Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/BURi2Ui12daoZhgsFu_LkUb7NRk.roa
File:                     BURi2Ui12daoZhgsFu_LkUb7NRk.roa (raw, json)
Hash identifier:          Pd+49B4tR/k+CdI0296/8oWJa1pplcOdoJOBRTLZFIE=
Subject key identifier:   05:44:62:D9:48:B5:D9:D6:A8:66:18:2C:16:EF:CB:91:46:FB:35:19
Certificate issuer:       /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial:       0185724714F16140EABB178188591B295154
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/BURi2Ui12daoZhgsFu_LkUb7NRk.roa
Signing time:             Mon 02 Jan 2023 11:38:59 +0000
ROA not before:           Mon 02 Jan 2023 11:38:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     203196
IP address blocks:        37.139.38.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:47:14:f1:61:40:ea:bb:17:81:88:59:1b:29:51:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
        Validity
            Not Before: Jan  2 11:38:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=054462d948b5d9d6a866182c16efcb9146fb3519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:fb:39:b3:c4:2e:b1:26:69:fe:cb:96:bb:79:
                    ae:ab:3a:eb:b8:bf:9c:62:c7:5d:0f:e7:5d:99:8e:
                    f8:bc:b9:61:f0:01:bd:e6:36:6d:0f:e4:81:59:c5:
                    36:68:b7:cd:76:53:1c:be:c9:d4:a8:59:83:48:04:
                    c6:b2:55:69:42:3b:6a:05:11:1c:3b:e9:eb:ea:8b:
                    a6:ac:22:b4:23:74:13:78:3e:ad:9c:2b:74:2d:30:
                    17:31:40:4c:35:05:6f:96:24:36:bd:ca:a7:ae:03:
                    5a:88:04:d7:87:40:d2:a5:64:06:5b:1c:13:02:8c:
                    4c:7e:cb:14:fc:fc:40:67:56:90:97:7d:27:84:19:
                    64:a6:17:ef:d4:52:ab:e2:db:c9:6e:44:bd:2d:19:
                    19:38:dd:ef:b1:a1:29:73:99:f9:e7:11:ac:b4:da:
                    57:cb:a2:d2:81:0f:fb:51:35:c1:77:15:af:c6:3c:
                    e0:fe:49:be:65:b1:1f:9f:21:09:82:7d:24:2a:d0:
                    9e:8b:5c:f3:a3:8d:f9:f6:c8:ed:1e:6b:e3:e9:76:
                    d0:0c:d9:c4:16:a3:0e:3b:9b:dc:a7:1a:46:66:3c:
                    42:d5:66:db:c9:62:2a:8d:c0:11:48:ac:ff:85:b2:
                    39:3d:46:a6:ff:a4:5c:98:3e:15:42:e4:d9:8f:6f:
                    e2:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:44:62:D9:48:B5:D9:D6:A8:66:18:2C:16:EF:CB:91:46:FB:35:19
            X509v3 Authority Key Identifier:
                keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/BURi2Ui12daoZhgsFu_LkUb7NRk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.139.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:9f:a4:b9:0c:3a:de:8c:01:be:70:ed:06:72:14:3c:b2:01:
         2c:e0:31:ba:4f:45:a3:ef:5d:53:27:8a:35:2a:7a:55:07:ba:
         0a:39:d5:ee:27:cd:83:2e:72:a1:53:45:94:bb:c0:f7:96:38:
         81:b7:4e:49:cf:ba:68:d4:83:c5:20:19:c6:6d:61:72:dd:ea:
         1a:52:bc:08:f4:50:64:1d:77:0d:da:ec:2a:f7:06:a8:a0:b4:
         9c:7f:6a:2d:52:c3:22:51:00:11:34:c9:12:40:3e:c0:b1:7e:
         c5:be:5f:41:02:af:4a:f2:a0:3e:69:2d:e0:f5:3e:92:4e:82:
         52:c2:a7:a5:72:87:e7:7b:ff:0a:6e:a0:a8:96:f1:1c:ec:26:
         db:8a:56:50:f7:66:67:19:bb:c9:c2:29:93:99:30:f3:ca:fd:
         0a:59:6d:9a:72:a6:52:25:d1:33:a4:7d:b9:f7:5a:dd:06:b8:
         eb:ae:a1:4f:c9:0f:08:2f:b8:8b:83:3c:df:bc:63:cb:3b:f6:
         7f:f8:8a:bb:d7:17:9b:fe:e0:ab:65:64:94:5b:57:e5:da:4f:
         22:14:d9:bf:1b:61:b0:27:45:a0:9f:91:ac:7a:db:2c:de:97:
         7d:21:55:d9:62:47:4c:e9:d7:20:e7:71:42:b0:27:79:17:01:
         46:22:47:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:25 2024 by rpki-client on console-fra.rpki-client.org