Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/Gudqm-MGgD3pjvo7Ju4_-8OVwpc.roa
File:                     Gudqm-MGgD3pjvo7Ju4_-8OVwpc.roa (raw, json)
Hash identifier:          FfOZGIXUnXPWDW6WHyaF3uXwo5PjiVUffLP8b9RkZjE=
Subject key identifier:   1A:E7:6A:9B:E3:06:80:3D:E9:8E:FA:3B:26:EE:3F:FB:C3:95:C2:97
Certificate issuer:       /CN=3cd37ec23719b2f142f46e6f3317664034adf598
Certificate serial:       018861D6758FC8233BF02A016058492D8069
Authority key identifier: 3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/Gudqm-MGgD3pjvo7Ju4_-8OVwpc.roa
Signing time:             Sun 28 May 2023 10:10:24 +0000
ROA not before:           Sun 28 May 2023 10:10:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59441
IP address blocks:        185.83.181.0/24 maxlen: 24
                          185.83.183.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:61:d6:75:8f:c8:23:3b:f0:2a:01:60:58:49:2d:80:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cd37ec23719b2f142f46e6f3317664034adf598
        Validity
            Not Before: May 28 10:10:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1ae76a9be306803de98efa3b26ee3ffbc395c297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8c:30:31:60:e3:10:fe:a6:e8:ac:48:e1:65:
                    ca:99:5b:9e:8a:97:c3:f9:0e:f7:63:35:a8:da:5b:
                    08:dd:73:04:37:69:c0:1d:6d:e1:3e:67:a3:55:a6:
                    2b:4c:1f:16:e9:63:20:87:f1:f8:2d:f4:ec:04:bc:
                    09:ed:d3:9d:d1:9e:7f:d3:e7:4c:b7:a3:dd:99:b7:
                    5a:07:ff:38:3c:da:8e:2c:27:4d:37:a8:8c:d4:fd:
                    3f:ce:d6:05:d9:1d:37:bc:53:b4:8d:09:e8:d3:ba:
                    69:19:82:94:8d:79:81:b5:b0:e1:47:55:eb:2d:fe:
                    43:e1:0e:18:71:20:f0:a6:c0:0f:76:39:67:99:8d:
                    fa:84:03:3f:b7:9b:74:e0:e1:04:51:92:85:d2:9b:
                    2e:16:a4:e7:5f:06:9c:b8:6c:d8:82:ca:53:bd:68:
                    4f:59:1c:1d:1a:2a:34:4a:9b:d8:72:13:2f:09:c3:
                    e3:f1:c2:8f:0a:69:d8:a6:2d:e0:03:8e:2c:fe:b8:
                    07:70:1c:f2:dc:a7:e4:9f:20:cf:ea:0d:1c:71:2d:
                    29:da:91:77:78:ae:c5:fb:e0:4a:70:de:60:27:fe:
                    64:d5:07:11:a5:40:a4:68:77:1b:89:32:7d:ad:06:
                    4d:ea:60:08:ba:be:71:d8:d8:1f:d8:28:9a:40:41:
                    a3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:E7:6A:9B:E3:06:80:3D:E9:8E:FA:3B:26:EE:3F:FB:C3:95:C2:97
            X509v3 Authority Key Identifier:
                keyid:3C:D3:7E:C2:37:19:B2:F1:42:F4:6E:6F:33:17:66:40:34:AD:F5:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/Gudqm-MGgD3pjvo7Ju4_-8OVwpc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f7e56-0916-47ac-8586-a9388f31b47e/1/PNN-wjcZsvFC9G5vMxdmQDSt9Zg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.83.181.0/24
                  185.83.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:17:6f:a1:e5:12:68:fb:0b:f5:7a:df:3c:5a:ce:58:2e:53:
         3f:ab:8b:36:18:b9:2b:0d:2a:84:b2:8c:ef:f0:ac:26:d2:df:
         0a:8f:3c:4d:94:59:58:66:48:0f:b3:67:ae:7d:b2:8a:34:cf:
         14:a6:18:29:be:4b:91:e6:fc:d3:c5:89:8e:95:6e:23:b4:d2:
         75:b7:0b:f4:ba:c8:e6:54:82:83:88:f9:07:1a:ad:c3:33:38:
         02:a3:3a:10:94:62:f2:35:6e:27:88:9f:8b:c1:71:c8:92:d5:
         32:9f:9d:f9:72:a0:d6:42:0c:06:95:71:02:61:e1:01:6f:5d:
         8a:45:f0:62:84:c9:f6:3b:88:fb:6e:11:23:40:b6:38:0e:8a:
         36:82:34:42:19:b0:cb:2a:07:64:b9:fb:8a:d0:78:5e:c6:0c:
         3b:47:00:a4:b9:19:d1:2b:c5:51:c2:33:48:15:28:46:35:c1:
         ab:32:14:1c:83:8a:92:e5:5f:e8:14:8d:2e:33:cf:40:06:9c:
         83:c5:50:e6:5a:c1:c1:62:3e:ba:57:c9:d2:24:39:e6:75:d2:
         55:8d:a7:a9:69:b4:12:b9:b7:41:2e:44:e6:f5:b8:49:70:c2:
         c8:39:9d:93:9e:ca:8d:df:09:3c:7f:d0:d3:0e:01:58:ca:61:
         6c:b5:ea:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:07 2024 by rpki-client on console-fra.rpki-client.org