Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Pmpj23eDmv5UycveaoIKQDPQZ9Y.roa
File:                     Pmpj23eDmv5UycveaoIKQDPQZ9Y.roa (raw, json)
Hash identifier:          pyf1LEbn/IAxqNRZY+86V4VverCcKvvij7IyKgk2ob8=
Subject key identifier:   3E:6A:63:DB:77:83:9A:FE:54:C9:CB:DE:6A:82:0A:40:33:D0:67:D6
Certificate issuer:       /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial:       018572470FC8E326682805CDA3A0768333E7
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Pmpj23eDmv5UycveaoIKQDPQZ9Y.roa
Signing time:             Mon 02 Jan 2023 11:38:57 +0000
ROA not before:           Mon 02 Jan 2023 11:38:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     59924
IP address blocks:        5.188.218.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:47:0f:c8:e3:26:68:28:05:cd:a3:a0:76:83:33:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
        Validity
            Not Before: Jan  2 11:38:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3e6a63db77839afe54c9cbde6a820a4033d067d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:9f:7f:95:36:0f:b6:8b:25:3c:06:1f:3e:51:
                    ea:53:06:89:c5:b5:f2:06:6d:5d:31:ec:b6:6f:4f:
                    bc:9e:88:15:84:a8:9b:42:e6:e3:6e:ba:2d:37:ee:
                    6d:7f:e6:aa:b3:ac:92:82:17:62:75:af:35:83:b0:
                    74:45:23:64:09:ae:43:9f:c1:eb:5f:4a:bd:d7:fc:
                    cd:23:9a:3f:cc:75:f4:26:62:c8:31:0d:58:01:c0:
                    70:12:1c:67:fa:47:08:f4:2d:23:1b:b8:67:91:59:
                    57:02:b1:15:f4:81:be:22:a7:58:70:70:62:d8:d3:
                    3a:f3:81:d5:7d:5d:0e:c0:40:b7:74:7c:25:7c:96:
                    52:65:a8:e5:0e:1e:ba:d2:a4:5a:9a:85:77:4f:7c:
                    8e:1f:9d:12:ed:4e:37:10:2b:21:2a:a9:0e:84:22:
                    ac:5e:ee:e8:dd:11:bb:02:5c:1e:89:c0:42:8f:e4:
                    1b:8d:54:50:d5:5c:1c:4b:74:43:40:b5:bc:97:d5:
                    47:b8:6c:2e:79:25:01:2d:1d:04:40:96:37:7f:9e:
                    1c:b5:c7:99:76:a5:6f:cc:85:3a:a6:c7:0b:04:8e:
                    6a:24:3e:11:38:32:13:2d:dd:d8:7e:2e:e3:85:4e:
                    82:b9:86:9f:e4:61:bf:ae:21:f0:9b:64:95:9e:71:
                    5d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:6A:63:DB:77:83:9A:FE:54:C9:CB:DE:6A:82:0A:40:33:D0:67:D6
            X509v3 Authority Key Identifier:
                keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Pmpj23eDmv5UycveaoIKQDPQZ9Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.188.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:fa:6f:63:c1:3c:d5:04:36:2a:14:72:a9:88:f4:28:5d:3a:
         10:59:0b:ad:82:fb:39:96:f8:0c:21:21:cf:14:2b:c0:10:a2:
         6a:ca:ef:a1:79:51:a3:86:d1:9c:2b:56:7f:af:10:93:b2:7d:
         1b:71:fc:71:28:ef:27:72:e1:f1:4b:08:45:a9:a7:f3:8b:99:
         dd:2e:e5:03:6e:a2:44:31:dc:ec:e8:44:ca:74:e1:df:47:44:
         a3:83:2a:66:4f:fd:79:a2:ca:e0:4b:e0:8c:72:e0:92:98:4d:
         fe:6a:0b:7b:a6:e4:b3:1b:7e:00:7f:2c:e1:66:2e:ec:75:b8:
         d3:b9:55:85:7f:fe:f3:2f:74:c9:b7:a4:56:0c:b6:76:c7:f8:
         9c:58:10:e5:93:f5:9e:9b:6b:de:05:e3:4c:c8:1a:24:b7:83:
         3e:22:fc:d3:69:9f:e1:6c:13:40:7b:fc:38:0a:98:8e:af:8b:
         c0:e4:a4:eb:89:a8:bb:e0:e1:5d:a8:40:e1:2f:c1:e0:06:ed:
         43:b9:9d:54:66:43:86:b9:2d:7e:66:14:7f:09:2a:30:6a:23:
         d6:28:29:16:4a:8d:0b:c4:4a:ac:80:fd:a5:3d:9f:dd:7f:5d:
         c4:a3:5e:e0:67:a8:c9:08:b9:8a:d1:cd:b5:21:ce:f5:fb:f7:
         c1:3c:94:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:43 2023 by rpki-client on console-ams.rpki-client.org