Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_bk3YE90Sf2G7EO8ozmUVMRniQM.roa
File:                     _bk3YE90Sf2G7EO8ozmUVMRniQM.roa (raw, json)
Hash identifier:          qT0CHbE7G16aySxx0Oh3A0Yf6lCvBuZQC3eVb0uHE7U=
Subject key identifier:   FD:B9:37:60:4F:74:49:FD:86:EC:43:BC:A3:39:94:54:C4:67:89:03
Certificate issuer:       /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial:       018863FD9C395644FFA0B9EA06C08C9F2E28
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_bk3YE90Sf2G7EO8ozmUVMRniQM.roa
Signing time:             Sun 28 May 2023 20:12:24 +0000
ROA not before:           Sun 28 May 2023 20:12:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     140155
IP address blocks:        84.32.213.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:63:fd:9c:39:56:44:ff:a0:b9:ea:06:c0:8c:9f:2e:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
        Validity
            Not Before: May 28 20:12:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fdb937604f7449fd86ec43bca3399454c4678903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b3:3c:7d:0d:8b:33:03:fe:2a:f3:2b:48:03:
                    5e:ad:fe:f3:28:d6:0a:4d:fe:15:2c:36:be:49:f4:
                    f5:8f:78:10:58:ab:7e:53:49:db:1f:b0:89:89:f3:
                    a9:5c:7c:35:cf:03:4e:9d:fd:e8:7e:a0:1b:f5:2a:
                    81:28:f4:d4:f0:39:a2:18:e6:96:90:64:ea:1e:a9:
                    48:2b:ed:70:92:a1:48:4b:3c:4c:2e:56:15:07:bf:
                    82:98:f7:22:9c:1f:bb:df:10:db:99:c9:cd:70:38:
                    f6:31:48:e3:93:0d:8e:d2:aa:7e:ac:54:f4:b7:16:
                    04:76:08:d3:f7:6e:45:f8:60:2e:75:d9:f7:2c:dd:
                    be:32:c0:9b:d8:94:bb:a4:41:d2:32:66:98:7e:6a:
                    fe:04:37:a7:7d:6b:c2:05:25:52:8b:f3:e6:7c:90:
                    8e:01:f9:a6:98:ce:ed:88:73:22:76:d3:2e:5a:db:
                    ed:89:d0:c2:b9:b4:9a:ce:21:d8:29:1a:c5:e7:79:
                    97:f9:19:28:82:64:53:bb:dc:3a:f5:3a:d5:80:84:
                    03:f7:6b:75:df:9a:54:77:51:6c:2f:8d:40:ee:ac:
                    df:7d:a6:04:28:43:c6:2d:de:a9:aa:da:25:d5:41:
                    1a:0a:52:13:ea:e3:4a:26:1a:22:f1:51:b4:63:a2:
                    b0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B9:37:60:4F:74:49:FD:86:EC:43:BC:A3:39:94:54:C4:67:89:03
            X509v3 Authority Key Identifier:
                keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/_bk3YE90Sf2G7EO8ozmUVMRniQM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.32.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:77:a7:e7:6c:b0:13:36:7f:ed:a9:21:19:a5:0b:63:ad:3d:
         1b:1a:8a:91:1a:c4:1e:35:41:f7:1a:f4:f5:f8:68:69:5d:ef:
         cf:f2:b7:b3:bc:f0:68:cd:40:ad:56:62:45:3c:73:9a:21:8b:
         ab:2c:79:fe:04:af:00:9b:84:c5:14:32:ff:8b:fc:4c:68:15:
         68:83:cd:a3:50:02:65:24:ee:77:f8:43:03:a5:75:95:98:cf:
         a7:b1:bf:f5:c2:6f:68:63:8d:fa:a3:1c:41:ef:2d:4a:af:fc:
         fa:b7:47:9a:d8:4c:a7:77:0f:cd:c9:36:fb:8a:5b:d9:bf:4a:
         3f:7f:41:c6:b7:9d:53:9a:af:12:ab:83:6e:74:1a:7d:4d:d9:
         54:81:57:ac:3f:00:76:8a:3d:66:71:a4:6b:8e:0f:c4:5d:a8:
         4c:37:fc:00:6f:f5:44:de:74:b3:c2:54:ff:db:d2:4c:cc:09:
         72:fd:f8:8a:02:5a:b4:38:a9:a1:85:82:f7:54:ec:a1:ea:d3:
         04:f5:1e:84:27:10:db:9d:46:74:43:d7:b2:c4:ff:2c:95:69:
         a4:8e:11:18:fd:70:6d:42:55:5d:76:48:bb:eb:0c:8a:e5:bd:
         c9:52:d0:6e:48:1f:4d:56:28:6c:90:bb:8c:d6:7c:37:76:c8:
         cc:cd:3c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:48 2023 by rpki-client on console-fra.rpki-client.org