Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Uzdou4DZ1br8Zz3Lar7MG1w89dc.roa
File:                     Uzdou4DZ1br8Zz3Lar7MG1w89dc.roa (raw, json)
Hash identifier:          hD+c53wU5iuFslsHPOm3p2Fubz9gTIDlY2TZd3Q28IM=
Subject key identifier:   53:37:68:BB:80:D9:D5:BA:FC:67:3D:CB:6A:BE:CC:1B:5C:3C:F5:D7
Certificate issuer:       /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial:       0185724717C6E670BE129357BEBE45510172
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Uzdou4DZ1br8Zz3Lar7MG1w89dc.roa
Signing time:             Mon 02 Jan 2023 11:38:59 +0000
ROA not before:           Mon 02 Jan 2023 11:38:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205672
IP address blocks:        5.188.164.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:47:17:c6:e6:70:be:12:93:57:be:be:45:51:01:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
        Validity
            Not Before: Jan  2 11:38:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=533768bb80d9d5bafc673dcb6abecc1b5c3cf5d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e1:89:b8:1e:48:59:a9:01:56:81:e3:89:40:
                    21:94:4c:94:f6:df:05:32:8e:7a:41:a3:ce:4d:32:
                    50:27:af:9e:b6:6c:a9:fb:81:91:c7:75:b8:37:49:
                    0c:bb:be:0d:eb:01:ab:65:44:60:36:25:92:1a:67:
                    9e:c2:26:ca:2b:ed:b1:9d:e8:93:f1:fa:e8:e4:b3:
                    51:a0:62:2f:30:d9:b4:f1:07:fb:2c:74:d4:67:ab:
                    fc:28:0b:e1:54:37:46:b4:9f:32:dd:25:a9:c2:1e:
                    04:c8:0d:50:57:3c:a9:35:89:60:65:45:5e:56:93:
                    e3:80:ff:b4:a8:e0:20:c2:91:fd:3d:14:bc:cf:df:
                    44:d9:7c:eb:6b:67:48:75:15:87:6f:88:27:9d:60:
                    0f:94:0f:0a:cb:a0:ee:a8:d2:bb:c0:b8:65:7a:82:
                    37:34:90:11:3b:40:ad:b8:89:0d:f1:d5:b7:3e:13:
                    40:7c:4e:da:39:98:f5:c3:26:56:bc:60:0a:27:9a:
                    0f:57:46:ee:e7:37:d9:66:7d:81:2d:9e:7a:b9:d1:
                    bd:88:34:5b:f9:88:2b:f1:45:db:41:a5:73:af:c5:
                    10:d5:1b:f0:9e:52:91:20:a2:ea:1e:c8:b2:10:d6:
                    41:c2:83:c4:65:f7:18:a7:93:d5:cc:5c:43:87:99:
                    91:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:37:68:BB:80:D9:D5:BA:FC:67:3D:CB:6A:BE:CC:1B:5C:3C:F5:D7
            X509v3 Authority Key Identifier:
                keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Uzdou4DZ1br8Zz3Lar7MG1w89dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.188.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:cf:d6:2f:3d:1d:5d:75:68:f8:ac:2f:95:e0:37:3f:76:35:
         44:93:50:ff:d0:35:9f:ef:a3:2b:97:aa:a2:2f:ea:f6:41:4d:
         bf:06:5e:59:e9:39:b5:11:df:23:7a:2a:4b:a6:e0:20:65:ec:
         27:37:de:fc:fe:cf:1d:55:03:10:0d:7e:2e:1c:21:69:71:9d:
         e7:f2:17:3d:39:95:83:5e:ff:6a:53:3c:45:ad:3a:ae:da:1e:
         07:d6:80:ec:9a:78:4d:11:4e:43:f4:75:4d:51:f2:ba:f3:4a:
         0d:94:62:ce:bb:0a:0d:9a:32:75:7f:67:16:62:4c:1b:1b:5f:
         b4:37:80:e4:c5:69:e1:fb:30:6e:4e:51:ca:a5:13:b2:e8:c1:
         b0:87:d4:a7:ac:f9:57:46:4a:9c:fb:71:3c:d7:da:1a:5c:88:
         67:a9:40:55:34:7f:06:d7:33:3a:49:05:2d:59:37:a7:5b:56:
         7a:a5:18:d3:1d:21:cb:a0:4c:66:f2:59:f7:ee:04:43:9f:80:
         52:cb:fc:fa:b7:3f:9b:3f:e1:f3:31:61:c8:32:b9:84:54:c7:
         6e:39:10:97:4d:9e:e5:67:11:e1:3a:60:a0:1f:b7:83:fe:6c:
         02:68:ea:2c:45:bd:5a:57:15:8a:88:b6:b9:2b:77:39:8c:91:
         31:ba:3f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:43 2023 by rpki-client on console-ams.rpki-client.org