Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/BW-nLP6oaC6sVoFSQncGywW6Nb0.roa
File:                     BW-nLP6oaC6sVoFSQncGywW6Nb0.roa (raw, json)
Hash identifier:          BlTKCFtRkM4nuvw6xVr2ZeizK8NlCElArWA4hsHkrQs=
Subject key identifier:   05:6F:A7:2C:FE:A8:68:2E:AC:56:81:52:42:77:06:CB:05:BA:35:BD
Certificate issuer:       /CN=8777b5b36f66e13c4388c9934da507856515d073
Certificate serial:       01856DE6479B667033478F23FD09B31DA4AC
Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/BW-nLP6oaC6sVoFSQncGywW6Nb0.roa
Signing time:             Sun 01 Jan 2023 15:14:46 +0000
ROA not before:           Sun 01 Jan 2023 15:14:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62383
IP address blocks:        188.210.92.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:e6:47:9b:66:70:33:47:8f:23:fd:09:b3:1d:a4:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073
        Validity
            Not Before: Jan  1 15:14:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=056fa72cfea8682eac568152427706cb05ba35bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:eb:c9:10:c9:c5:57:e4:63:61:f2:70:be:8f:
                    ad:5a:58:5e:87:47:5e:a1:3e:9f:7a:56:19:75:27:
                    24:18:ac:79:b0:60:59:38:af:07:dc:cf:5b:d0:27:
                    45:de:7c:3e:b2:32:c1:45:f4:c4:6f:b5:4d:a1:2b:
                    81:85:1f:db:a3:6f:ce:48:69:57:59:7d:12:dc:e9:
                    9a:83:3f:56:82:71:1c:2d:be:a5:1d:5e:d2:b9:07:
                    24:e9:a4:e6:f9:50:fe:ee:aa:fa:e4:76:d1:31:03:
                    b5:31:00:30:fd:80:37:8a:a2:d0:21:42:3d:92:d5:
                    ab:a6:34:2c:d6:1b:a8:55:b5:bb:26:38:84:f5:58:
                    31:df:7b:08:5b:4a:64:21:0c:6c:24:72:10:53:54:
                    21:19:44:36:e0:b6:4e:e7:45:0b:57:53:e8:9b:e4:
                    19:a9:36:c2:d3:64:8a:94:c2:58:10:fc:a1:79:58:
                    ee:a1:09:1a:2d:3f:d2:25:02:38:e7:58:91:91:4e:
                    34:fe:73:5a:33:88:56:03:f5:4d:76:7a:34:86:70:
                    c4:03:44:95:96:cd:ac:6d:72:e7:5d:dc:47:38:9a:
                    16:b0:5d:0c:ea:a4:06:8d:d4:cb:44:d7:32:a9:e4:
                    03:a7:03:b4:eb:31:d4:15:94:f9:40:f2:3b:9b:09:
                    b7:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:6F:A7:2C:FE:A8:68:2E:AC:56:81:52:42:77:06:CB:05:BA:35:BD
            X509v3 Authority Key Identifier:
                keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/BW-nLP6oaC6sVoFSQncGywW6Nb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.210.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:ab:ea:b9:5a:af:8e:b2:60:63:33:da:6f:7a:1a:40:72:48:
         dc:4a:02:68:7e:a1:c6:b7:a4:33:06:eb:86:68:1f:e6:18:6c:
         45:0f:ae:1b:25:d8:49:35:84:74:f3:9b:f9:73:16:37:e6:ec:
         3c:cb:d0:c6:68:af:98:3f:06:9b:0a:a9:89:02:a0:56:22:07:
         86:af:cd:4c:06:23:bd:d4:3a:86:6f:cf:c6:3e:bf:c5:d9:f3:
         1c:ac:bb:bf:c0:46:3e:12:1d:0c:23:15:b0:b9:b7:51:49:71:
         2b:68:40:86:9e:fc:2c:ae:ff:7d:4b:63:22:b6:00:d1:02:90:
         04:ef:dc:d5:17:98:36:52:6e:c1:e9:4d:3b:fe:02:01:12:49:
         c9:ec:4c:d4:d3:58:0e:80:4f:c4:8a:62:a9:1b:79:13:97:da:
         b6:7b:91:c2:92:55:de:b8:e4:27:76:f0:4e:9f:9c:26:3e:c6:
         a1:74:5a:1d:0c:c7:a9:bf:bb:7e:dc:cc:55:0f:4c:86:7e:2f:
         2e:51:2e:ed:46:13:88:af:3c:d7:aa:b2:7f:d1:eb:35:15:a8:
         5a:05:4a:8a:87:14:87:97:a6:9c:4f:51:b1:c3:b7:41:01:9d:
         40:78:7f:98:9c:1f:1f:4c:82:a0:8f:e6:17:c3:d2:c7:76:44:
         36:5c:64:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:27 2024 by rpki-client on console-ams.rpki-client.org