Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/E2nrXvISwZuxuvwoUi1KMX9kFnA.roa
File:                     E2nrXvISwZuxuvwoUi1KMX9kFnA.roa (raw, json)
Hash identifier:          b+GflYAWjqXEI2Xy72mPKJZ7qM2+7PG3gKd7HWncBjs=
Subject key identifier:   13:69:EB:5E:F2:12:C1:9B:B1:BA:FC:28:52:2D:4A:31:7F:64:16:70
Certificate issuer:       /CN=b91b91504983091506a1a944457a4558b94dab7f
Certificate serial:       01856FA6F28D6C5B485436E9C8872E0E5EFA
Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/E2nrXvISwZuxuvwoUi1KMX9kFnA.roa
Signing time:             Sun 01 Jan 2023 23:24:50 +0000
ROA not before:           Sun 01 Jan 2023 23:24:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202965
IP address blocks:        178.175.151.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:a6:f2:8d:6c:5b:48:54:36:e9:c8:87:2e:0e:5e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f
        Validity
            Not Before: Jan  1 23:24:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1369eb5ef212c19bb1bafc28522d4a317f641670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:04:c6:40:2b:8f:47:8e:81:0c:db:73:6b:b6:
                    66:66:dd:40:f1:47:54:26:87:af:8e:ad:e4:00:74:
                    8c:19:fc:a2:56:1a:45:30:a7:36:7d:cc:e7:3b:e9:
                    1f:15:01:7c:ea:4b:a4:af:ae:51:17:3a:6f:4d:00:
                    6f:f7:67:bc:2a:fc:7c:1e:d9:ad:35:c9:31:26:69:
                    5e:62:7d:23:a5:d1:7c:14:e6:a9:12:4d:68:79:ee:
                    03:7b:11:eb:9d:5f:d6:58:2e:80:d5:d2:24:6a:1e:
                    dc:c2:c6:a8:92:6d:71:88:77:de:90:1e:6e:d1:50:
                    e3:80:e4:cf:5c:9a:c1:08:1f:3d:85:d1:6a:40:76:
                    3b:93:b3:70:de:42:1c:b2:f0:ef:00:45:a1:53:7d:
                    30:f3:de:bf:0e:67:93:05:06:93:95:27:3d:17:6b:
                    07:4e:01:3c:fb:19:bc:4b:5f:e9:83:10:2f:8e:61:
                    c2:a4:33:17:5b:49:78:6c:d7:8b:ae:87:3c:79:be:
                    76:78:76:f0:d7:0e:d8:f6:66:60:a6:56:07:b2:5d:
                    a5:0e:96:e9:4f:5d:68:70:36:17:1e:54:9f:4f:2c:
                    48:24:10:2a:07:89:71:16:2a:4b:94:c5:63:b1:81:
                    d4:f3:d1:7e:38:0f:51:be:e6:ce:15:60:f6:20:ad:
                    75:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:69:EB:5E:F2:12:C1:9B:B1:BA:FC:28:52:2D:4A:31:7F:64:16:70
            X509v3 Authority Key Identifier:
                keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/E2nrXvISwZuxuvwoUi1KMX9kFnA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.175.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:13:b8:7b:0b:e3:88:e2:b0:9a:b3:e6:19:96:cd:08:2b:89:
         91:b7:3d:e5:cf:5e:4a:80:0f:1a:be:70:16:c4:98:8f:cc:08:
         e9:f2:3c:ed:20:c8:e4:10:6d:66:40:2f:ee:c9:cb:84:e5:61:
         b4:9b:5b:3f:83:d1:8b:91:3f:5d:48:2b:75:fe:82:12:49:4f:
         cb:db:85:c7:76:2c:13:96:5c:b4:f2:5f:1e:63:7a:89:f4:d6:
         e3:c1:50:e1:9f:05:4c:00:72:b2:6a:e9:93:9b:28:e0:3c:a7:
         15:a4:b1:f0:76:23:58:cb:92:b6:ad:46:48:7c:d5:f0:66:47:
         ee:32:35:a2:05:43:a7:6d:bb:49:02:b4:94:7b:87:92:57:aa:
         0d:65:ae:6f:06:a9:ee:e0:a5:ea:5a:02:4d:61:da:c0:14:66:
         88:ca:cf:c6:50:ee:36:4b:31:e8:ba:61:0b:17:71:35:6a:69:
         53:53:80:8d:ef:c6:1a:39:8b:5e:79:c7:16:b6:5c:6c:8c:75:
         e8:87:99:9f:65:29:b7:23:a1:b9:95:3f:17:9b:de:e0:dc:95:
         bc:66:26:3e:4c:ed:55:7e:c6:21:76:b2:fe:6e:92:2e:23:41:
         11:02:ef:05:a1:fe:eb:8e:ce:6a:5d:53:71:20:9d:5f:c8:35:
         4f:da:e7:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:33 2024 by rpki-client on console-ams.rpki-client.org