Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Lc-ZmUg3AxlH7T41byCtYf7MORU.roa
File:                     Lc-ZmUg3AxlH7T41byCtYf7MORU.roa (raw, json)
Hash identifier:          Czae3+uHwyRe1BTn6dRFNHk7OVmPW9balu/LUsn2hBc=
Subject key identifier:   2D:CF:99:99:48:37:03:19:47:ED:3E:35:6F:20:AD:61:FE:CC:39:15
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       0186175100DAB3B84EA0E7313FE5D0B52FDE
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Lc-ZmUg3AxlH7T41byCtYf7MORU.roa
Signing time:             Fri 03 Feb 2023 12:47:09 +0000
ROA not before:           Fri 03 Feb 2023 12:47:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     264825
IP address blocks:        185.181.32.0/23 maxlen: 23
                          185.181.34.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:17:51:00:da:b3:b8:4e:a0:e7:31:3f:e5:d0:b5:2f:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: Feb  3 12:47:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2dcf99994837031947ed3e356f20ad61fecc3915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3d:ad:fc:a8:1b:b7:f7:5e:65:a7:1e:52:1e:
                    d5:ab:52:30:3c:88:aa:cf:01:9d:f6:0c:10:43:b2:
                    17:fe:64:65:77:eb:20:d1:1f:93:08:b6:3b:60:0a:
                    05:25:29:a1:83:17:9b:1e:c1:65:dd:96:56:5a:ad:
                    3e:01:46:e9:51:3b:5e:b0:22:80:8f:af:b6:37:92:
                    66:56:ba:37:25:46:6b:54:81:f8:c8:9f:81:83:4f:
                    6a:1d:d7:53:85:1b:d6:44:c3:83:5b:56:f7:00:fb:
                    8d:17:53:1a:90:d5:f3:b4:6f:91:02:2d:1d:c2:7e:
                    16:a1:1d:56:f9:60:4c:10:52:ff:2f:c7:59:96:c9:
                    63:e2:8a:ae:3f:b0:a1:be:b4:1e:33:16:fc:61:89:
                    71:ae:af:7e:93:c2:e7:46:39:c5:77:8f:3d:0d:42:
                    2d:ca:f1:98:96:f5:a1:51:3a:94:7d:55:7c:52:fb:
                    e7:10:2f:99:cc:9b:73:7f:59:a3:71:b8:b7:da:1a:
                    12:c6:4c:03:37:50:1d:3d:36:0b:5e:f4:53:60:af:
                    c5:a6:a7:94:8d:c2:4d:37:8e:ca:b7:07:98:64:08:
                    ba:26:0d:38:f5:07:16:fb:0d:7b:03:3b:70:57:6c:
                    a3:a4:f4:33:0a:2a:f3:a5:61:be:c4:c7:fa:c3:5b:
                    d4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:CF:99:99:48:37:03:19:47:ED:3E:35:6F:20:AD:61:FE:CC:39:15
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Lc-ZmUg3AxlH7T41byCtYf7MORU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.181.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:61:2e:f7:21:3c:3e:95:d9:dc:f4:3e:65:5e:78:c5:96:21:
         e5:0e:31:e0:e0:6e:71:9c:d0:47:78:69:af:4d:46:f5:d3:4a:
         0e:67:f7:e1:1f:68:5d:0d:06:12:5d:6f:d3:80:5c:b0:c1:cf:
         2f:24:6b:a2:65:b7:b1:a8:61:95:9a:08:01:34:bb:2e:52:f8:
         1f:2c:4d:c4:8f:93:ac:12:5c:fa:ed:c7:8b:22:f6:a4:9d:db:
         aa:eb:77:19:ab:78:c0:bb:0b:86:25:95:a9:af:79:84:1e:fe:
         ad:e6:b8:10:a5:75:73:ef:cc:ec:f0:d7:dc:7e:5e:23:3b:8c:
         30:4e:38:22:96:48:e7:d9:06:4f:27:46:81:80:83:2b:ea:1c:
         0f:75:5c:a8:3c:be:0c:2c:29:43:66:76:f1:75:6a:c1:d4:f6:
         6c:a9:0e:d5:cd:55:80:61:29:4c:09:28:a4:fa:68:e3:b5:e3:
         25:63:d2:24:21:c6:6d:6e:59:bb:b4:5c:6d:01:97:f5:9a:71:
         0a:68:b9:a6:3f:89:34:16:de:a7:de:a9:4e:a0:ef:7c:5e:a7:
         a9:e7:0a:57:62:b6:b3:16:d9:08:3c:9e:ae:b0:c9:bc:b4:f3:
         92:7f:4f:fd:a1:5c:49:60:95:ab:94:9a:38:59:17:b6:e1:7a:
         60:4d:bd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 5 07:55:33 2023 by rpki-client on console-fra.rpki-client.org