Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/V6B7nIs-rNR4uHDfvfMTjAhIdnY.roa
File:                     V6B7nIs-rNR4uHDfvfMTjAhIdnY.roa (raw, json)
Hash identifier:          rTCqr/GmIgqYLvmAOwfaWdvaVuVMpgZzdvS14yc6U24=
Subject key identifier:   57:A0:7B:9C:8B:3E:AC:D4:78:B8:70:DF:BD:F3:13:8C:08:48:76:76
Certificate issuer:       /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial:       01873132585C3B9875F427E529D3DE80F9C6
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/V6B7nIs-rNR4uHDfvfMTjAhIdnY.roa
Signing time:             Thu 30 Mar 2023 06:26:35 +0000
ROA not before:           Thu 30 Mar 2023 06:26:35 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     64073
IP address blocks:        5.134.84.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:31:32:58:5c:3b:98:75:f4:27:e5:29:d3:de:80:f9:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
        Validity
            Not Before: Mar 30 06:26:35 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=57a07b9c8b3eacd478b870dfbdf3138c08487676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ae:eb:81:89:a3:35:57:66:54:72:f6:38:46:
                    75:7c:51:50:34:40:35:ad:8f:d2:6b:c4:f6:32:74:
                    cb:39:0a:1a:bb:c3:b4:12:63:c3:c1:5f:41:a7:d1:
                    9a:9c:ce:3f:f1:26:23:1c:73:5d:d5:ec:c3:dc:17:
                    9c:6c:2a:e3:ca:46:89:c7:60:7e:c1:fc:ea:8e:34:
                    fe:52:41:df:8f:48:34:02:84:87:80:d3:5b:07:40:
                    3c:79:3c:ac:c5:24:bf:56:87:43:ed:d7:bd:87:56:
                    c8:47:03:85:87:81:c3:4b:91:31:7a:54:a8:85:31:
                    a3:61:ee:76:58:94:70:40:55:d2:e0:27:20:35:5d:
                    65:94:5c:82:b9:f7:de:f0:1f:2c:26:b0:9d:2c:68:
                    9e:dd:2e:7c:87:c4:9e:e2:12:84:f5:e0:fd:d6:01:
                    fd:70:96:1e:ca:65:5e:88:72:30:fc:96:9a:5b:07:
                    14:b3:05:13:7d:9c:a2:6e:c4:73:95:36:9f:55:1f:
                    05:fd:aa:b2:f4:35:7b:79:a5:ff:57:cd:e4:6b:c7:
                    04:1c:40:65:13:95:5e:4c:d5:0c:ec:09:22:74:78:
                    18:5b:4f:2f:fd:01:a4:b1:a7:91:b5:04:55:0f:ba:
                    8f:1c:f2:32:0d:67:21:0e:8f:a6:60:f6:0c:7d:86:
                    bd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A0:7B:9C:8B:3E:AC:D4:78:B8:70:DF:BD:F3:13:8C:08:48:76:76
            X509v3 Authority Key Identifier:
                keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/V6B7nIs-rNR4uHDfvfMTjAhIdnY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.134.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:9b:01:84:7c:8f:6b:50:ca:9c:2f:90:41:e6:11:26:f0:a1:
         f2:b7:91:63:56:84:eb:1d:06:75:2d:fe:b2:11:8f:99:5a:02:
         30:7f:69:21:f9:b0:45:89:cd:80:30:06:87:d9:6e:63:9b:11:
         23:c9:d3:45:11:3d:4e:3d:a4:e1:4c:21:1f:c2:88:5f:be:30:
         3e:41:31:1d:bb:16:4d:a3:51:03:03:e7:fa:ae:c3:22:58:2f:
         4a:62:36:2b:90:10:10:ae:4c:9d:67:15:3f:29:cf:a3:ec:74:
         f9:a7:68:64:53:6a:1d:94:32:1e:fa:36:43:1c:76:48:35:63:
         16:e9:54:26:bf:67:a0:32:53:9d:58:d2:42:21:ce:84:c9:7b:
         ac:fa:d0:6f:b2:72:1d:91:72:9d:ef:5f:b1:b0:b5:f5:18:1c:
         93:aa:29:60:cc:49:5c:13:6e:d1:58:71:f1:48:d4:72:5e:04:
         7d:dc:5b:ce:87:f5:90:c8:43:75:5c:d3:64:fb:69:68:bb:6f:
         e9:2c:f2:87:f8:19:1d:be:e1:c8:e7:9e:2d:b9:cd:42:05:ef:
         62:86:41:fd:0b:00:1c:34:06:bb:42:00:db:3e:c4:69:84:46:
         aa:46:aa:6d:77:6e:4d:b8:54:77:03:8b:27:8b:1f:7e:0c:68:
         14:85:87:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:40 2024 by rpki-client on console-ams.rpki-client.org