Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/ViQbvbyPhq7p93ILqd7R3r9BszA.roa
File:                     ViQbvbyPhq7p93ILqd7R3r9BszA.roa (raw, json)
Hash identifier:          O6yUv+kdJqIjlDgzJEgEaiPUWNmIXHP36WYyXx2ll8w=
Subject key identifier:   56:24:1B:BD:BC:8F:86:AE:E9:F7:72:0B:A9:DE:D1:DE:BF:41:B3:30
Certificate issuer:       /CN=8db34774b01979284fd9e754fea68fa3c61783d0
Certificate serial:       01893AEF05E241B90D73766ABFF0DB7FE90E
Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/ViQbvbyPhq7p93ILqd7R3r9BszA.roa
Signing time:             Sun 09 Jul 2023 13:54:50 +0000
ROA not before:           Sun 09 Jul 2023 13:54:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61220
IP address blocks:        84.54.15.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:3a:ef:05:e2:41:b9:0d:73:76:6a:bf:f0:db:7f:e9:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0
        Validity
            Not Before: Jul  9 13:54:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=56241bbdbc8f86aee9f7720ba9ded1debf41b330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7a:9b:ff:a9:5f:80:0a:d3:8b:6c:d8:a1:bb:
                    44:2e:bc:dd:0d:2b:3f:1d:42:27:63:d8:b1:06:d7:
                    9b:e8:ce:a2:44:68:6d:52:be:6e:0c:da:c3:47:43:
                    d1:d7:ed:ac:bd:8d:ab:9f:8d:8d:b8:55:cd:5c:35:
                    1b:35:a9:ba:1d:ad:6e:fd:5d:57:5e:03:b8:8d:07:
                    dd:c2:d8:ce:ce:82:8c:75:8d:42:25:87:11:c5:ba:
                    56:3a:e0:0a:b1:5d:c3:f1:92:28:64:d1:a5:9b:bf:
                    ff:94:2c:01:82:45:1e:29:bc:ef:bf:7d:e1:c2:42:
                    a0:48:8d:2d:76:e1:c3:a4:ec:72:47:52:36:f8:fa:
                    66:14:0f:52:75:3b:c7:19:0f:47:2d:a1:2c:26:3c:
                    6a:f6:55:89:13:3c:44:72:47:e9:8e:0e:d0:3f:1f:
                    16:94:22:ad:71:c0:28:4d:ec:a1:81:e2:45:82:6a:
                    9f:31:69:d8:e1:ea:6f:1d:db:48:63:69:9a:5d:63:
                    5c:fd:2d:c7:84:a1:c7:6b:5f:38:52:21:a8:83:ac:
                    63:7f:05:e7:9b:d2:cf:ad:6e:3e:ef:b5:24:6f:b5:
                    59:16:66:55:05:de:5c:b9:6b:fb:68:83:99:32:5c:
                    be:d0:3b:aa:7d:03:71:f4:b9:ed:cb:13:69:84:e3:
                    ea:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:24:1B:BD:BC:8F:86:AE:E9:F7:72:0B:A9:DE:D1:DE:BF:41:B3:30
            X509v3 Authority Key Identifier:
                keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/ViQbvbyPhq7p93ILqd7R3r9BszA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.54.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:7b:78:f6:05:21:e5:a8:ef:d7:29:43:ce:b0:8d:9c:25:0e:
         e4:f6:5b:a1:b6:0d:eb:ed:ee:f7:9b:3f:c9:46:21:d1:5f:45:
         56:8c:02:5f:dd:c1:24:10:f3:96:5c:05:1e:91:d5:31:35:33:
         29:08:2b:a2:08:88:69:e5:33:b1:f0:b1:a5:1f:2b:a7:95:10:
         85:ea:4f:bf:a1:56:9c:1d:9c:d8:d5:26:d3:7f:fb:31:0a:88:
         6f:6a:16:21:32:d8:c1:5c:0f:ce:7e:31:ad:23:1a:c6:49:11:
         e0:a5:81:19:e8:fa:26:83:cd:43:74:47:7b:27:0c:57:59:ff:
         ce:63:20:08:69:41:fe:9e:e1:e5:c9:7d:b8:60:c0:9a:23:c3:
         f8:26:84:41:70:1f:9c:ce:a1:9a:40:ff:36:06:eb:ee:11:83:
         10:d2:21:58:42:26:05:d9:7d:b0:15:8d:d7:80:db:87:fb:d4:
         a3:46:62:67:1f:8a:31:b5:fd:d8:1a:b8:ce:33:d8:97:4c:35:
         33:9f:34:23:01:96:13:3d:92:1d:c3:9e:42:26:91:aa:41:9a:
         f8:f8:80:f2:90:d3:55:8b:de:03:c6:3c:0b:2d:cf:ef:2b:93:
         ca:d7:4e:60:4a:9f:c7:20:61:53:54:d7:e0:f1:17:e0:3b:df:
         1b:a9:ba:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:37 2023 by rpki-client on console-fra.rpki-client.org