Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Wwi8V3IYzjNnR2sK1I6dS42s0EM.roa
File:                     Wwi8V3IYzjNnR2sK1I6dS42s0EM.roa (raw, json)
Hash identifier:          MuZ1ZOwmqrX+6hdbqM7V06om55KbG04Sl8wkHxg5r+w=
Subject key identifier:   5B:08:BC:57:72:18:CE:33:67:47:6B:0A:D4:8E:9D:4B:8D:AC:D0:43
Certificate issuer:       /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial:       018794ABD426A7566F1D948A9043B1B3BBC5
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Wwi8V3IYzjNnR2sK1I6dS42s0EM.roa
Signing time:             Tue 18 Apr 2023 14:01:41 +0000
ROA not before:           Tue 18 Apr 2023 14:01:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200482
IP address blocks:        85.202.163.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:94:ab:d4:26:a7:56:6f:1d:94:8a:90:43:b1:b3:bb:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
        Validity
            Not Before: Apr 18 14:01:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5b08bc577218ce3367476b0ad48e9d4b8dacd043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b1:07:6f:4e:33:3d:9d:c7:88:c7:13:58:7e:
                    7c:2c:a1:b4:45:de:43:19:e4:4f:b0:8f:d1:d2:ef:
                    94:3c:9d:59:4c:39:04:9d:a2:31:0d:87:c0:ce:e1:
                    79:6d:ba:ca:c8:2b:35:08:7f:cb:e6:c3:39:1f:d1:
                    ff:1f:18:f6:80:e5:0e:ea:33:db:e9:0d:42:e9:76:
                    ca:de:fe:25:c4:27:3f:70:9e:cf:22:2b:12:cf:d3:
                    ec:46:f0:9d:da:ed:68:39:8e:c3:60:65:3d:e4:07:
                    20:63:2f:10:8d:8c:23:7c:e7:59:8d:ab:37:47:c5:
                    fb:d0:15:4d:96:48:fb:60:42:2e:2b:0d:0a:ac:2a:
                    3c:94:9d:f5:19:19:6d:29:64:eb:66:a2:a4:10:1d:
                    ab:83:2e:dc:79:75:63:33:e5:83:37:37:78:98:5d:
                    f4:bc:7f:de:19:f2:65:44:eb:27:f6:cb:72:aa:5d:
                    05:29:6c:d4:04:32:d3:15:a4:1b:b6:6b:47:47:b9:
                    a5:7d:b5:96:4a:d5:e6:6b:db:07:63:06:05:f4:05:
                    80:58:a4:78:27:e4:5f:2c:1b:e2:e7:1b:2b:f5:2f:
                    4d:09:fd:0f:24:34:8d:0c:da:65:c2:e1:6b:a6:1d:
                    a4:b6:76:43:40:2d:ab:f8:d1:dc:f4:54:94:c2:1a:
                    88:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:08:BC:57:72:18:CE:33:67:47:6B:0A:D4:8E:9D:4B:8D:AC:D0:43
            X509v3 Authority Key Identifier:
                keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Wwi8V3IYzjNnR2sK1I6dS42s0EM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.202.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:16:d8:01:5c:6d:3d:81:bd:17:fc:05:ec:11:56:af:f4:de:
         7b:5c:cd:d0:73:51:1f:16:66:ab:21:76:b0:ab:06:18:83:09:
         4a:54:b4:a0:9f:4d:2b:f4:35:c3:cf:66:af:b5:6d:f6:25:6c:
         d8:cc:ec:68:c4:66:2f:35:29:d0:84:5f:5d:ef:b2:4a:2d:74:
         c8:ce:af:2b:a3:a2:c8:73:50:75:93:e4:c1:d3:04:19:52:a6:
         da:c3:c7:66:e1:50:db:4d:7b:d6:a0:fe:b5:e7:26:fa:4c:41:
         fe:a9:b8:be:57:3d:4b:d6:fc:05:b2:25:93:61:d3:08:ea:cd:
         b5:cd:d3:d7:ff:4f:ed:ad:d5:92:ef:22:f7:0a:20:23:70:16:
         74:9a:72:c2:8a:2d:3e:b0:5f:50:71:09:36:86:b3:ef:81:99:
         9e:74:36:a1:9f:3c:77:b0:3f:14:2b:77:83:4a:b7:6f:30:91:
         49:bd:f3:67:6e:76:ce:7e:e2:a4:b3:c9:98:37:d4:f3:d3:e2:
         3e:0c:21:e3:80:fc:ac:9f:0b:6f:a6:f2:d5:9d:87:ed:cc:22:
         84:14:d9:fa:bd:6b:f3:65:58:c7:57:db:dd:be:9f:15:1d:8f:
         59:f2:37:f0:6c:b9:07:26:11:e4:5a:07:a0:02:0f:23:b7:09:
         46:4f:28:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:34 2024 by rpki-client on console-ams.rpki-client.org