72327427f9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4f:27:84:c6:df:42:88:08:d4:4e:f5:dd:53:
                    98:10:6e:c3:67:cb:cf:86:2b:98:fa:1c:3d:ff:6e:
                    5e:4c:a4:b1:48:6b:bb:f2:7e:c1:a1:69:b7:0f:c5:
                    7b:f3:ad:d7:08:60:f1:4d:c9:84:2c:2e:19:a7:13:
                    b4:08:66:6e:fd:ad:6d:d8:d9:57:96:bf:18:80:3b:
                    92:85:34:f2:92:15:96:84:99:4f:b9:14:4e:4c:06:
                    fb:db:73:3b:a6:d7:e5:93:a3:36:d2:ec:98:79:8c:
                    bc:94:c6:52:ea:e0:8a:45:dc:9c:e9:e7:9f:86:e4:
                    ae:7e:84:70:4d:a4:9e:d9:e4:c9:1c:1b:25:a2:d2:
                    6c:d6:96:c0:af:6f:cd:f3:d9:ee:bb:59:e8:f0:f1:
                    bf:c3:1b:86:2e:ca:cd:83:fb:17:53:06:71:b6:ed:
                    14:5a:52:8a:53:22:91:1e:79:ad:15:9f:98:25:17:
                    57:cc:bc:9e:77:f8:f5:20:19:ee:1c:7c:e1:c8:3d:
                    5c:fd:c8:e6:87:aa:0a:a5:a5:ed:6c:40:74:1b:bf:
                    1b:4e:80:97:2f:c5:a5:8e:2c:46:6e:82:1e:fd:e1:
                    6e:3c:87:68:58:6b:65:ca:35:ae:1a:97:9b:db:2c:
                    5c:0f:9b:46:c9:3c:fb:13:c7:e0:67:77:62:fe:65:
                    93:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:3C:AE:52:EB:99:C0:5B:65:AC:FF:AE:5D:EE:F7:23:27:42:7F:9F
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/5jyuUuuZwFtlrP-uXe73IydCf58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.170.0/24
                  163.5.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:b0:16:92:29:22:a0:37:6b:df:35:6d:75:ab:a4:fb:8a:41:
         0e:8f:9b:86:8d:4b:ec:a4:d4:05:79:92:b6:d6:60:67:fb:65:
         a4:34:f9:05:25:a2:9c:a8:23:68:e5:b3:d5:c6:de:bc:27:d8:
         d8:95:19:f4:05:d3:25:19:cf:75:22:9d:81:a7:d6:5c:e3:a7:
         b0:39:51:be:9d:92:55:fb:7d:d8:e2:95:72:9a:f8:e4:f7:72:
         f2:04:41:f4:09:99:c6:77:88:31:72:72:57:ef:69:d9:df:ff:
         89:0f:24:8a:c9:28:b4:c3:46:87:b2:d8:33:f1:da:09:42:56:
         ad:28:a5:2e:b8:51:1e:14:d4:bf:85:07:1b:1f:35:71:99:27:
         5e:3c:3d:f9:c2:0b:b5:ab:8e:7b:ea:e6:36:ed:0f:73:65:8b:
         8e:43:fd:7e:78:41:26:94:9d:76:e3:bf:fe:93:7f:69:30:d9:
         4f:0e:c9:83:03:f0:18:1b:66:b1:1b:4c:ea:75:ef:1a:d7:63:
         d9:b8:18:9f:60:03:de:16:1f:7d:45:ad:96:04:22:6c:36:6b:
         28:2b:c0:35:19:da:35:31:e7:17:58:3f:81:26:2b:46:b5:97:
         76:df:c9:e6:08:30:4c:b0:45:44:9e:0b:86:85:d2:d2:af:80:
         c1:c2:d7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:19 2023 by rpki-client on console-fra.rpki-client.org