Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RLPZ9RrbsSZOJDzeRcl563bF8iE.roa
File:                     RLPZ9RrbsSZOJDzeRcl563bF8iE.roa (raw, json)
Hash identifier:          dCmSI7pB6tDxOyzfyjDAIcK6UaG0mPBN05u572k8drc=
Subject key identifier:   44:B3:D9:F5:1A:DB:B1:26:4E:24:3C:DE:45:C9:79:EB:76:C5:F2:21
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       0188F1710773B291C066775E2734518366A2
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RLPZ9RrbsSZOJDzeRcl563bF8iE.roa
Signing time:             Sun 25 Jun 2023 07:24:56 +0000
ROA not before:           Sun 25 Jun 2023 07:24:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211440
IP address blocks:        163.5.177.0/24 maxlen: 24
                          163.5.96.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:f1:71:07:73:b2:91:c0:66:77:5e:27:34:51:83:66:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Jun 25 07:24:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=44b3d9f51adbb1264e243cde45c979eb76c5f221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f5:ac:6f:f8:85:7b:26:cb:88:e3:e9:c9:64:
                    ae:86:30:be:87:f7:d4:d6:88:f2:da:6c:10:44:68:
                    77:6c:dc:6a:a7:35:6e:a8:86:a3:cf:24:f4:e7:6c:
                    da:fc:97:bb:10:d4:09:db:68:9e:aa:15:73:b6:f1:
                    ad:00:0b:b8:ba:f9:bc:ac:8d:46:0d:f5:48:8d:86:
                    ad:b2:16:33:af:af:0c:af:c1:fc:cd:21:04:e5:34:
                    0e:0f:20:c5:3f:cf:cc:97:98:8a:8d:d7:1a:24:be:
                    8c:b4:7e:6b:9e:a7:73:5b:51:d9:f5:8e:43:f8:f6:
                    4f:9d:05:c4:c5:03:38:08:d6:b6:8d:fd:16:dc:b2:
                    32:29:42:ce:10:9a:d1:25:50:c5:dc:f9:ae:9c:f8:
                    ac:dd:7b:e8:6c:43:36:96:a5:19:77:98:4e:5c:e8:
                    da:6f:68:3d:4d:0c:d9:ad:74:03:3a:fa:60:d1:12:
                    33:06:f4:bc:59:0b:eb:a3:20:7e:9b:66:18:c4:bd:
                    ae:d3:14:00:0e:2d:b3:06:57:77:c4:b8:f0:98:9c:
                    7c:48:7b:0f:1d:2e:63:ed:a0:15:17:fd:0a:98:34:
                    8f:55:72:98:f0:4e:64:48:68:cf:86:1b:29:d1:e2:
                    ab:dd:13:28:8c:7b:bb:68:11:7f:35:bd:71:a7:24:
                    f8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B3:D9:F5:1A:DB:B1:26:4E:24:3C:DE:45:C9:79:EB:76:C5:F2:21
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/RLPZ9RrbsSZOJDzeRcl563bF8iE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.96.0/24
                  163.5.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:8c:94:a4:a9:5a:1b:2a:06:b5:3f:8b:43:91:13:e2:af:31:
         9f:05:d6:da:b8:25:c3:5a:6d:c6:6d:87:d4:78:75:98:df:b8:
         44:d8:a9:04:28:50:78:21:ad:f4:fc:18:87:cb:ef:8c:07:d9:
         82:2b:34:cb:bb:c3:f1:e6:dd:bc:99:68:ef:07:d6:18:54:01:
         34:4a:6e:97:61:18:e3:97:a7:c6:b1:e9:ee:3b:89:37:1a:ad:
         2c:21:e2:93:5f:82:4e:ad:f8:c9:a4:09:78:98:8b:2c:1c:00:
         53:c6:96:d5:dc:45:8b:97:65:42:d1:c6:5a:ec:ee:06:4f:bc:
         6c:e4:aa:a2:b2:2e:02:35:b4:17:52:aa:be:57:e2:d4:2f:de:
         2c:3e:86:64:94:7f:20:4f:64:ec:ed:79:41:2b:e6:35:c4:04:
         a1:59:d1:b0:7c:81:bf:2a:9a:c9:23:29:7d:81:ec:27:0b:c3:
         0a:85:44:b9:90:ce:ad:ad:f2:95:ad:38:3c:aa:a2:cf:71:3d:
         21:fd:d5:0f:1c:5b:1b:9b:62:e7:67:7e:4f:57:dc:ef:1c:a7:
         be:6d:86:f1:af:0b:6c:fb:00:95:b5:12:2e:61:6d:c0:f6:fc:
         37:18:8e:f3:43:95:83:00:08:66:a6:bf:1d:2f:e8:37:43:68:
         7e:4e:c1:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:09 2023 by rpki-client on console-ams.rpki-client.org