Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/1-dBSGgVTPooXsw3VY2IeSvX1T1A.roa
File:                     1-dBSGgVTPooXsw3VY2IeSvX1T1A.roa (raw, json)
Hash identifier:          4N4NbgzEyLOUR/+Yf2GO/qu+rMmQ5DnNkQMK8xatIv0=
Subject key identifier:   F9:D0:52:1A:05:53:3E:8A:17:B3:0D:D5:63:62:1E:4A:F5:F5:4F:50
Certificate issuer:       /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial:       01856FA6F1133DD55D82FB06D2A3E9313351
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/1-dBSGgVTPooXsw3VY2IeSvX1T1A.roa
Signing time:             Sun 01 Jan 2023 23:24:49 +0000
ROA not before:           Sun 01 Jan 2023 23:24:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     64453
IP address blocks:        178.175.158.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:a6:f1:13:3d:d5:5d:82:fb:06:d2:a3:e9:31:33:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
        Validity
            Not Before: Jan  1 23:24:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f9d0521a05533e8a17b30dd563621e4af5f54f50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a3:b4:87:b2:14:3a:e4:27:63:52:66:17:a0:
                    0b:aa:39:c5:fd:4c:b6:98:06:75:ce:82:87:79:91:
                    25:22:95:e8:60:ca:ce:42:34:de:47:31:06:20:62:
                    c0:20:72:97:92:26:89:75:be:05:5b:e8:2c:89:c8:
                    58:48:e7:7c:33:fc:50:0b:e4:d6:0a:e4:bd:be:79:
                    35:e4:f6:4f:59:70:3e:96:7b:be:e1:95:27:1d:d7:
                    4f:93:ec:4c:b4:c0:20:34:f6:ca:5d:49:87:e5:56:
                    83:ab:a7:48:63:48:a7:23:c1:c6:32:21:51:3f:f9:
                    6b:f6:2e:02:ef:81:de:15:ba:16:9c:32:af:f9:e3:
                    fc:58:36:29:e0:cf:54:1f:4c:5e:93:ef:1c:0c:1a:
                    e3:15:78:ee:6d:1c:3b:9a:3a:de:6a:fb:47:d4:f0:
                    73:ba:c1:73:7d:f5:07:2e:c5:a6:10:91:e6:de:7c:
                    25:24:46:a4:91:72:b9:bb:eb:44:d2:26:7c:36:06:
                    5c:0d:fb:91:43:d7:06:34:4b:3d:2d:17:3b:e7:35:
                    25:56:15:88:3a:4f:60:d8:b9:3e:ab:14:d9:c8:c1:
                    16:58:f0:cf:6e:cc:0a:81:d1:18:f4:ba:b5:bc:8b:
                    ab:75:ef:a0:27:d8:f4:57:ac:19:21:45:a3:4e:49:
                    0f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D0:52:1A:05:53:3E:8A:17:B3:0D:D5:63:62:1E:4A:F5:F5:4F:50
            X509v3 Authority Key Identifier:
                keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/1-dBSGgVTPooXsw3VY2IeSvX1T1A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.175.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:e9:66:5b:30:f2:e4:b0:96:15:e4:39:70:03:28:1c:ec:b5:
         ab:e4:41:66:c4:70:31:e0:bd:c6:7c:88:05:85:b7:75:fa:04:
         4b:b1:8a:ad:f3:26:e5:82:39:4f:3a:e0:9c:cf:37:82:3c:7e:
         9c:da:48:8e:da:18:b7:76:84:ec:9d:95:06:08:d1:18:62:d0:
         95:a6:b9:59:d2:94:97:09:82:3a:03:c0:4b:85:d7:6e:18:7c:
         56:44:f0:d9:99:b4:c8:d2:64:23:44:36:37:07:7a:10:8a:ae:
         f8:29:dc:a7:fe:ac:0f:52:16:1c:6f:32:4a:d2:fa:18:90:e9:
         75:fd:72:64:38:20:47:28:91:43:8d:45:e8:05:52:21:fe:95:
         b5:04:36:5c:4d:6a:c5:78:06:15:98:61:e1:06:ef:de:17:86:
         4c:e4:ab:b4:00:b9:1e:8c:53:e3:47:59:5f:2e:5d:e0:ea:0d:
         79:c9:5d:6b:cc:a4:8a:13:ee:08:23:f4:8d:55:d8:70:50:24:
         18:97:c1:f3:e3:bf:47:ef:86:55:2c:04:f6:ca:a7:72:6c:c8:
         a1:4a:44:bc:ee:ec:6f:31:53:9f:83:42:77:f4:70:47:d4:c2:
         11:56:77:44:29:d5:66:bd:4e:eb:64:7e:46:8a:d3:e1:05:71:
         74:5b:42:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:17 2023 by rpki-client on console-ams.rpki-client.org