Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/ZvpcRdQPzoM1GQgOM1yoVPtQA1o.roa
File:                     ZvpcRdQPzoM1GQgOM1yoVPtQA1o.roa (raw, json)
Hash identifier:          dw+Sr/6LDyOtQW67bJDSJ+q8QURw4r1dabsTMY+gROY=
Subject key identifier:   66:FA:5C:45:D4:0F:CE:83:35:19:08:0E:33:5C:A8:54:FB:50:03:5A
Certificate issuer:       /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial:       0188A04A1F93C81E82C003392D96FECD656D
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/ZvpcRdQPzoM1GQgOM1yoVPtQA1o.roa
Signing time:             Fri 09 Jun 2023 13:13:12 +0000
ROA not before:           Fri 09 Jun 2023 13:13:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61281
IP address blocks:        103.75.68.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:a0:4a:1f:93:c8:1e:82:c0:03:39:2d:96:fe:cd:65:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
        Validity
            Not Before: Jun  9 13:13:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=66fa5c45d40fce833519080e335ca854fb50035a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:73:d3:f3:a0:d8:e1:b6:94:80:ab:85:a6:5f:
                    56:77:c8:6a:d5:2f:1a:1c:99:80:ec:e7:76:dc:a3:
                    5b:b7:f5:ca:71:5f:d4:ed:f2:a6:df:8b:e0:74:cf:
                    38:61:32:17:03:a7:34:1f:98:ee:01:2c:fd:95:cb:
                    b5:bf:e2:d3:11:2a:cf:63:c2:14:86:98:95:59:af:
                    d8:71:29:ae:82:0c:75:a7:e1:b9:f1:a3:83:f0:09:
                    42:cc:ad:53:16:d6:c3:6d:78:d6:0a:8f:21:11:66:
                    fe:b1:82:6a:4a:bf:f4:28:7c:41:48:97:5d:6e:7f:
                    a2:64:be:ed:08:41:7f:5c:d0:a7:71:67:68:0a:45:
                    02:85:93:4f:d6:2e:e6:9f:67:e0:aa:0b:d7:ea:31:
                    10:02:0a:05:d6:d0:f9:89:68:33:81:9e:ab:f1:e5:
                    c4:48:68:d1:b2:d8:9d:ff:66:a4:d0:c1:a2:97:ae:
                    6a:63:24:ce:5b:13:ff:8b:b2:1d:14:37:6b:e7:44:
                    e5:ab:d8:42:fd:94:65:9a:8c:fa:eb:e2:e6:f5:12:
                    26:78:c3:a7:cc:81:2d:fa:85:62:51:2f:1e:a1:1c:
                    2b:66:87:ab:a8:0f:dd:41:3b:88:cf:63:9e:37:11:
                    1c:55:d9:52:fd:8d:19:8b:d7:e2:3a:53:7f:df:85:
                    80:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:FA:5C:45:D4:0F:CE:83:35:19:08:0E:33:5C:A8:54:FB:50:03:5A
            X509v3 Authority Key Identifier:
                keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/ZvpcRdQPzoM1GQgOM1yoVPtQA1o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:b5:68:d0:87:6d:7b:87:6b:4b:76:03:60:cc:1e:51:f4:4e:
         eb:3d:a9:91:16:da:ae:ec:46:4c:f3:94:c6:e8:93:45:53:a3:
         74:37:09:92:ff:46:0d:55:ab:43:f6:30:21:a3:55:0b:a4:98:
         2e:be:0b:1f:78:0e:81:4c:50:8c:d4:b2:47:cd:d9:38:80:d8:
         81:18:e0:3a:81:85:4c:44:f9:c3:69:6c:af:bf:db:a2:5e:79:
         b0:12:db:5c:67:ee:3b:41:a8:ef:d0:a4:0c:6a:37:5d:40:7f:
         d1:d2:0c:ff:8b:f8:df:84:3f:27:46:f4:2f:60:21:4f:57:a9:
         32:de:24:d0:70:9e:68:0e:88:e3:1d:e8:db:a5:05:ef:5c:3b:
         0f:55:f8:4b:ae:18:cd:a4:6a:2e:f3:d9:ef:82:a8:a3:a2:81:
         f2:db:ea:e2:fa:7c:8d:55:4f:8f:30:c7:d9:dc:90:a2:99:a6:
         97:1a:b9:20:38:80:b6:f8:49:b9:60:d8:f8:3f:25:bd:e2:23:
         f1:85:9a:04:09:d0:b1:26:27:88:8e:4b:b0:62:d4:28:a5:4f:
         2d:8d:a0:61:e5:db:33:35:79:56:29:f6:20:e3:9a:d6:27:73:
         1a:a5:2a:a3:60:1d:84:b6:62:0a:4a:e1:bf:13:7b:7f:9e:39:
         5c:4f:88:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:50 2023 by rpki-client on console-fra.rpki-client.org