Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/m_eUxBgqJ30QFfvPgC8xCwYtzUM.roa
File:                     m_eUxBgqJ30QFfvPgC8xCwYtzUM.roa (raw, json)
Hash identifier:          T+mkFUYxeBKRIkGzMT2psHDD8VqoffJ/ory6Djkf1xw=
Subject key identifier:   9B:F7:94:C4:18:2A:27:7D:10:15:FB:CF:80:2F:31:0B:06:2D:CD:43
Certificate issuer:       /CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Certificate serial:       01895F58F0EB7D0156795D1A570AC5E40198
Authority key identifier: D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/m_eUxBgqJ30QFfvPgC8xCwYtzUM.roa
Signing time:             Sun 16 Jul 2023 15:36:51 +0000
ROA not before:           Sun 16 Jul 2023 15:36:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        185.103.7.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:5f:58:f0:eb:7d:01:56:79:5d:1a:57:0a:c5:e4:01:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
        Validity
            Not Before: Jul 16 15:36:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9bf794c4182a277d1015fbcf802f310b062dcd43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:45:0c:99:69:90:be:37:97:de:50:08:70:27:
                    41:c9:c5:6a:fb:3c:e5:6e:05:c3:14:e1:42:f6:f2:
                    54:84:66:db:58:0a:d4:8e:83:91:41:18:5d:44:50:
                    16:d2:c3:4c:65:fb:8c:99:3c:11:05:5b:4d:2c:1e:
                    a7:a9:c0:27:af:d8:28:37:f7:2f:29:4b:8a:f8:e4:
                    01:19:1c:bf:89:28:d0:e5:1a:4c:bc:70:4a:7f:1a:
                    66:75:ff:b0:5c:c4:8c:4d:5f:e1:c6:fb:05:66:7d:
                    d1:69:fe:4b:75:97:f0:4b:2f:57:9b:a1:7f:e5:1a:
                    06:83:d1:a9:c3:c1:1b:9c:a4:d7:2c:09:16:7f:f0:
                    22:52:23:ab:c1:6e:7c:e5:0a:84:2b:d3:ad:ca:fb:
                    b9:e1:6d:3b:2b:2d:9e:ff:74:f9:0d:4d:49:fa:6e:
                    91:f8:e5:db:c7:a2:02:a5:c2:4d:a2:46:de:a1:a0:
                    6c:cd:89:68:d8:6f:24:43:7d:60:e6:5b:85:aa:3f:
                    5c:21:67:5b:d2:b8:83:6a:0b:84:09:71:fa:31:25:
                    20:8e:ad:04:fb:59:c6:14:03:5a:58:54:25:82:27:
                    a1:96:ba:c2:50:60:e5:66:46:79:e8:b1:96:7f:00:
                    ea:22:53:06:88:1c:5a:61:ec:7d:be:45:9f:bd:4c:
                    4f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F7:94:C4:18:2A:27:7D:10:15:FB:CF:80:2F:31:0B:06:2D:CD:43
            X509v3 Authority Key Identifier:
                keyid:D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/m_eUxBgqJ30QFfvPgC8xCwYtzUM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.103.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:36:e5:fe:25:7d:91:5a:53:79:cb:ce:c2:d3:99:1d:dd:33:
         84:c8:9a:89:e7:b0:a9:ce:ee:de:07:ee:0a:31:75:56:1a:76:
         5d:02:f0:86:db:1f:e8:5e:27:79:49:40:4b:fd:be:6d:3b:6b:
         02:ef:80:36:6d:89:aa:c0:9b:b4:bd:27:8a:f1:1e:3a:46:ab:
         23:9c:73:4a:7f:f3:55:dd:eb:64:53:ad:51:c4:90:75:ed:1b:
         9e:db:30:a8:a4:e8:4a:c2:09:ac:cb:ca:ad:8c:66:88:f7:43:
         cc:d6:8b:07:05:31:ff:db:ba:fd:10:15:2f:fe:58:ef:f8:55:
         7f:62:86:f6:77:5f:69:d4:35:54:09:f2:20:cf:55:c6:d0:05:
         f0:69:17:fb:8b:24:4c:08:48:c4:e9:32:30:33:67:6f:4d:51:
         32:59:47:5d:54:57:4c:68:84:f0:ec:d1:ad:82:af:71:66:ad:
         96:4b:ce:9d:89:d7:fc:44:8a:59:ea:75:67:fc:4b:bf:02:c3:
         fd:bb:17:ea:f1:51:57:ae:b5:4c:87:63:dd:b5:d6:ea:00:c7:
         64:1f:20:13:f2:67:4f:76:f8:ef:08:c8:de:6c:23:6f:e3:b3:
         7e:8d:70:0c:03:5a:54:c2:cf:18:5f:15:88:80:5b:40:0d:ac:
         b4:26:d1:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:26:38 2024 by rpki-client on console-fra.rpki-client.org