Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/jdjEtgqBBoC3gKYAWds-Kt5qDbk.roa
File:                     jdjEtgqBBoC3gKYAWds-Kt5qDbk.roa (raw, json)
Hash identifier:          zr6we5PDxpgJIYYy2yny75QT7RS1Fs/oZl8lKGLZLjg=
Subject key identifier:   8D:D8:C4:B6:0A:81:06:80:B7:80:A6:00:59:DB:3E:2A:DE:6A:0D:B9
Certificate issuer:       /CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
Certificate serial:       018707FE6CD034F112BD06E5688B104CC1DA
Authority key identifier: 54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/jdjEtgqBBoC3gKYAWds-Kt5qDbk.roa
Signing time:             Wed 22 Mar 2023 06:25:27 +0000
ROA not before:           Wed 22 Mar 2023 06:25:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     140947
IP address blocks:        185.104.39.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:07:fe:6c:d0:34:f1:12:bd:06:e5:68:8b:10:4c:c1:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf
        Validity
            Not Before: Mar 22 06:25:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8dd8c4b60a810680b780a60059db3e2ade6a0db9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:dd:82:a3:65:07:2d:d5:a3:b4:92:77:6b:d1:
                    65:8e:15:90:51:93:7e:17:1f:0e:02:25:18:6a:fe:
                    3a:37:76:52:d9:ed:8a:c0:68:cd:b6:0c:b4:70:94:
                    d3:b0:27:81:3f:5f:29:1c:c3:48:1d:3c:2c:2c:ce:
                    92:7f:79:0d:de:67:69:7b:95:27:db:a6:d6:56:88:
                    44:5f:2e:28:49:c6:ce:e3:20:5e:ca:2b:f3:20:62:
                    72:1e:95:ba:be:46:b2:55:e5:e0:60:cc:b8:cb:35:
                    f8:f3:98:d8:be:c3:46:ba:0d:87:19:e4:43:30:37:
                    5b:d7:83:90:78:ea:70:34:1b:fc:83:3c:c1:5a:c3:
                    bb:ca:5d:8a:c5:b9:57:3a:8b:99:5c:ce:41:2a:0e:
                    7b:05:ec:42:ff:48:ef:cd:18:ee:1e:ce:15:4c:42:
                    46:be:b0:d6:b0:c1:1d:2e:ab:df:b4:89:e2:9b:8a:
                    3b:1e:3c:07:34:6d:22:11:d7:ac:49:d3:b1:18:af:
                    43:04:7e:54:5e:01:ff:63:40:79:57:cf:df:24:b3:
                    a2:4f:7f:f4:1d:bd:8b:ef:33:d0:c2:d1:34:2d:fc:
                    0a:6b:d9:7a:67:2f:ba:8e:0f:93:1c:1d:48:f9:9f:
                    a6:55:17:af:0a:ab:0a:20:1e:8f:db:52:b2:1f:58:
                    8a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D8:C4:B6:0A:81:06:80:B7:80:A6:00:59:DB:3E:2A:DE:6A:0D:B9
            X509v3 Authority Key Identifier:
                keyid:54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/jdjEtgqBBoC3gKYAWds-Kt5qDbk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.104.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:6f:d8:90:2a:4e:1f:3e:06:ad:c2:5d:cb:13:7c:f7:ca:98:
         4e:a5:fc:00:d7:b6:36:38:6a:a1:3a:26:31:16:49:90:5d:4f:
         b4:cd:dd:86:2a:6f:3e:eb:5c:71:ff:4e:73:85:57:62:ee:9e:
         63:56:9f:33:bb:d2:91:cc:7b:c1:a8:ef:80:ea:5f:94:b7:4b:
         ef:6f:0f:a0:61:50:05:50:b7:92:b1:f2:75:55:27:b1:34:d5:
         55:86:63:21:96:a2:33:d0:d6:c3:10:ef:44:3d:7f:38:65:0f:
         5b:82:0d:8b:6b:06:d4:c8:a9:da:ab:98:40:93:52:fa:73:39:
         db:3d:96:de:db:72:72:56:85:f1:76:e9:4c:7f:58:01:aa:22:
         60:bf:91:7c:42:67:9b:22:70:30:20:ca:9b:f0:18:8a:25:b3:
         dc:7e:0b:f4:a6:5b:ce:e8:2d:c0:5e:bf:5b:90:33:55:70:81:
         48:bb:06:bb:37:b8:ac:e8:94:28:c0:9f:42:d5:09:e1:e9:98:
         b7:37:bc:be:4e:b1:95:fe:58:82:d7:69:ba:1a:4f:ab:07:7e:
         38:c9:0c:d2:1a:dd:d0:84:36:e5:43:6e:ab:9f:a8:7f:f0:a3:
         ce:61:04:c7:46:b3:05:fa:19:f5:27:a4:7b:80:0d:76:93:fa:
         cb:c8:1e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:39 2023 by rpki-client on console-ams.rpki-client.org