Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/pWnlisk3R2YH4lSeMq-JDy-QQgc.roa
File:                     pWnlisk3R2YH4lSeMq-JDy-QQgc.roa (raw, json)
Hash identifier:          AtFWPOw4Icxea/rjBakbQNpDt1dLyiaec6TiC5DkPJ0=
Subject key identifier:   A5:69:E5:8A:C9:37:47:66:07:E2:54:9E:32:AF:89:0F:2F:90:42:07
Certificate issuer:       /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial:       01858724EC42E247AE7272348EFA5E63DAA7
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/pWnlisk3R2YH4lSeMq-JDy-QQgc.roa
Signing time:             Fri 06 Jan 2023 12:53:42 +0000
ROA not before:           Fri 06 Jan 2023 12:53:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210531
IP address blocks:        103.75.69.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:87:24:ec:42:e2:47:ae:72:72:34:8e:fa:5e:63:da:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
        Validity
            Not Before: Jan  6 12:53:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a569e58ac937476607e2549e32af890f2f904207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:e4:b0:7b:fd:4a:25:ef:b4:27:7b:7f:2e:e1:
                    2e:77:ec:ed:76:ce:bb:89:19:e6:5a:73:8d:29:ae:
                    16:fb:30:b6:ac:2d:1a:6e:6e:44:32:13:9d:55:e5:
                    fd:c8:1c:f6:1d:75:04:f7:b5:48:e5:31:1c:f3:c0:
                    4e:11:45:b9:ea:30:6d:6d:39:b6:a5:75:e0:30:eb:
                    d5:55:0d:75:cd:0e:7f:dc:86:4e:ad:ce:28:08:22:
                    ff:96:13:b9:fe:d2:e5:96:ce:01:ad:4e:18:70:71:
                    a5:bb:e4:d7:ab:0c:81:eb:92:1a:75:f6:ab:50:f2:
                    c0:0a:c6:f9:6f:8e:66:e0:0c:ff:fc:dc:fb:38:2c:
                    ce:50:3f:9e:e2:39:8c:c7:60:ce:6f:a4:83:8c:b5:
                    ee:b7:a8:81:32:d4:d2:91:80:67:b2:dd:fe:0c:20:
                    80:73:4a:9f:84:76:af:4c:46:09:72:b5:67:43:1d:
                    d5:63:4b:97:b5:1a:73:31:4a:14:95:10:33:21:26:
                    f9:b9:4a:63:f7:00:d7:e2:13:0e:39:3e:e3:e3:63:
                    2a:18:8e:2e:2d:46:fd:2a:44:34:15:43:d1:5c:3d:
                    99:29:5e:a5:11:13:5d:b9:21:0c:19:81:8a:dd:e4:
                    a0:05:ef:42:2e:d9:51:a1:13:25:53:3e:84:c3:88:
                    3a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:69:E5:8A:C9:37:47:66:07:E2:54:9E:32:AF:89:0F:2F:90:42:07
            X509v3 Authority Key Identifier:
                keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/pWnlisk3R2YH4lSeMq-JDy-QQgc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:b6:c1:dc:28:06:ed:1b:bc:99:2c:c2:9d:fd:cb:2e:11:64:
         25:b2:24:a0:c6:9d:3b:3f:d8:e9:ad:6b:c2:d5:da:af:68:ef:
         21:19:91:5e:c5:83:af:d0:de:63:2b:ad:99:e7:f8:50:34:14:
         58:0c:7d:e5:1c:3c:83:c7:1a:e6:85:68:79:55:62:b0:8d:da:
         9a:93:d1:85:ce:1a:8f:20:ee:04:21:da:83:e8:1c:4e:68:f2:
         3b:8c:fe:52:ae:52:e6:ec:bc:bc:62:79:34:7f:48:17:57:0f:
         6e:59:33:eb:ef:a6:c7:1a:3f:2b:7b:d6:6c:71:36:0a:d9:4f:
         fb:13:c1:98:0b:5a:83:1e:cd:89:77:6b:bc:46:e8:a5:f4:ae:
         96:ab:e9:a4:5f:0d:35:48:d5:b5:1f:d7:8e:79:ad:4b:03:a1:
         1d:58:ea:5c:12:7d:75:e8:6d:35:6a:80:d5:6b:ff:99:7c:cb:
         ae:d3:2a:14:8d:67:b7:68:52:5b:33:53:d3:fd:f3:a6:f9:6f:
         04:ea:e3:4e:3d:56:2d:07:70:07:16:1a:d7:2a:69:f3:ad:f4:
         ee:25:ab:0e:2f:21:ee:77:2b:bd:2c:47:10:bc:a9:9e:c2:dd:
         63:ed:fa:32:b6:2c:e6:c7:fa:40:f7:ae:63:39:a3:a8:7f:81:
         ad:72:c4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:34 2023 by rpki-client on console-ams.rpki-client.org