Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/j2p4byowNchgFAHwGCU_rWlna7k.roa
File:                     j2p4byowNchgFAHwGCU_rWlna7k.roa (raw, json)
Hash identifier:          EJAP87GkILcxGIKmVyi7yDxbCikmAek2FxA/ZP/0JEY=
Subject key identifier:   8F:6A:78:6F:2A:30:35:C8:60:14:01:F0:18:25:3F:AD:69:67:6B:B9
Certificate issuer:       /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial:       018B6FBCA6C65088B7CBC404C82FFDE17BA7
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/j2p4byowNchgFAHwGCU_rWlna7k.roa
Signing time:             Fri 27 Oct 2023 06:05:16 +0000
ROA not before:           Fri 27 Oct 2023 06:05:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     12912
IP address blocks:        163.5.71.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:6f:bc:a6:c6:50:88:b7:cb:c4:04:c8:2f:fd:e1:7b:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
        Validity
            Not Before: Oct 27 06:05:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8f6a786f2a3035c8601401f018253fad69676bb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a3:59:a1:bb:8a:7c:2d:d1:d0:63:5c:ab:c0:
                    7c:18:55:46:33:dd:6f:37:33:63:7a:08:ab:2c:31:
                    ef:e9:c0:98:b4:ad:7a:58:31:29:69:cd:46:ba:e2:
                    01:ea:82:ef:0f:40:16:6c:5a:0f:77:66:d1:f5:db:
                    c8:b8:ec:e6:0d:4c:f5:ce:f4:a1:79:10:0a:e4:d8:
                    d5:ef:b0:50:07:ef:42:35:16:8b:c1:8a:67:42:41:
                    13:c1:b9:2a:bd:98:64:43:fb:96:f7:d9:60:a4:ba:
                    85:e4:22:39:6c:b0:e9:bd:f6:44:c1:38:8a:dc:79:
                    30:3e:62:2f:c8:e0:ca:cb:c0:57:50:55:65:a7:42:
                    d4:89:4f:4f:39:a3:0f:ef:0e:66:8d:41:a1:8a:6b:
                    c4:41:a8:6a:43:94:38:22:32:81:94:3d:df:ae:67:
                    11:53:42:03:a8:06:1c:51:22:45:79:b2:0c:e6:34:
                    d9:2d:74:e6:c7:47:22:b6:fb:44:fe:c1:44:c1:66:
                    69:88:4d:d0:e8:6a:bc:e7:91:ea:7f:b1:56:c7:f2:
                    e2:f0:b4:1d:95:c5:85:a6:8c:58:16:d7:d3:6a:15:
                    7d:8c:8c:45:58:fa:e3:5f:60:0a:7a:03:8e:40:bc:
                    e8:46:a0:d0:27:fa:21:a0:ae:93:2d:36:3d:8c:68:
                    4f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:6A:78:6F:2A:30:35:C8:60:14:01:F0:18:25:3F:AD:69:67:6B:B9
            X509v3 Authority Key Identifier:
                keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/j2p4byowNchgFAHwGCU_rWlna7k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.5.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:ae:e4:d8:79:e6:d2:4f:ff:b5:01:ef:da:9b:59:a5:a0:de:
         1d:08:18:85:07:b7:a4:c9:a9:12:82:9a:71:d7:b6:e8:2b:44:
         55:2a:0a:5d:41:2b:ac:72:6a:04:bd:fc:46:0f:b3:fa:9f:16:
         c9:91:58:1e:e7:31:c4:a9:59:3a:e2:78:79:45:49:51:36:7d:
         c0:89:74:69:fa:75:be:d3:9f:15:04:65:1d:06:f8:95:59:59:
         aa:74:c4:28:35:4f:04:35:5f:24:76:a1:9b:4f:a5:6e:9c:89:
         51:6b:6d:84:3b:53:b5:21:88:2b:78:b0:06:71:8d:61:d7:66:
         49:c0:b8:a5:c4:e8:63:45:42:a1:24:ef:ba:a9:ee:4c:af:54:
         c2:14:3c:e5:26:48:fc:e4:a7:06:d3:a0:bc:19:6e:e5:7e:07:
         31:52:5a:58:e8:e0:a8:71:40:d6:28:19:83:cb:b7:d3:6a:fd:
         df:d1:1d:68:38:d9:e7:0d:f6:cc:06:2a:1d:20:a4:7d:e0:5e:
         2a:b5:0d:5d:6f:43:7c:8b:71:93:7d:ac:a0:73:12:cc:1d:2f:
         6e:3c:13:81:78:8a:c6:98:54:73:85:73:d6:85:03:2e:21:42:
         89:d2:16:17:1f:51:ce:d1:a9:6d:b9:9a:db:44:f4:63:f1:09:
         93:27:12:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 27 10:20:58 2023 by rpki-client on console-ams.rpki-client.org