Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/ku4gsLzZFXf5u0wH-BM-ZDor9u0.roa
File:                     ku4gsLzZFXf5u0wH-BM-ZDor9u0.roa (raw, json)
Hash identifier:          EiGN49xKcOyXbYcuNvIFFwLpJ55qonWLWoKFhB+JcS8=
Subject key identifier:   92:EE:20:B0:BC:D9:15:77:F9:BB:4C:07:F8:13:3E:64:3A:2B:F6:ED
Certificate issuer:       /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial:       01857002758A523BF1AC5B5FB60975EACADF
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/ku4gsLzZFXf5u0wH-BM-ZDor9u0.roa
Signing time:             Mon 02 Jan 2023 01:04:47 +0000
ROA not before:           Mon 02 Jan 2023 01:04:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     28884
IP address blocks:        213.87.112.0/23 maxlen: 23
                          213.87.118.0/23 maxlen: 23
                          213.87.224.0/23 maxlen: 23
                          213.87.114.0/23 maxlen: 23
                          213.87.116.0/23 maxlen: 23
                          213.87.124.0/23 maxlen: 23
                          213.87.120.0/23 maxlen: 23
                          213.87.122.0/23 maxlen: 23
                          213.87.126.0/23 maxlen: 23
                          213.87.184.0/23 maxlen: 23
                          2a00:1fa2:8000::/33 maxlen: 33

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:02:75:8a:52:3b:f1:ac:5b:5f:b6:09:75:ea:ca:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
        Validity
            Not Before: Jan  2 01:04:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=92ee20b0bcd91577f9bb4c07f8133e643a2bf6ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:48:f9:51:27:a7:e8:a5:6e:7e:14:11:1d:c0:
                    62:d5:cd:0a:d5:c0:cd:e6:2a:db:ea:57:ee:2b:a0:
                    3d:7a:dc:8a:63:27:b3:d6:58:fd:fc:9f:3c:87:6a:
                    ca:42:19:c2:b9:a4:da:3c:22:92:c5:93:45:5a:ce:
                    eb:f1:a8:74:ca:30:39:b9:b0:15:6c:2d:eb:d1:61:
                    2b:b0:46:13:ea:e4:a4:d1:b2:49:e7:b6:66:55:92:
                    00:39:3b:a2:00:1c:49:e4:ee:ab:ce:4e:dd:8f:50:
                    21:89:e8:7a:3b:52:32:2c:dd:98:66:be:13:dd:a4:
                    b7:d1:15:7b:52:0e:27:2f:0d:4b:d0:34:77:42:bb:
                    d5:4f:be:6e:f0:c7:71:6d:9c:9f:61:38:66:0f:5d:
                    da:15:1d:c3:37:10:f8:d8:1c:aa:7f:c4:35:39:e5:
                    5c:25:68:1e:a4:92:bb:32:08:47:41:6e:a4:17:29:
                    24:7a:8c:29:1a:a3:73:51:a3:0d:c1:ce:47:e4:16:
                    b9:d8:fe:2b:e8:63:af:2f:be:93:d1:8a:1c:1d:2e:
                    17:40:1c:e7:de:71:29:07:56:8a:e7:ea:ab:b2:45:
                    79:d3:8d:3d:8f:11:b5:59:f3:46:07:0e:46:e8:68:
                    99:0e:a6:fa:d1:40:46:40:4a:c4:d8:09:ca:eb:33:
                    56:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:EE:20:B0:BC:D9:15:77:F9:BB:4C:07:F8:13:3E:64:3A:2B:F6:ED
            X509v3 Authority Key Identifier:
                keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/ku4gsLzZFXf5u0wH-BM-ZDor9u0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.87.112.0/20
                  213.87.184.0/23
                  213.87.224.0/23
                IPv6:
                  2a00:1fa2:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         8f:e9:7d:e9:a3:4f:21:18:6c:9a:52:78:90:fe:ae:3a:90:dd:
         a3:89:cf:b4:96:07:ee:dc:ec:9d:35:27:ea:ff:d7:76:c6:2b:
         a4:ab:1d:99:cd:e3:d6:d6:67:93:05:4f:5b:83:59:48:28:ef:
         f4:98:68:f8:3c:82:40:ac:95:c8:2c:3d:35:a5:33:e8:27:c4:
         8e:35:87:55:03:d4:90:c3:d9:f2:21:31:22:e5:2e:1a:e2:38:
         ab:9e:14:95:1f:96:72:02:f6:dc:e7:c3:5a:e3:88:aa:65:12:
         e5:51:13:d1:85:69:63:9e:60:3c:f9:ce:50:fd:81:cc:40:0b:
         b1:55:9e:be:03:52:d9:67:a3:33:d9:66:4c:4b:fd:73:cf:8d:
         72:02:16:b7:de:1f:c8:14:ac:cf:27:ce:b0:33:dd:08:11:9b:
         9b:5c:20:07:78:07:3b:ed:c1:a3:4e:68:7c:33:c8:63:77:1a:
         7e:77:60:9c:b7:2c:19:65:c6:1a:8b:48:7e:f1:6d:be:76:88:
         fd:06:dc:81:94:9f:3f:d6:ca:21:dd:d3:d5:e5:cf:1e:f1:b7:
         1a:d1:38:14:f2:09:e5:ee:c6:bf:52:a0:26:bd:a5:67:d8:f7:
         09:c8:54:72:0a:36:7e:bf:ca:57:c7:36:59:d4:f8:1a:37:42:
         0f:7c:dd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 6 21:13:29 2023 by rpki-client on console-fra.rpki-client.org