Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/piMh92dGxIUztHAD8Ldv1o4MD8o.roa
File:                     piMh92dGxIUztHAD8Ldv1o4MD8o.roa (raw, json)
Hash identifier:          v5Uu4+LvhKwVcK8rRRCzxSRzUT1tm8jbfQpm1KHlDBA=
Subject key identifier:   A6:23:21:F7:67:46:C4:85:33:B4:70:03:F0:B7:6F:D6:8E:0C:0F:CA
Certificate issuer:       /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial:       01856C65F5DC0F98F5743AA194EB083ED7D6
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/piMh92dGxIUztHAD8Ldv1o4MD8o.roa
Signing time:             Sun 01 Jan 2023 08:14:59 +0000
ROA not before:           Sun 01 Jan 2023 08:14:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200687
IP address blocks:        93.179.92.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:65:f5:dc:0f:98:f5:74:3a:a1:94:eb:08:3e:d7:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
        Validity
            Not Before: Jan  1 08:14:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a62321f76746c48533b47003f0b76fd68e0c0fca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:db:42:76:a2:d5:ad:3e:25:73:b1:28:62:b9:
                    67:36:bb:37:2f:c0:b2:b8:31:95:9d:7f:76:8c:16:
                    96:2b:01:63:9a:d8:d4:ef:f8:cf:80:65:a9:a2:d8:
                    59:74:bd:07:4a:b2:c4:39:f3:1f:81:25:06:dd:8b:
                    64:79:d2:44:7f:6c:d0:e5:a1:90:35:5a:71:f0:a8:
                    08:81:b1:ee:fc:cf:65:63:18:0c:22:86:24:29:1a:
                    a7:6c:b2:fa:78:ee:e0:db:fa:8e:1e:45:1e:9a:fc:
                    c3:0c:4b:48:27:2d:a4:0a:49:a4:04:f1:00:62:fd:
                    ee:70:e2:37:62:a2:80:c2:ca:fd:11:c7:ec:20:e6:
                    6e:60:d0:02:f4:23:c9:db:da:cf:e4:0f:bd:31:01:
                    b0:7d:df:ac:aa:e1:f0:d9:f9:45:a0:5f:21:dd:7f:
                    41:b8:64:9a:21:a8:76:8d:ef:03:69:17:77:38:35:
                    6e:e1:44:e6:d9:9f:23:2f:06:e6:0d:91:d9:e1:2a:
                    15:97:16:b7:c8:d3:42:64:21:f5:09:df:5d:56:97:
                    85:b1:df:78:0e:28:91:64:a7:ec:ba:de:86:e4:b0:
                    ed:9b:0f:03:02:79:fc:69:4a:bc:6e:eb:a8:4b:b8:
                    36:92:56:a1:17:8d:8e:8d:fd:85:05:ae:e5:8f:90:
                    b3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:23:21:F7:67:46:C4:85:33:B4:70:03:F0:B7:6F:D6:8E:0C:0F:CA
            X509v3 Authority Key Identifier:
                keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/piMh92dGxIUztHAD8Ldv1o4MD8o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.179.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:3b:d8:b7:96:88:28:78:c0:3b:89:5f:7c:12:2c:b5:12:f2:
         65:e0:34:d6:bd:55:de:4f:4f:83:4a:ca:c7:f8:00:07:d5:70:
         6a:16:26:46:31:08:c7:e8:f6:cd:6a:63:9f:f1:1c:fd:94:c9:
         a7:e6:12:2b:18:7d:0d:38:95:dc:c0:5a:47:72:59:fa:ac:7c:
         27:f1:e3:04:1a:ea:58:a6:2c:e8:fe:97:8b:8e:f7:e1:9a:73:
         dc:c3:65:d4:f5:6a:9b:00:2f:e0:55:cf:91:6f:a4:d4:1f:92:
         88:c1:1f:08:c2:77:0a:23:bd:30:9d:09:17:97:a7:27:f3:81:
         3a:18:90:18:d6:1a:15:d9:47:59:f5:e8:be:3a:82:33:99:7c:
         ae:6c:8a:62:a9:2a:eb:b0:d9:08:c7:a6:7c:1c:6b:f0:25:63:
         b5:92:44:02:a5:6a:f5:46:e0:e4:e7:1b:61:d8:31:17:f3:27:
         0b:eb:ba:1b:56:d7:ae:82:6f:60:63:cc:3c:51:c0:dc:30:8b:
         e2:6c:a2:90:94:5f:76:87:55:21:2c:ba:ba:f3:28:87:e3:f6:
         0c:b9:9b:ff:18:66:5f:c8:ea:81:53:aa:78:d7:b8:b5:78:b1:
         5c:86:ee:10:a2:5e:dc:23:d7:9e:30:84:80:54:4c:35:25:5b:
         8b:0e:85:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:21 2024 by rpki-client on console-ams.rpki-client.org