Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/A6V4_l-wofoDBtg5WnkZ3hhQMl0.roa
File:                     A6V4_l-wofoDBtg5WnkZ3hhQMl0.roa (raw, json)
Hash identifier:          JE2P7XB3eoSIO3VQE36pyuHmcdeqkc2TvxCz2f6mxNA=
Subject key identifier:   03:A5:78:FE:5F:B0:A1:FA:03:06:D8:39:5A:79:19:DE:18:50:32:5D
Certificate issuer:       /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial:       0187240BF6BB273B715A41F937E2C0FACF4F
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/A6V4_l-wofoDBtg5WnkZ3hhQMl0.roa
Signing time:             Mon 27 Mar 2023 17:09:36 +0000
ROA not before:           Mon 27 Mar 2023 17:09:36 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     396356
IP address blocks:        88.216.91.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:24:0b:f6:bb:27:3b:71:5a:41:f9:37:e2:c0:fa:cf:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
        Validity
            Not Before: Mar 27 17:09:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=03a578fe5fb0a1fa0306d8395a7919de1850325d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e4:65:12:52:91:b9:ad:ca:14:1f:ac:49:74:
                    dd:81:26:50:f3:fb:0c:ec:79:f6:a8:cd:5c:de:5a:
                    67:81:f2:cc:bc:55:14:cd:58:c2:54:db:63:c4:47:
                    5d:49:08:aa:70:d6:22:93:82:e5:7a:ba:74:79:f6:
                    61:26:dc:47:38:59:de:26:64:a5:86:29:28:23:1c:
                    0c:02:8b:a0:2e:da:63:1a:24:93:d6:98:9e:5a:12:
                    c8:2b:81:9b:6d:3d:49:c3:6f:3b:83:88:d2:55:f5:
                    6d:bc:1f:0f:3d:95:de:e2:70:63:b6:47:26:d7:c5:
                    ed:5d:62:a6:a0:67:b9:dc:c6:4c:5e:5c:68:54:a8:
                    86:f2:ac:7d:75:59:8e:06:e3:c4:b1:04:8e:6f:bd:
                    a1:9f:d9:83:20:ca:8b:37:21:47:93:2d:3a:76:8a:
                    73:c3:c2:19:07:42:5b:27:bd:a3:f4:ed:d7:49:02:
                    40:fe:ac:e2:6e:06:9c:52:be:26:ad:48:d9:a7:40:
                    d2:44:87:bc:46:61:40:f7:3a:a0:77:fd:4e:e0:ad:
                    8d:e7:2a:47:3f:75:6c:3f:6a:07:73:86:d9:6f:cb:
                    25:db:ca:f2:76:a3:19:02:23:8e:4f:ac:b2:ae:6f:
                    12:a9:44:aa:7f:2e:68:1d:33:a9:1c:95:37:d2:b7:
                    6d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A5:78:FE:5F:B0:A1:FA:03:06:D8:39:5A:79:19:DE:18:50:32:5D
            X509v3 Authority Key Identifier:
                keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/A6V4_l-wofoDBtg5WnkZ3hhQMl0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.216.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:77:65:ac:05:01:c1:40:df:70:73:36:37:47:7b:a0:1f:b7:
         74:50:d3:c6:e4:1b:bb:62:43:cc:f9:ec:d2:81:ca:1b:b0:62:
         71:cc:6a:95:5e:56:cd:19:a0:c5:c5:59:2a:77:1c:91:bf:c4:
         1d:03:5b:bd:a2:4c:9b:c9:f0:50:a7:13:59:26:e1:08:d9:19:
         8e:8c:72:6c:1f:20:5b:90:a7:76:16:89:ee:f4:1d:5e:f6:a5:
         b4:76:62:25:0e:6e:1c:99:0a:90:f4:a9:1d:24:5c:0d:cb:b3:
         13:b4:6f:ba:00:d5:cd:33:03:14:d0:f6:51:a5:ff:f1:40:98:
         c7:23:b6:aa:c5:53:ef:7b:cc:36:86:a7:b7:59:df:38:ce:02:
         ef:6a:ab:c6:27:3f:6c:a7:97:ad:dc:90:6a:69:ef:a7:4e:4a:
         57:ef:11:53:72:1f:46:16:a9:90:70:69:29:87:a2:92:bc:7a:
         75:f3:82:20:64:34:75:9d:13:1d:42:23:30:ba:b4:1f:50:cf:
         2c:80:82:6a:99:7a:60:60:b1:cf:1d:65:c1:a0:56:9b:7b:73:
         38:e9:ff:ba:b0:18:61:29:e3:4c:e8:90:10:6e:c9:3e:0f:c9:
         e2:cf:0b:14:1a:c0:8e:d5:e5:9d:24:7e:e6:68:27:6c:e1:f4:
         15:0f:29:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:28 2023 by rpki-client on console-ams.rpki-client.org