Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/VY2RgMddkgt_a7AUW9rjbuvQ9YE.roa
File:                     VY2RgMddkgt_a7AUW9rjbuvQ9YE.roa (raw, json)
Hash identifier:          H83hfZKf1YFQ1m7LUDajp8Y9OwIVb5KbFf8om02sWFY=
Subject key identifier:   55:8D:91:80:C7:5D:92:0B:7F:6B:B0:14:5B:DA:E3:6E:EB:D0:F5:81
Certificate issuer:       /CN=de01c443831cf930b7478708d76a3cf44d89a162
Certificate serial:       01887C994784D429D14F5C78315C33C02C61
Authority key identifier: DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/VY2RgMddkgt_a7AUW9rjbuvQ9YE.roa
Signing time:             Fri 02 Jun 2023 14:53:20 +0000
ROA not before:           Fri 02 Jun 2023 14:53:20 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62263
IP address blocks:        185.42.27.0/24 maxlen: 24
                          185.42.26.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:7c:99:47:84:d4:29:d1:4f:5c:78:31:5c:33:c0:2c:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de01c443831cf930b7478708d76a3cf44d89a162
        Validity
            Not Before: Jun  2 14:53:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=558d9180c75d920b7f6bb0145bdae36eebd0f581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4f:0f:ef:de:04:f5:af:0c:26:2a:67:b0:b5:
                    85:5f:7c:f5:d6:cc:4b:a7:7e:bb:e2:78:7d:4e:20:
                    4b:52:05:b5:87:95:16:75:8f:b5:fe:72:9d:d1:db:
                    ee:ee:32:8b:f4:de:17:43:83:97:43:3e:1a:da:02:
                    12:7f:45:00:9a:15:05:e3:e6:a5:e4:a2:c2:8b:a8:
                    81:71:39:50:f1:02:c6:14:69:7c:bf:7e:eb:22:e6:
                    80:77:ff:ba:1a:7f:30:bd:79:50:08:03:8f:9c:85:
                    10:83:6b:75:be:74:19:8e:21:92:a2:3c:6e:ff:18:
                    87:09:40:34:58:4e:be:6e:7d:b0:71:a9:a3:79:78:
                    b1:fb:1f:17:5d:55:21:6d:9a:1a:3d:7b:ae:aa:56:
                    08:32:64:87:31:48:5f:20:60:ff:5d:84:31:1f:cc:
                    81:3c:13:b1:aa:6e:a5:be:03:22:06:27:18:ff:46:
                    b0:8c:2f:47:36:0c:29:4f:99:b7:5b:5f:3e:94:88:
                    5a:ad:80:39:f1:da:08:d9:dd:e3:f7:ea:24:44:72:
                    00:6d:ac:b8:cc:72:1b:2c:95:47:c1:11:07:90:d3:
                    e3:7c:20:10:a7:c4:37:f3:d9:aa:8b:68:f8:0d:14:
                    6a:7e:a0:a5:82:b0:60:6a:c8:97:cb:66:7d:89:97:
                    04:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:8D:91:80:C7:5D:92:0B:7F:6B:B0:14:5B:DA:E3:6E:EB:D0:F5:81
            X509v3 Authority Key Identifier:
                keyid:DE:01:C4:43:83:1C:F9:30:B7:47:87:08:D7:6A:3C:F4:4D:89:A1:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gHEQ4Mc-TC3R4cI12o89E2JoWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/VY2RgMddkgt_a7AUW9rjbuvQ9YE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1cb8ca-5993-4d17-a61e-ee7328adcc7c/1/3gHEQ4Mc-TC3R4cI12o89E2JoWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.42.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:fa:4b:96:49:b4:8d:73:fd:ab:ad:df:71:72:d7:e2:37:15:
         2f:c4:5b:6e:d7:79:d6:a9:ae:65:68:80:c2:d6:f3:19:18:81:
         65:73:81:4c:31:42:bf:9b:62:81:54:cb:8b:5e:6f:f3:65:72:
         80:aa:61:7f:2a:a4:4e:59:5b:92:cb:cd:b4:1e:86:21:3b:b1:
         9a:3c:17:43:fb:b0:1d:a6:4c:73:86:b9:53:de:40:58:b9:b8:
         32:d8:07:5a:49:d5:07:ab:47:87:13:cc:09:d8:b1:68:67:00:
         35:2e:38:59:75:c8:86:68:35:6d:8f:1a:47:1f:69:7b:3e:84:
         12:c8:b5:dc:00:6f:68:92:91:69:dd:e7:30:77:cf:a3:aa:bf:
         4a:50:c8:24:6f:ac:62:97:e7:23:7a:a1:27:0d:a9:52:b7:93:
         8e:23:ca:82:96:8b:8a:4d:39:d0:cd:33:ab:34:fb:59:09:34:
         67:60:a3:28:5f:fb:13:22:9d:37:0c:a8:48:7c:a4:9d:8c:87:
         1e:1f:e2:6f:07:5f:aa:b0:ff:fd:e4:cd:5e:96:d1:59:80:dd:
         81:be:00:e4:87:eb:83:c1:44:a1:f1:08:d2:15:c8:92:2f:74:
         b9:35:ad:53:76:4a:9a:70:e9:09:6d:10:ad:f8:24:35:74:52:
         f5:4d:d1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:35 2023 by rpki-client on console-ams.rpki-client.org