Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/e5JBZVPrQyul1ejnTTZ4pD_yA6Q.roa
File:                     e5JBZVPrQyul1ejnTTZ4pD_yA6Q.roa (raw, json)
Hash identifier:          0ayXM/1kGg32r5DUC2pt/gFAXzaSbCDEjlhjsdrVpBc=
Subject key identifier:   7B:92:41:65:53:EB:43:2B:A5:D5:E8:E7:4D:36:78:A4:3F:F2:03:A4
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       01859BA7707BE81E824F5D3052AB32200604
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/e5JBZVPrQyul1ejnTTZ4pD_yA6Q.roa
Signing time:             Tue 10 Jan 2023 12:28:39 +0000
ROA not before:           Tue 10 Jan 2023 12:28:39 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200240
IP address blocks:        2a0e:b107:692::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:9b:a7:70:7b:e8:1e:82:4f:5d:30:52:ab:32:20:06:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 10 12:28:39 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7b92416553eb432ba5d5e8e74d3678a43ff203a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:56:49:fe:3b:ed:19:f3:40:de:b2:35:36:f1:
                    f3:41:04:e1:72:c7:5b:c4:0d:8d:7c:3b:b2:36:19:
                    98:30:9d:78:7e:cc:aa:21:48:c0:20:9c:f5:40:5c:
                    5f:bf:72:4f:f1:3d:17:df:98:bd:ce:5a:5e:4d:a6:
                    b3:99:7f:b3:f2:c5:54:0a:64:da:69:6c:52:78:56:
                    17:64:96:f3:88:4e:1c:61:42:fd:30:78:ae:f7:3e:
                    69:2e:83:f0:5f:97:74:ac:26:ad:49:94:dc:cc:66:
                    3c:07:03:ac:8f:d5:a3:9b:68:2e:12:f6:8c:94:c7:
                    38:83:ec:8c:9c:d1:51:75:8a:b9:16:f9:29:21:5a:
                    d6:73:1b:20:56:2a:f9:79:47:99:41:98:8b:93:44:
                    39:f4:ec:52:d8:c0:bb:49:76:a2:3f:50:2a:8d:83:
                    2b:75:81:96:67:d9:56:26:0d:fc:1d:94:9c:c8:92:
                    16:78:3c:32:3a:1a:e2:41:d4:b8:f8:67:77:e1:5f:
                    1b:db:09:2e:2a:f5:69:49:17:e5:00:8e:38:fe:83:
                    63:86:bb:76:21:84:fc:48:80:46:dd:d0:0d:31:fe:
                    47:34:11:85:ec:20:19:5c:fd:3e:79:58:ce:c6:2b:
                    6d:bf:b2:50:22:45:ee:51:0e:58:c9:d6:95:fa:45:
                    81:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:92:41:65:53:EB:43:2B:A5:D5:E8:E7:4D:36:78:A4:3F:F2:03:A4
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/e5JBZVPrQyul1ejnTTZ4pD_yA6Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0e:b107:692::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:50:d5:a4:c3:e8:db:09:90:86:f0:db:b9:fb:ad:29:5a:a8:
         88:55:71:5e:1f:17:18:86:78:20:f5:2e:f6:43:0a:46:ad:f3:
         44:98:7d:4c:e4:4c:78:5f:45:be:7c:cf:b3:72:e5:52:b8:76:
         0d:01:c2:b8:83:11:1f:cb:a5:a2:3d:bb:19:25:10:2e:2f:a6:
         ca:ae:e2:86:f1:95:6b:55:a9:5b:76:ed:e8:71:d3:cb:d7:ef:
         b2:e0:05:10:68:05:cf:de:47:d1:e2:56:29:27:73:77:89:b8:
         e8:cb:43:c4:cd:d4:99:3a:97:42:95:5c:7e:f4:9f:27:cf:c3:
         d6:fe:66:f1:44:7c:aa:ec:e3:fb:83:dd:1e:27:c3:f3:d7:9a:
         ec:3b:13:81:46:99:db:45:20:af:dd:8d:db:a0:28:b8:6c:46:
         b6:c3:e9:4a:7f:c4:be:af:bc:b3:84:f9:6f:47:b6:83:a1:1a:
         f2:26:b1:2b:a0:1b:44:58:21:79:37:5b:95:d4:9c:74:79:08:
         96:f5:8e:30:7c:94:a1:12:c0:7a:7e:9b:7c:e1:ad:29:28:5b:
         fe:29:a1:1b:7c:ee:e7:94:cf:15:30:88:a9:29:7f:6a:4f:84:
         84:37:41:4c:5b:72:cf:94:b2:1b:71:68:19:dd:7f:66:0c:ab:
         b5:56:97:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:18 2023 by rpki-client on console-fra.rpki-client.org