Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/JrXXQkJYjkkIcKWPSPFEJ9p5HVM.roa
File:                     JrXXQkJYjkkIcKWPSPFEJ9p5HVM.roa (raw, json)
Hash identifier:          /cJzR+KTH52vxtBUFtcanl7UFcUiRcFAi6sLaRBMTo8=
Subject key identifier:   26:B5:D7:42:42:58:8E:49:08:70:A5:8F:48:F1:44:27:DA:79:1D:53
Certificate issuer:       /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial:       018BC99B910711CE6FDF06670ABB769975FC
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/JrXXQkJYjkkIcKWPSPFEJ9p5HVM.roa
Signing time:             Mon 13 Nov 2023 16:54:57 +0000
ROA not before:           Mon 13 Nov 2023 16:54:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211439
IP address blocks:        94.103.187.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:c9:9b:91:07:11:ce:6f:df:06:67:0a:bb:76:99:75:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
        Validity
            Not Before: Nov 13 16:54:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=26b5d74242588e490870a58f48f14427da791d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:21:f9:0e:42:08:6e:7a:93:87:61:1f:74:be:
                    2e:2b:bd:b2:e0:66:cf:da:86:0e:af:e0:5d:96:20:
                    f4:6b:5e:4f:e9:49:ae:48:a9:03:12:c6:26:07:b7:
                    cf:0f:2d:e7:20:82:ae:3f:7d:aa:1d:25:ca:f0:c3:
                    ef:a5:c9:f7:e8:4f:80:29:91:66:67:4c:31:10:dc:
                    56:04:88:8f:b6:30:c2:c7:dd:a1:43:4b:32:39:71:
                    64:de:06:59:f7:9d:ed:29:f7:0f:8e:21:54:8f:93:
                    9d:30:91:da:4e:e4:6f:c2:ff:f9:1c:01:57:71:f3:
                    57:51:70:a9:7b:6b:fa:0b:8c:fd:a0:04:21:4a:21:
                    ca:50:61:b1:bb:08:25:55:7e:d6:cd:fa:98:cf:f3:
                    05:eb:bf:c4:de:38:b5:cf:7e:b7:d7:5e:76:f7:cb:
                    42:a3:1a:2d:e3:7e:fe:70:d1:9e:c0:e4:8e:53:be:
                    5f:83:2b:63:ae:41:0f:7e:46:be:21:a6:ed:08:90:
                    69:89:91:56:79:91:5a:ec:94:e8:01:9a:c0:c2:9c:
                    b0:df:4a:2b:51:ee:da:34:9d:f6:59:dc:3f:85:8b:
                    51:99:c7:e4:3d:fb:cc:26:9b:22:83:da:2f:ae:ab:
                    b8:61:c7:dd:0a:df:50:3d:d7:59:db:59:2d:c9:37:
                    ff:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B5:D7:42:42:58:8E:49:08:70:A5:8F:48:F1:44:27:DA:79:1D:53
            X509v3 Authority Key Identifier:
                keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/JrXXQkJYjkkIcKWPSPFEJ9p5HVM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.103.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:8c:d1:56:2e:3e:33:10:52:b8:0c:79:17:86:0a:e4:56:d1:
         1d:88:ac:1b:ec:c3:02:e3:43:ed:31:ba:67:ea:ad:af:96:d8:
         0b:38:b1:63:6b:ff:46:b3:2d:15:b0:3c:d0:0c:d7:10:9f:8d:
         3e:39:97:22:3c:a1:19:9d:2f:d8:f8:04:8a:79:19:64:df:c9:
         08:34:5a:bc:47:5d:6f:c6:47:42:37:bf:d6:30:cb:8f:28:5c:
         74:02:0d:c3:d1:2d:ac:69:9c:5c:33:43:1b:17:45:af:cd:b5:
         c6:c8:d6:9f:7a:aa:55:d5:53:5d:6d:3f:04:67:2f:f8:db:65:
         62:18:01:ec:ff:4c:87:28:7b:b6:db:7b:78:a4:2b:f9:b6:8a:
         59:7c:c0:e3:e8:ac:e1:69:6e:32:77:8d:9c:5c:b7:7c:cd:15:
         c4:bd:9d:25:7b:bb:1d:9a:cd:0e:61:c7:a0:88:17:26:2a:a0:
         7e:d6:46:55:47:44:18:e9:1f:4f:79:b7:e8:87:00:c7:18:43:
         4c:00:4e:89:90:e2:db:7c:c4:12:19:9a:48:59:c4:59:64:77:
         15:80:03:af:3d:dd:f7:e6:86:b8:cb:70:0e:bc:b9:37:23:42:
         84:24:c4:ae:c3:ae:be:eb:ad:5f:53:2f:fd:1f:49:86:77:a4:
         b4:e3:a4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:25 2024 by rpki-client on console-fra.rpki-client.org