Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/263wrak9sEai97FPgZu1erZpFDE.roa
File:                     263wrak9sEai97FPgZu1erZpFDE.roa (raw, json)
Hash identifier:          xSA5wb1mZxn2C7ML+u78lfjFRIwb5KhA3qe8o4Zft08=
Subject key identifier:   DB:AD:F0:AD:A9:3D:B0:46:A2:F7:B1:4F:81:9B:B5:7A:B6:69:14:31
Certificate issuer:       /CN=fba0ed92ec94321dcb219d37f38d907e183244bd
Certificate serial:       0185F366F1DD50F0973A0DE8E1A86F13A08E
Authority key identifier: FB:A0:ED:92:EC:94:32:1D:CB:21:9D:37:F3:8D:90:7E:18:32:44:BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/263wrak9sEai97FPgZu1erZpFDE.roa
Signing time:             Fri 27 Jan 2023 13:24:48 +0000
ROA not before:           Fri 27 Jan 2023 13:24:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     26114
IP address blocks:        62.115.244.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:f3:66:f1:dd:50:f0:97:3a:0d:e8:e1:a8:6f:13:a0:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fba0ed92ec94321dcb219d37f38d907e183244bd
        Validity
            Not Before: Jan 27 13:24:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=dbadf0ada93db046a2f7b14f819bb57ab6691431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ae:3f:de:f2:03:3a:ef:dc:9e:ec:56:20:87:
                    27:78:b6:93:13:90:6a:dd:58:0c:79:7f:da:a7:da:
                    e3:13:17:6b:6a:e3:6a:d1:a7:d4:9f:01:1b:21:97:
                    59:33:0c:90:fb:ab:49:0f:55:93:28:64:97:48:b7:
                    7d:a2:0c:90:e7:03:a9:37:48:63:89:6b:25:8c:59:
                    56:f8:cf:7f:fb:56:56:b8:4a:c6:c3:b5:bb:ab:55:
                    09:56:68:6a:b4:ec:fd:be:b0:0e:aa:4f:8b:77:a8:
                    34:39:7c:d7:52:20:15:cc:d6:13:aa:d8:cc:fb:f7:
                    ba:3f:99:25:74:db:5c:c8:6a:f3:1c:b0:9b:bc:5c:
                    39:51:e5:c0:8f:71:31:23:85:a1:cb:5d:a7:d6:67:
                    c6:c3:dd:52:94:dd:26:b6:28:a4:cb:ce:1b:97:28:
                    35:08:5b:b6:cd:f7:2c:aa:30:3a:01:84:95:8b:ac:
                    3e:dc:34:57:2d:f0:aa:50:f3:e9:20:18:ad:6b:ef:
                    8e:02:58:5d:61:3c:69:97:59:12:da:43:3e:4f:68:
                    dd:4c:b0:ac:76:8e:3d:8f:73:fb:b8:b1:b8:00:04:
                    67:f6:1a:93:07:dc:97:79:4e:91:4a:c9:5a:3a:c2:
                    fb:27:dc:c5:32:5a:a6:15:c3:bf:b5:d6:cb:7a:77:
                    16:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:AD:F0:AD:A9:3D:B0:46:A2:F7:B1:4F:81:9B:B5:7A:B6:69:14:31
            X509v3 Authority Key Identifier:
                keyid:FB:A0:ED:92:EC:94:32:1D:CB:21:9D:37:F3:8D:90:7E:18:32:44:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/263wrak9sEai97FPgZu1erZpFDE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.115.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:3f:a9:55:be:55:66:97:f1:ce:c7:0d:c3:e9:17:7b:d4:63:
         21:7a:05:d7:c5:ac:6c:15:bf:e4:3e:10:8f:7f:50:9e:16:9c:
         76:28:d5:4f:20:88:be:0f:2c:8b:f3:6f:08:dc:2f:42:c2:7d:
         42:ad:62:ff:6e:6d:95:94:fa:df:fa:65:b0:43:44:ea:c6:22:
         d4:cf:43:20:01:54:66:ab:e1:6d:ad:f5:51:14:18:74:a5:2c:
         38:02:68:6a:7c:91:ca:55:8c:04:f1:36:77:a3:95:5d:5a:26:
         f6:86:27:6f:56:9f:6d:77:12:00:71:f5:4c:b2:20:0f:c3:23:
         9d:42:fd:08:fd:31:e8:10:c9:34:e2:6b:b2:41:74:2d:0e:bc:
         90:6c:1f:d3:82:2c:11:a4:71:23:c0:65:e1:54:23:a8:3b:2d:
         ac:a2:ea:b7:96:f5:ea:56:c1:8d:fb:bd:32:d3:73:c1:00:26:
         06:ad:07:b6:e9:9b:ce:da:b5:af:32:46:ac:9f:9a:53:91:8d:
         e4:8b:f3:f4:c5:3e:29:78:08:ce:86:8d:33:b8:87:7d:31:b9:
         1a:56:e6:14:ca:b8:6e:15:bd:67:30:d2:fe:8f:3c:b5:f2:42:
         84:32:2b:19:a9:fa:0e:bb:9a:b1:e4:16:0f:9d:9a:47:8d:19:
         f9:4a:03:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:19 2024 by rpki-client on console-ams.rpki-client.org