Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/TgrzjGt40tI--zu-qCNohdelvpg.roa
File:                     TgrzjGt40tI--zu-qCNohdelvpg.roa (raw, json)
Hash identifier:          BECOPpR6N3eruauBzvaAtxwtMCE5i33SrmCXjUvzLQg=
Subject key identifier:   4E:0A:F3:8C:6B:78:D2:D2:3E:FB:3B:BE:A8:23:68:85:D7:A5:BE:98
Certificate issuer:       /CN=15286f0225c141d95857fe74646949e75dd96f28
Certificate serial:       018A033D50CF1BDF3103F045E0F89B43ED88
Authority key identifier: 15:28:6F:02:25:C1:41:D9:58:57:FE:74:64:69:49:E7:5D:D9:6F:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FShvAiXBQdlYV_50ZGlJ513Zbyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/TgrzjGt40tI--zu-qCNohdelvpg.roa
Signing time:             Thu 17 Aug 2023 11:24:24 +0000
ROA not before:           Thu 17 Aug 2023 11:24:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35753
IP address blocks:        193.8.250.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:03:3d:50:cf:1b:df:31:03:f0:45:e0:f8:9b:43:ed:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15286f0225c141d95857fe74646949e75dd96f28
        Validity
            Not Before: Aug 17 11:24:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4e0af38c6b78d2d23efb3bbea8236885d7a5be98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b2:3e:6b:6c:c3:71:67:a2:1d:5f:74:db:56:
                    27:ea:a7:e0:90:68:82:d6:e0:66:d5:e7:4e:5f:62:
                    9f:99:46:ed:9b:9a:c7:e3:7d:8d:34:2d:7f:12:a5:
                    e5:db:58:db:fa:7a:74:ed:a3:e8:50:f8:5b:45:2b:
                    63:49:fe:bf:53:97:05:3d:cd:68:ab:75:78:4a:8d:
                    c5:7f:ce:76:9d:c6:08:66:96:bb:78:f5:3f:c1:d9:
                    ce:86:35:61:db:c7:1d:7d:14:0b:b1:1c:46:17:1e:
                    34:fa:63:43:01:5f:49:02:63:ff:90:3c:04:fb:4f:
                    b7:db:eb:29:3d:2f:43:a8:4f:a8:8b:0a:db:0a:80:
                    a1:63:cc:43:7f:df:2a:87:c6:75:b0:02:ab:4a:50:
                    29:bf:23:5f:c5:a7:7e:f6:3d:36:4f:9f:45:26:fe:
                    79:35:e3:df:3c:ba:2d:a1:75:d9:74:f0:b7:75:e1:
                    7f:ba:8c:6f:e8:28:14:22:6e:a1:ed:d4:22:53:02:
                    20:42:04:70:d6:00:74:86:29:2d:72:92:14:41:d8:
                    3c:d8:30:cb:7a:9d:7c:36:44:7d:2b:82:a0:84:c6:
                    bd:9d:b0:6c:6b:43:78:8e:db:7c:2c:35:b5:42:ed:
                    92:da:d0:ca:78:8c:a1:65:ef:19:26:5e:26:a5:10:
                    6a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0A:F3:8C:6B:78:D2:D2:3E:FB:3B:BE:A8:23:68:85:D7:A5:BE:98
            X509v3 Authority Key Identifier:
                keyid:15:28:6F:02:25:C1:41:D9:58:57:FE:74:64:69:49:E7:5D:D9:6F:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FShvAiXBQdlYV_50ZGlJ513Zbyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/TgrzjGt40tI--zu-qCNohdelvpg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/63440c-3d43-458f-879e-021f50932156/1/FShvAiXBQdlYV_50ZGlJ513Zbyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.8.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:30:55:5d:55:c2:bd:72:c2:c9:73:bc:a9:0f:56:05:14:c2:
         69:da:e9:e0:ef:1e:a9:e8:60:49:2b:81:60:e9:3e:b3:4a:33:
         e8:6e:29:f2:b1:17:7b:c0:3c:0e:fe:3d:9e:b7:ab:c6:71:04:
         db:7b:b4:06:7a:61:a9:b2:e2:15:46:4e:f9:1b:f6:8c:30:f2:
         ed:7d:c7:b1:f1:e8:35:a0:24:2a:f1:0f:3b:5c:e3:41:c6:65:
         e1:ab:90:60:f8:1a:0f:7e:b8:d3:be:6b:b6:b0:8b:d5:75:6a:
         1a:10:5b:6e:ee:b3:37:31:33:ce:43:7c:0c:c5:74:79:52:ee:
         5a:e1:2c:1f:ae:6d:68:67:83:59:5c:a4:7a:9f:82:88:ed:53:
         12:37:92:86:fc:d4:4d:4f:f2:33:e9:9c:b3:2e:f9:b1:8e:61:
         f7:32:fc:6e:2c:81:a7:2d:aa:99:4e:1e:80:81:bf:95:4a:39:
         8a:af:be:15:8d:d7:9e:89:1d:f7:c8:1f:21:db:39:0d:b6:fc:
         2a:d3:dc:3b:7b:04:72:23:3c:e8:00:a8:85:86:b4:87:18:13:
         ab:af:16:b9:ad:74:0a:f4:00:a5:c7:ca:e6:47:80:ae:54:46:
         78:1f:6e:53:0f:09:49:48:15:37:e9:a7:f7:10:9c:c9:e0:1c:
         1f:d0:b9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:51 2024 by rpki-client on console-ams.rpki-client.org