Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/jpxpepm66kH8hXPvYf9-1TY9BtY.roa
File:                     jpxpepm66kH8hXPvYf9-1TY9BtY.roa (raw, json)
Hash identifier:          uXayGddzE5uSkuUl1ajVKcInIGxjXdB3VnOmWzToUhE=
Subject key identifier:   8E:9C:69:7A:99:BA:EA:41:FC:85:73:EF:61:FF:7E:D5:36:3D:06:D6
Certificate issuer:       /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial:       01891A6D4DF15E7E16777D6D04BF30DA08FB
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/jpxpepm66kH8hXPvYf9-1TY9BtY.roa
Signing time:             Mon 03 Jul 2023 06:25:18 +0000
ROA not before:           Mon 03 Jul 2023 06:25:18 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209813
IP address blocks:        5.8.66.0/24 maxlen: 24
                          5.8.67.0/24 maxlen: 24
                          5.188.50.0/24 maxlen: 24
                          5.188.194.0/24 maxlen: 24
                          5.188.195.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:1a:6d:4d:f1:5e:7e:16:77:7d:6d:04:bf:30:da:08:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
        Validity
            Not Before: Jul  3 06:25:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8e9c697a99baea41fc8573ef61ff7ed5363d06d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ea:9b:d6:de:71:03:3a:97:7a:2a:6e:2a:9e:
                    12:a6:3d:97:96:b1:65:95:a7:d6:7b:fa:d8:f7:b3:
                    78:0e:9b:27:e0:d8:97:e2:e6:40:53:07:80:6a:7b:
                    06:4d:aa:15:3b:ec:7c:84:61:85:f9:2a:d3:16:74:
                    6c:91:5e:b1:d3:1d:d4:22:23:2b:25:d3:83:8c:1b:
                    6a:94:be:54:14:43:5c:5a:71:d4:c6:00:06:52:cd:
                    2e:8a:0c:0c:76:9a:ca:6e:73:d0:95:18:1c:71:6e:
                    7e:06:9b:7d:be:1b:ff:6f:9f:b1:52:ba:f8:8a:72:
                    0e:72:ab:43:57:aa:a5:ce:87:1b:1f:6d:8f:20:ca:
                    f7:a5:a5:fd:6a:b2:3f:fc:87:e8:e0:40:05:f0:69:
                    8f:94:06:ab:4a:88:0f:1b:1b:63:c1:1f:e9:e3:59:
                    c3:bc:e0:26:96:c8:f9:d6:59:15:ef:eb:ec:aa:fa:
                    07:e2:0f:d9:7b:74:c4:cf:02:a1:97:17:71:73:58:
                    5a:16:d1:61:14:b7:d8:d0:11:4e:f4:e3:9b:9f:01:
                    b9:03:fc:4c:e4:bd:27:40:21:a7:5c:ad:0b:bf:bf:
                    db:a6:d8:80:a7:8d:2e:0c:f9:f3:9e:65:7a:b8:d9:
                    6f:23:6e:d3:cf:ad:fc:91:a1:0e:32:74:be:6f:ea:
                    3e:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:9C:69:7A:99:BA:EA:41:FC:85:73:EF:61:FF:7E:D5:36:3D:06:D6
            X509v3 Authority Key Identifier:
                keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/jpxpepm66kH8hXPvYf9-1TY9BtY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.8.66.0/23
                  5.188.50.0/24
                  5.188.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:43:d7:94:7e:ad:b6:5f:a5:98:4e:1d:68:c1:7c:e7:5d:5e:
         b6:6a:3e:56:0f:26:e2:5c:1e:01:4a:bb:02:34:39:38:ae:5d:
         65:ba:20:51:54:16:c8:9e:ba:18:57:74:cc:40:99:c2:ad:54:
         44:c4:97:38:4e:45:b3:d2:20:71:08:98:e2:b1:4f:f8:f2:b3:
         ed:63:06:4a:42:93:1e:33:2f:e9:da:90:24:59:ab:cf:96:ec:
         e5:a8:c6:f9:33:ee:61:64:ec:98:aa:6f:49:e3:00:1e:11:30:
         14:5d:06:fb:e4:8d:f9:04:d7:bb:30:d3:d1:20:ad:87:ea:36:
         4b:a6:df:d2:c5:3d:48:9e:94:cc:80:8f:1e:13:c8:18:10:5a:
         f8:5c:13:32:70:4b:b9:bb:a5:85:99:36:4d:54:22:e7:a2:0b:
         a5:00:e7:3a:47:51:33:d6:4d:1a:4a:f5:7a:b0:7b:d1:f7:69:
         70:bc:fa:37:2f:0f:f1:a7:32:e6:83:35:83:7b:e5:1c:b8:f1:
         93:08:b9:eb:62:05:99:ac:c5:cc:b6:7e:b9:27:a5:5d:d9:2b:
         1d:b5:e8:17:b8:8a:d5:2f:eb:c9:3c:5a:ba:fd:7e:1e:02:46:
         66:9b:82:13:7f:a6:e3:d7:0f:d8:3d:40:b3:8e:e2:3a:36:3a:
         b3:c1:5f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 22 07:53:13 2023 by rpki-client on console-ams.rpki-client.org