Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Yv99YDB14UbAhnc-eieIsgntv_8.roa
File:                     Yv99YDB14UbAhnc-eieIsgntv_8.roa (raw, json)
Hash identifier:          jYc5QVcuxyXSLz827MMNVbXt56l7r0q0xVsMsruZtJE=
Subject key identifier:   62:FF:7D:60:30:75:E1:46:C0:86:77:3E:7A:27:88:B2:09:ED:BF:FF
Certificate issuer:       /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial:       01886E54662785DDE7B551D84C9C5E42CE8C
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Yv99YDB14UbAhnc-eieIsgntv_8.roa
Signing time:             Tue 30 May 2023 20:23:24 +0000
ROA not before:           Tue 30 May 2023 20:23:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49999
IP address blocks:        84.32.22.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:6e:54:66:27:85:dd:e7:b5:51:d8:4c:9c:5e:42:ce:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
        Validity
            Not Before: May 30 20:23:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=62ff7d603075e146c086773e7a2788b209edbfff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8c:62:63:87:ae:6e:70:12:12:b7:8c:84:a0:
                    7e:2c:77:e7:22:08:7f:e1:e6:23:80:c1:05:c0:d3:
                    c0:db:7e:96:a6:16:d0:25:7f:e3:c8:5a:a7:a2:64:
                    86:e1:17:95:53:59:92:1e:97:12:a7:bf:d4:fa:5f:
                    a4:50:f2:c0:30:c7:53:fc:41:6f:f7:b3:01:75:ec:
                    7f:aa:dc:c4:0b:38:a2:bc:8a:a7:57:72:25:7b:bb:
                    df:20:b2:8f:2a:7d:19:80:5f:38:30:8d:bf:9c:dc:
                    17:f4:cc:76:b6:ba:d3:d6:30:bd:10:4e:6b:3c:4a:
                    d6:81:f0:e3:93:5f:e8:e7:65:c5:b8:e1:6c:60:41:
                    b7:87:32:5e:be:17:6a:9d:96:73:bf:d9:8a:4d:71:
                    fb:36:8c:4b:a2:96:0b:36:cb:f6:76:f1:41:c0:ac:
                    5d:9b:01:cb:15:3c:15:7b:2b:18:8f:08:fb:e9:7f:
                    fb:96:54:78:5a:0d:1f:43:eb:77:41:c3:0a:67:d5:
                    93:e6:cd:55:c0:43:a6:f2:82:04:e2:f0:70:3b:67:
                    96:5d:d2:1e:c6:82:08:11:f2:4c:70:36:6b:9b:23:
                    c0:82:a6:40:bd:91:c5:fc:86:c8:fc:d1:86:60:d4:
                    f2:14:be:2e:49:2c:43:32:c5:a1:74:bd:97:3e:ba:
                    70:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:FF:7D:60:30:75:E1:46:C0:86:77:3E:7A:27:88:B2:09:ED:BF:FF
            X509v3 Authority Key Identifier:
                keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/Yv99YDB14UbAhnc-eieIsgntv_8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.32.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:ac:51:f2:41:3b:03:44:b7:0f:92:ed:de:8b:10:74:5c:c2:
         86:71:48:29:5f:a3:2f:4e:49:35:35:17:51:39:dd:90:e2:ca:
         e8:74:67:a9:5c:30:23:0d:ce:e5:de:56:8c:d8:bd:5c:30:6b:
         2c:07:1d:db:b8:25:5d:bf:90:92:b1:8a:0d:55:eb:9b:02:60:
         ff:cb:d0:e6:77:4d:20:40:fd:cb:22:9d:bd:0e:03:27:80:f5:
         ca:0b:61:00:7e:04:61:1b:ed:56:f5:aa:07:cd:77:57:7f:0d:
         ee:04:ad:c1:38:dd:f3:19:62:36:71:a3:ee:87:ac:66:42:ae:
         cb:31:71:ac:19:4e:eb:dc:77:4b:e6:cc:ed:41:45:30:fd:89:
         c8:61:95:b5:af:6d:b6:8e:89:17:fc:fb:2d:ab:fe:9b:6d:37:
         8f:8d:1d:6d:2d:59:24:ea:ca:15:d2:db:4d:b7:21:6b:40:d6:
         84:56:8a:3f:66:44:62:7a:9a:3f:db:1c:95:47:61:16:ad:78:
         0f:31:3d:19:18:7b:bb:79:93:a8:ac:e4:86:bf:cb:2d:81:a0:
         40:3a:cf:24:83:86:c6:d4:35:e4:47:23:27:5b:e4:18:ee:0e:
         b6:4d:7d:9f:b3:09:49:8c:c9:a6:87:c2:79:42:64:d7:55:ef:
         ab:dd:65:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:48 2023 by rpki-client on console-fra.rpki-client.org