Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/FIeGKRzPciVPZsBFel_EilMei0w.roa
File:                     FIeGKRzPciVPZsBFel_EilMei0w.roa (raw, json)
Hash identifier:          0OgQb6IT9gNmNdMr9jMW8DCuZUNHBI+ZkaG9vx3m5Rs=
Subject key identifier:   14:87:86:29:1C:CF:72:25:4F:66:C0:45:7A:5F:C4:8A:53:1E:8B:4C
Certificate issuer:       /CN=011bf02928cccb516b719fe558884842f19c0877
Certificate serial:       01857102F70B25DE66ABF8B68FE7DC117163
Authority key identifier: 01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/FIeGKRzPciVPZsBFel_EilMei0w.roa
Signing time:             Mon 02 Jan 2023 05:44:57 +0000
ROA not before:           Mon 02 Jan 2023 05:44:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2830
IP address blocks:        194.33.183.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:02:f7:0b:25:de:66:ab:f8:b6:8f:e7:dc:11:71:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011bf02928cccb516b719fe558884842f19c0877
        Validity
            Not Before: Jan  2 05:44:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=148786291ccf72254f66c0457a5fc48a531e8b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ff:84:cf:cb:9c:9d:f9:1b:69:04:60:ba:13:
                    f0:c5:8a:d2:0b:ce:be:a5:65:1d:8f:ae:f9:de:4e:
                    83:4f:eb:99:32:7c:f7:93:9b:41:3a:b8:96:44:26:
                    fc:9f:98:ff:e6:1b:08:0e:fe:c8:ec:ee:1e:3e:ca:
                    e3:86:9c:f3:af:2e:1b:97:f2:9d:63:df:af:87:60:
                    2a:f1:34:b4:6c:e9:1f:86:c5:b1:e5:3a:c2:52:1d:
                    fe:5e:25:d1:4c:34:ff:ad:4b:d6:0d:79:4e:ec:df:
                    d2:32:1a:88:57:cd:5f:46:7c:f2:cb:c4:97:94:56:
                    7c:e7:d6:b9:57:0c:ed:99:fe:89:ae:09:a5:cf:46:
                    8a:5f:16:84:76:4c:29:89:0b:02:e6:fc:b2:c7:34:
                    bb:cf:27:79:93:7d:f7:fc:49:56:63:73:bd:85:07:
                    1d:03:28:1f:13:c7:57:54:1d:84:f3:a3:cf:db:44:
                    18:0f:db:fa:67:82:2d:66:c7:01:6a:fa:22:ef:ae:
                    65:e9:cf:62:3f:d8:2a:5e:cb:52:ea:51:42:f2:e2:
                    3e:47:2d:b0:b8:c8:58:7e:fe:c3:76:d7:5d:07:bb:
                    b5:f9:21:3b:5d:fb:5d:d4:68:cb:51:da:83:a5:f9:
                    85:79:2b:de:3b:43:80:ea:87:2d:bb:20:10:a2:11:
                    39:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:87:86:29:1C:CF:72:25:4F:66:C0:45:7A:5F:C4:8A:53:1E:8B:4C
            X509v3 Authority Key Identifier:
                keyid:01:1B:F0:29:28:CC:CB:51:6B:71:9F:E5:58:88:48:42:F1:9C:08:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/FIeGKRzPciVPZsBFel_EilMei0w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe05b4-0873-4f1f-ba1f-7e9c0b02248e/1/ARvwKSjMy1FrcZ_lWIhIQvGcCHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.33.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:67:26:cc:27:f8:93:5e:1c:e6:b3:8f:98:11:c2:bf:f9:5c:
         03:0a:30:ee:00:be:a5:fb:7d:9f:ad:25:18:6c:55:0d:45:de:
         5e:59:fc:e6:9b:3f:df:ac:60:dc:98:52:60:88:bb:b3:2d:0b:
         b1:1d:a5:b5:7b:70:c6:06:41:85:89:ab:b3:1a:ed:3c:01:32:
         e4:7f:3b:e4:77:a5:ce:cc:cb:3d:d4:17:4b:31:4e:e9:f4:93:
         2c:86:8d:7a:9c:fc:52:d9:64:f5:b3:f2:0f:cc:64:7e:b9:30:
         3a:c2:a1:a7:b2:96:24:14:31:73:8b:da:80:23:df:41:23:46:
         a8:f1:b9:bb:7b:fe:f5:75:19:f4:76:d0:a9:19:08:b2:65:b9:
         fb:46:56:3b:c5:1b:47:2d:f6:c1:0b:f4:02:8e:cc:f1:9a:cc:
         49:71:eb:28:76:40:c1:4d:51:cd:ad:4d:a5:ba:2f:b5:aa:de:
         ce:30:53:6b:a6:11:b0:4c:ae:12:f5:fc:c1:d7:d0:f0:48:da:
         6b:4b:95:03:5b:a9:01:23:91:d6:25:84:33:f0:41:84:fe:ce:
         09:18:e8:0f:cd:7b:77:d9:86:36:d0:56:d9:a9:cc:c8:7a:27:
         c6:be:42:04:cb:83:c0:01:96:38:52:c8:94:31:b0:eb:29:cb:
         35:39:38:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:29:29 2024 by rpki-client on console-ams.rpki-client.org