Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/1-b5_Qs_UrDVURLYaCjN5kIIsN44.roa
File:                     1-b5_Qs_UrDVURLYaCjN5kIIsN44.roa (raw, json)
Hash identifier:          bc6gPkzVJNEJuaezT76kTQWrJPZ4Jazdp/rLLWUmYvg=
Subject key identifier:   F9:BE:7F:42:CF:D4:AC:35:54:44:B6:1A:0A:33:79:90:82:2C:37:8E
Certificate issuer:       /CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
Certificate serial:       01856BD335EB37BF32714EF8B130E5E672A7
Authority key identifier: 00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/1-b5_Qs_UrDVURLYaCjN5kIIsN44.roa
Signing time:             Sun 01 Jan 2023 05:34:41 +0000
ROA not before:           Sun 01 Jan 2023 05:34:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206543
IP address blocks:        185.44.231.0/24 maxlen: 24
                          185.44.230.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:d3:35:eb:37:bf:32:71:4e:f8:b1:30:e5:e6:72:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0083f697954ec7cc492e5aa46cc8ef13fc8eda91
        Validity
            Not Before: Jan  1 05:34:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f9be7f42cfd4ac355444b61a0a337990822c378e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7d:60:6d:da:82:55:f7:69:b4:04:22:6b:22:
                    5d:2a:4d:bb:8a:1f:88:c4:4d:cb:4f:88:6d:3f:df:
                    64:df:56:3a:4b:31:07:ab:d9:ce:e8:75:87:f5:72:
                    bc:cc:6c:34:72:20:a2:be:f2:27:23:b3:a2:75:6e:
                    93:16:ba:db:f7:9f:fc:b4:bc:76:91:b7:e0:1c:9d:
                    6e:cf:5e:f0:d4:24:1f:4f:53:8b:e0:66:2a:23:d8:
                    29:37:55:0a:23:75:72:a5:83:b1:84:02:f9:1b:89:
                    cc:ea:65:6d:fc:07:81:74:9c:70:07:a2:26:4b:42:
                    ef:34:5a:ad:f1:aa:6b:a9:67:74:20:19:a7:17:35:
                    e5:85:24:ff:7c:45:4d:79:bc:f8:08:b3:f1:cc:d2:
                    7b:79:23:65:59:05:db:6e:93:e9:b4:7b:e2:0e:e8:
                    67:c9:8d:fe:6c:6b:53:25:9c:c4:b8:cb:be:9e:fa:
                    75:a1:4c:96:44:d0:ab:e8:77:00:fc:c0:bc:8c:c3:
                    f6:d0:62:e1:09:b9:8d:c2:68:37:59:e8:11:6c:57:
                    bf:2b:9e:aa:5a:9c:99:50:78:1b:d5:69:9d:7b:d9:
                    9d:01:e0:c6:e4:ea:3d:0f:7d:30:bf:83:b8:cb:7c:
                    ec:5d:66:f9:71:23:b3:9e:aa:a5:a7:ba:a3:9b:84:
                    67:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:BE:7F:42:CF:D4:AC:35:54:44:B6:1A:0A:33:79:90:82:2C:37:8E
            X509v3 Authority Key Identifier:
                keyid:00:83:F6:97:95:4E:C7:CC:49:2E:5A:A4:6C:C8:EF:13:FC:8E:DA:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIP2l5VOx8xJLlqkbMjvE_yO2pE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/1-b5_Qs_UrDVURLYaCjN5kIIsN44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a92fce-7a1b-4cb7-9e5c-819db16b66ee/1/AIP2l5VOx8xJLlqkbMjvE_yO2pE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.44.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:da:38:7b:13:d3:d0:e1:88:e6:56:42:0e:ba:ea:1f:30:9b:
         db:ec:41:3b:09:f8:58:24:c5:63:9f:1b:6f:93:fe:56:81:5f:
         12:a7:b4:4c:02:a0:07:8a:6c:42:7d:6b:e6:fb:4b:29:7b:72:
         1b:25:82:e8:2d:ad:56:df:95:61:16:ab:74:80:f7:04:a6:ac:
         bc:9a:e9:4b:f9:aa:39:16:83:8d:23:e5:d6:f0:fb:dd:24:a8:
         89:38:88:9b:d4:48:d7:e2:cc:25:20:cc:fe:b5:ac:ae:cb:45:
         02:86:79:88:97:6b:08:4c:0b:d5:7a:06:14:d5:f6:7f:9d:ba:
         37:b1:16:07:51:57:6a:c5:a2:a8:78:7a:49:f9:84:83:c8:fd:
         a4:2b:ca:e5:a4:05:80:40:4e:03:01:be:66:57:42:05:7b:ac:
         70:3f:7b:91:eb:b1:93:69:d3:07:73:c5:d9:91:f2:eb:a7:eb:
         a7:60:c6:19:3b:c4:a6:31:5e:4a:c6:3a:24:39:3b:9f:ae:16:
         3f:71:11:c4:1f:54:d3:b3:e3:25:2d:24:5f:fa:f5:65:00:a0:
         6f:86:af:20:d3:02:30:2f:e3:8c:74:c8:d5:fe:ee:d7:84:15:
         f3:51:82:94:10:39:49:7e:d3:00:72:a1:c5:c6:43:ce:8f:f6:
         18:b7:66:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:43 2024 by rpki-client on console-ams.rpki-client.org