Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/V9wR04q8R07ExiTZSOPbThq2sk4.roa
File:                     V9wR04q8R07ExiTZSOPbThq2sk4.roa (raw, json)
Hash identifier:          TheZhAyPRNjkHbrtbp/8GgNNAHuITRoj+bN7zx1sJr8=
Subject key identifier:   57:DC:11:D3:8A:BC:47:4E:C4:C6:24:D9:48:E3:DB:4E:1A:B6:B2:4E
Certificate issuer:       /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial:       01857039AAC7A78B3BC2466173186CA781C7
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/V9wR04q8R07ExiTZSOPbThq2sk4.roa
Signing time:             Mon 02 Jan 2023 02:05:05 +0000
ROA not before:           Mon 02 Jan 2023 02:05:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     266050
IP address blocks:        195.252.175.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:39:aa:c7:a7:8b:3b:c2:46:61:73:18:6c:a7:81:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
        Validity
            Not Before: Jan  2 02:05:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=57dc11d38abc474ec4c624d948e3db4e1ab6b24e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:19:d2:b3:b6:ec:4c:74:bb:e1:3b:31:9e:f2:
                    40:42:90:e2:6a:72:aa:6b:ae:a9:3b:96:da:1e:f5:
                    a7:9d:b9:21:b0:62:eb:e0:38:cf:d6:df:42:4a:fe:
                    1d:12:98:a9:c9:58:3b:98:fe:b4:10:1c:1c:9b:64:
                    cf:bd:c7:1c:4a:01:fe:65:de:6a:73:d4:4c:7a:c5:
                    8d:07:0c:ec:fc:41:f8:38:58:8d:a1:0a:81:21:0f:
                    f0:cd:35:b0:24:55:5b:37:d8:e9:a4:19:c6:5c:6e:
                    b6:2d:52:f8:ab:c8:a7:db:44:2e:02:ed:81:8f:7f:
                    f3:bf:31:75:cc:fd:2e:73:f4:e6:57:c3:91:8c:98:
                    71:5d:2f:21:c6:2c:bc:9c:af:b8:d1:4a:5d:8d:7d:
                    ff:49:cf:ff:3f:9c:25:52:27:6a:c6:8f:af:ae:04:
                    de:d6:cf:90:06:75:2e:e8:f1:79:16:2e:89:e5:f6:
                    84:4c:57:3d:ed:a0:4d:9e:fe:74:b1:e6:d4:a2:b5:
                    99:2b:7d:5b:0e:8d:58:92:56:3b:1c:1d:29:ea:fd:
                    2c:c0:b7:03:71:ca:08:f1:53:1a:56:04:6b:aa:29:
                    62:ee:b9:b9:f6:d5:7a:20:6f:54:8a:d9:b8:40:9f:
                    b9:3c:97:ac:a1:21:8f:28:4c:2a:fc:14:be:9d:64:
                    9d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:DC:11:D3:8A:BC:47:4E:C4:C6:24:D9:48:E3:DB:4E:1A:B6:B2:4E
            X509v3 Authority Key Identifier:
                keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/V9wR04q8R07ExiTZSOPbThq2sk4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.252.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:a5:b8:10:72:b8:df:1a:d3:b9:20:cd:39:98:58:f2:c7:cf:
         ef:e3:c4:fd:52:01:35:b8:d3:28:58:3f:54:a7:10:c8:5a:5f:
         06:cf:e5:bf:b1:13:41:fd:09:fa:cf:e3:f0:be:cb:ee:16:38:
         35:a2:d2:53:28:bf:f4:d4:39:b9:ea:a5:99:76:58:8c:c2:bc:
         03:56:18:b9:b7:12:a5:32:ff:4e:15:4c:d8:f3:19:f5:3a:c2:
         b7:61:37:30:a9:14:93:94:2e:b4:51:53:81:13:91:55:75:81:
         33:af:9a:dc:2e:b5:7e:2f:3c:7a:07:60:ab:04:1b:68:23:b2:
         ae:73:af:d0:52:06:f1:a8:22:a1:89:1c:d0:34:3c:5e:13:a0:
         c2:5f:91:12:17:94:f0:f4:0b:b9:a2:44:a0:5e:12:3b:ac:d2:
         5f:a2:6a:5d:53:86:6f:41:09:88:30:48:18:dd:3a:3c:21:38:
         89:cd:70:67:72:47:b5:55:c3:41:cc:2b:03:f1:c3:d6:ee:74:
         e2:be:89:c7:29:82:eb:49:86:17:74:61:3a:86:04:00:b5:f2:
         23:1c:ee:ae:50:82:e1:cc:a7:53:5f:8a:57:b2:5f:01:e6:47:
         fd:bf:b5:69:86:bb:98:47:e0:0c:39:95:2f:db:cc:89:1a:4f:
         46:dc:af:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:29 2023 by rpki-client on console-ams.rpki-client.org