Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/delAcw1B4kpKuJXe9lQFJoThEfs.roa
File:                     delAcw1B4kpKuJXe9lQFJoThEfs.roa (raw, json)
Hash identifier:          d5VqW0NjFpvpcFrEc8p3xzsJkE/HxrpTcj5euYE1hYU=
Subject key identifier:   75:E9:40:73:0D:41:E2:4A:4A:B8:95:DE:F6:54:05:26:84:E1:11:FB
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0189395FDAECF4BE3BD654537F44C6AC7102
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/delAcw1B4kpKuJXe9lQFJoThEfs.roa
Signing time:             Sun 09 Jul 2023 06:38:50 +0000
ROA not before:           Sun 09 Jul 2023 06:38:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202222
IP address blocks:        2a0e:b107:1ea0::/44 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:39:5f:da:ec:f4:be:3b:d6:54:53:7f:44:c6:ac:71:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jul  9 06:38:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=75e940730d41e24a4ab895def654052684e111fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:44:3e:91:e4:f7:14:07:e7:77:ac:c0:ba:e9:
                    f0:0c:80:39:2b:7c:0a:e7:0c:40:62:cd:94:f2:16:
                    5e:b7:ee:fb:6b:27:62:d7:06:84:a3:cf:42:cb:9c:
                    1c:5c:61:a2:34:c2:7b:e7:35:8a:c2:ea:36:66:03:
                    36:e3:61:f5:11:7c:16:c8:69:08:6d:10:17:1a:a3:
                    c4:fa:61:73:22:d8:5f:1d:a3:1b:78:e1:04:f7:6f:
                    70:77:bd:76:ad:f6:83:ac:20:87:da:f1:0b:42:9a:
                    77:7f:de:cd:35:5f:a0:06:ec:e0:dd:ca:1f:9b:1d:
                    5e:58:92:95:e6:ac:6e:01:69:ea:d1:2b:fa:94:8e:
                    f9:1f:e8:17:29:ed:7b:4d:65:9b:0b:12:15:f2:8c:
                    55:73:ce:62:75:5a:2e:28:f2:7b:16:0f:0d:0d:49:
                    a1:f9:80:a1:78:41:9b:3d:0c:9b:f7:ac:8a:ae:82:
                    10:06:12:0b:5e:3f:8d:6f:8d:49:89:de:b8:49:75:
                    8d:f6:77:55:f7:35:aa:8e:43:f4:38:48:69:76:fe:
                    e3:2a:3f:ae:d7:8f:98:ab:8e:2e:05:c1:1a:37:16:
                    20:72:a4:53:6e:a5:fa:91:f9:f8:14:36:25:8d:96:
                    de:63:d5:3f:65:fd:43:a1:ed:64:c8:9f:90:d8:50:
                    a0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E9:40:73:0D:41:E2:4A:4A:B8:95:DE:F6:54:05:26:84:E1:11:FB
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/delAcw1B4kpKuJXe9lQFJoThEfs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:1ea0::/44

    Signature Algorithm: sha256WithRSAEncryption
         9f:47:36:ea:13:a4:3a:7e:c2:e5:d4:6f:50:90:68:57:2e:a7:
         8a:32:62:ad:7e:d1:66:6a:cd:8f:48:0d:4e:a9:c3:5a:7c:49:
         24:58:ad:d0:d2:85:62:09:f2:13:8f:89:74:a9:7f:38:2a:3f:
         6b:25:2d:32:88:7c:56:8f:ed:a3:25:ed:00:80:86:8e:77:1d:
         fc:18:10:88:df:06:5d:b6:b8:89:54:e1:6c:d6:5a:0e:5e:8e:
         81:61:0b:c9:d6:7e:13:a1:62:9a:38:56:2e:f5:42:64:50:9b:
         02:fe:ae:d3:89:21:42:23:a7:28:af:43:59:c1:53:11:29:22:
         e0:0b:dc:ef:e3:0c:ed:c9:52:55:ae:0d:0e:f5:f3:d7:8f:12:
         8e:e4:db:f7:cf:98:ec:33:b8:dc:91:73:82:9b:83:cb:09:c0:
         c6:2c:57:0e:76:c6:52:67:34:83:bc:d5:32:0e:8c:30:dd:5a:
         04:98:88:a2:78:61:ea:1f:93:e1:c7:88:00:58:f6:1f:3f:41:
         bb:1b:84:15:be:9c:04:5b:b2:ff:ad:1c:93:b2:a6:55:df:89:
         82:60:be:ea:ac:76:82:95:18:ac:33:3e:1b:47:a3:ab:78:10:
         58:d5:b9:f7:c2:11:50:26:8e:51:43:34:f0:1a:77:f9:44:5d:
         6d:ae:2c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:51 2024 by rpki-client on console-ams.rpki-client.org