Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/dQVAp3e4XlSnxafBmFJ8EUM-mlg.roa
File:                     dQVAp3e4XlSnxafBmFJ8EUM-mlg.roa (raw, json)
Hash identifier:          WzkE1+AFtyKFofcl96UtdvygfdX7RJZnXAGHcysZ3g0=
Subject key identifier:   75:05:40:A7:77:B8:5E:54:A7:C5:A7:C1:98:52:7C:11:43:3E:9A:58
Certificate issuer:       /CN=7c3c39d1899e699bf5177418ee381489edff4380
Certificate serial:       01875F8544ABA3560DF076DAF2070D9050B8
Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/dQVAp3e4XlSnxafBmFJ8EUM-mlg.roa
Signing time:             Sat 08 Apr 2023 06:19:42 +0000
ROA not before:           Sat 08 Apr 2023 06:19:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44547
IP address blocks:        185.27.178.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:5f:85:44:ab:a3:56:0d:f0:76:da:f2:07:0d:90:50:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380
        Validity
            Not Before: Apr  8 06:19:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=750540a777b85e54a7c5a7c198527c11433e9a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:98:7c:d7:4b:af:5b:06:cd:89:30:a4:3d:43:
                    f9:0f:95:7e:1e:5a:18:fc:9e:72:b8:66:bc:53:b5:
                    be:a1:83:28:31:dc:53:a4:3e:2c:b1:07:03:f6:31:
                    76:7e:47:9f:46:09:5c:4f:dd:a4:e2:d4:23:64:3e:
                    01:51:1b:99:dc:e1:40:5c:49:23:5a:92:fb:41:71:
                    6c:45:e3:b0:2f:2f:d0:99:2b:ea:48:db:f6:fb:68:
                    54:85:71:e2:46:9d:e3:95:73:68:96:ef:f2:1b:15:
                    ec:68:1f:a0:8b:2b:a9:3e:b8:cc:36:83:7d:6c:8f:
                    ff:2e:74:7a:ca:b9:22:e9:d4:ce:8e:32:a2:df:a7:
                    97:00:88:9c:41:0a:23:c3:d1:4a:c4:cc:1c:e5:09:
                    50:3a:3e:a6:17:4b:52:cf:9b:25:8b:a4:ab:39:1a:
                    c6:e3:1f:cc:3e:5d:26:09:02:07:0b:c1:0e:24:bb:
                    f6:58:ed:e8:a9:fd:8c:3b:8c:55:65:a8:60:08:24:
                    42:53:fe:4d:84:22:71:53:fe:16:ae:12:26:26:d6:
                    46:b2:cb:65:cf:1f:a1:92:e4:16:64:29:46:85:1f:
                    a8:f2:83:37:e4:ec:e0:c2:71:fc:ae:6d:4d:db:a2:
                    a3:e7:45:91:ee:0a:42:a1:88:b5:35:44:9d:98:08:
                    58:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:05:40:A7:77:B8:5E:54:A7:C5:A7:C1:98:52:7C:11:43:3E:9A:58
            X509v3 Authority Key Identifier:
                keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/dQVAp3e4XlSnxafBmFJ8EUM-mlg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.27.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:5f:e2:05:31:9a:22:46:2f:aa:3a:6d:17:7f:7f:6e:d2:44:
         52:34:68:7f:51:8e:fb:c9:e3:c1:72:73:65:58:7e:a9:76:c3:
         cb:be:c5:c6:3f:05:2e:bc:95:51:8d:62:ea:35:94:18:95:97:
         55:de:d6:2c:cc:2e:f7:ae:10:16:41:ff:29:5b:3e:52:f3:79:
         b6:80:a2:c2:f8:16:b3:d6:fa:f6:94:99:51:2c:58:fa:63:1a:
         5a:06:8a:d6:91:25:1a:4e:b4:0a:18:39:6b:7a:fb:d6:bd:65:
         8b:e0:35:51:f7:7c:d2:96:c8:ff:69:7d:83:01:64:fa:e9:08:
         bf:9f:a0:d7:ec:fa:15:3a:18:71:26:d7:e5:a2:f1:03:73:ee:
         ad:ae:57:a6:79:c9:d5:b6:21:d3:a6:e7:2e:e1:c8:16:57:ae:
         ea:67:24:b9:b7:f8:9f:37:f5:f5:a6:d1:1d:52:b8:85:49:65:
         ca:55:76:79:02:04:be:13:29:ad:33:14:58:1f:55:7a:df:11:
         39:22:4c:42:33:9c:f2:9e:f3:d0:f9:df:64:b3:18:ee:dc:47:
         38:a2:ef:19:a0:a0:a5:b2:74:3b:20:b3:e5:b3:bb:ac:c3:a3:
         29:96:6c:0a:11:17:de:48:ac:ad:4f:d9:47:2b:ca:a4:08:c6:
         18:19:b2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:31 2023 by rpki-client on console-fra.rpki-client.org