Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Qt5_iWEvWZAOqQZNhmZq17jUeIM.roa
File:                     Qt5_iWEvWZAOqQZNhmZq17jUeIM.roa (raw, json)
Hash identifier:          UHDq1JwMJ6o+IK7fNTM8WZGimM8BYjkEKLKn/Z9b21E=
Subject key identifier:   42:DE:7F:89:61:2F:59:90:0E:A9:06:4D:86:66:6A:D7:B8:D4:78:83
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       01857095533AE2AEB1B963BDA4208E38893A
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Qt5_iWEvWZAOqQZNhmZq17jUeIM.roa
Signing time:             Mon 02 Jan 2023 03:45:12 +0000
ROA not before:           Mon 02 Jan 2023 03:45:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51734
IP address blocks:        95.47.112.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:95:53:3a:e2:ae:b1:b9:63:bd:a4:20:8e:38:89:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  2 03:45:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=42de7f89612f59900ea9064d86666ad7b8d47883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d8:4e:b3:d5:7f:35:62:b6:cc:aa:4c:cd:99:
                    91:4a:50:d5:40:38:f5:15:e6:f3:75:c5:75:b9:88:
                    90:5a:dd:1c:76:27:c9:75:e0:93:07:f5:b1:49:06:
                    69:de:98:b1:ba:27:cf:bd:79:12:b3:51:7b:98:71:
                    31:18:9c:e5:99:b2:59:90:e2:83:72:a3:af:b9:e7:
                    e9:b6:f3:b8:35:87:6c:38:06:9c:88:eb:6f:59:0d:
                    1a:c9:27:27:f0:23:8d:ba:37:9b:00:27:0f:08:aa:
                    6d:bd:5c:5f:fd:22:27:df:73:da:5c:79:da:2e:da:
                    e6:7f:cd:4a:ff:75:54:6e:87:d4:0a:ce:39:9c:f2:
                    13:e0:13:de:ae:f7:27:7a:45:0a:e1:fc:20:bf:12:
                    78:5e:3e:a5:3d:36:30:37:24:b4:fe:6a:36:c8:35:
                    42:c8:84:86:5a:a3:a6:f4:0a:90:41:74:91:29:0e:
                    8a:c7:00:56:e9:f3:6b:f0:21:65:23:19:a9:5f:07:
                    7a:9e:9c:30:c8:0e:61:88:d9:5c:4f:1d:17:ea:38:
                    3c:31:8f:d6:49:ff:7f:b5:a5:d9:66:95:e7:09:d1:
                    3a:64:2f:b5:47:ff:49:41:05:b0:ff:28:72:b5:4e:
                    95:88:75:e6:7c:c4:c0:b3:85:1c:89:b5:2e:88:e7:
                    5a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:DE:7F:89:61:2F:59:90:0E:A9:06:4D:86:66:6A:D7:B8:D4:78:83
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Qt5_iWEvWZAOqQZNhmZq17jUeIM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.47.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:62:30:4b:3e:50:2a:48:ab:af:76:94:0c:ec:63:86:96:0e:
         1a:bc:b0:e5:c3:b3:85:a4:72:93:4b:5e:ff:59:ed:c2:41:71:
         b7:8a:39:5c:66:3c:76:7f:f1:89:74:06:e6:87:c4:da:c1:41:
         24:4f:6d:17:f9:58:fd:0c:d6:de:ab:8a:c3:70:d4:55:ac:7a:
         57:e5:9c:94:a0:71:c9:b2:a7:0e:35:d3:89:cf:df:c9:0c:32:
         cc:c8:78:fb:c6:f1:95:0b:88:85:85:de:be:b9:ad:da:c1:e3:
         50:50:f7:20:0e:ce:0a:4d:b6:05:50:84:ed:f8:85:d3:e3:ab:
         b2:68:e2:4d:08:b2:d3:ed:93:91:13:86:04:ca:32:5f:ee:2e:
         d1:e3:d5:92:53:ac:2c:11:c3:f8:7f:a8:90:54:b9:fb:b4:63:
         0b:05:a8:ae:e0:9a:bc:cf:d3:09:cc:2b:d7:ec:73:5a:c2:91:
         1d:6a:f0:d7:2d:29:5c:32:20:d0:dc:ae:0f:f7:15:79:bf:88:
         96:ea:16:3c:db:e1:55:0c:9f:aa:d9:48:68:53:d6:e0:c7:e4:
         d3:94:e6:82:64:bf:c0:d3:bd:94:cb:ac:ae:63:51:fe:f0:ac:
         88:88:8a:3a:e4:67:2a:7e:d4:ab:2f:d7:c1:ab:b7:78:b8:37:
         1d:c7:59:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:41 2023 by rpki-client on console-fra.rpki-client.org