Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/I2RZBQ7-vft5LWD8Lr1czeLqFsk.roa
File:                     I2RZBQ7-vft5LWD8Lr1czeLqFsk.roa (raw, json)
Hash identifier:          5IGKKN6VC/XkZBF6ANFU7BE/KkukaiI06IDhaHgO1x4=
Subject key identifier:   23:64:59:05:0E:FE:BD:FB:79:2D:60:FC:2E:BD:5C:CD:E2:EA:16:C9
Certificate issuer:       /CN=68d24addcc3d5b77a099a907122252a47c8f6310
Certificate serial:       01856D4ABC9F9FE9C76E808CE7E7ACBD352E
Authority key identifier: 68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/I2RZBQ7-vft5LWD8Lr1czeLqFsk.roa
Signing time:             Sun 01 Jan 2023 12:24:52 +0000
ROA not before:           Sun 01 Jan 2023 12:24:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     5588
IP address blocks:        178.183.0.0/18 maxlen: 18
                          178.183.224.0/19 maxlen: 19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:4a:bc:9f:9f:e9:c7:6e:80:8c:e7:e7:ac:bd:35:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68d24addcc3d5b77a099a907122252a47c8f6310
        Validity
            Not Before: Jan  1 12:24:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=236459050efebdfb792d60fc2ebd5ccde2ea16c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2d:8d:1a:18:e7:2f:2f:2f:d3:77:ed:8b:13:
                    0d:5c:a1:c7:65:63:07:0a:83:0f:9f:9a:fe:81:1b:
                    f5:dc:96:c8:f2:36:e8:77:f8:f7:4e:76:9d:b9:12:
                    1f:57:4e:d7:a6:47:5b:6c:45:ae:5d:ca:37:6e:44:
                    e5:3e:b0:d1:90:4d:5e:f0:e2:0d:f2:c6:ea:ff:c9:
                    9c:94:61:a5:cf:e1:ee:eb:9b:44:3f:95:8f:b6:95:
                    d4:9f:a7:1f:df:49:bf:11:1b:31:55:f9:14:f5:4f:
                    19:14:bc:5d:06:ce:18:ff:ce:58:76:40:ab:1d:66:
                    da:d6:28:54:41:d1:7a:41:cf:98:78:fe:ec:a5:32:
                    d8:2b:b1:74:8c:74:16:bd:48:90:48:b5:cd:66:df:
                    cf:99:35:9f:2f:08:c9:36:2c:38:a8:a6:a5:89:cf:
                    57:a3:a9:6d:20:46:4d:43:7f:30:95:c2:26:f0:4c:
                    c5:e8:94:f9:e6:f8:95:bb:7f:ae:8f:58:39:d2:9b:
                    fa:fd:d7:48:9e:10:ab:fa:32:4a:cd:64:e4:16:35:
                    26:5d:1c:10:09:43:c1:51:82:b5:a6:e1:91:95:db:
                    a0:0a:0d:26:70:71:25:08:52:04:61:36:a7:a6:01:
                    e7:1e:c5:79:eb:18:11:c7:2d:83:e0:38:41:d5:f7:
                    f7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:64:59:05:0E:FE:BD:FB:79:2D:60:FC:2E:BD:5C:CD:E2:EA:16:C9
            X509v3 Authority Key Identifier:
                keyid:68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/I2RZBQ7-vft5LWD8Lr1czeLqFsk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.183.0.0/18
                  178.183.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         87:af:1a:65:29:f7:13:53:a3:c2:2b:d7:85:21:be:76:00:83:
         59:3d:98:13:28:7a:08:aa:ab:0f:7c:41:19:3c:f8:1e:41:48:
         d3:07:ff:b6:7c:bb:e2:f9:5d:85:cb:58:4c:5c:b8:21:1f:88:
         9d:df:ff:10:83:82:dc:bf:c6:e1:9a:ff:a9:de:b3:8f:db:75:
         c2:5f:38:2a:e8:44:02:6e:4b:ee:e6:41:0e:54:79:6b:28:36:
         42:da:e8:98:35:02:55:b2:0c:08:02:2b:f6:95:4f:57:93:cb:
         24:ff:80:cb:cc:c7:9b:d8:c5:af:29:78:c9:92:63:de:45:81:
         a4:0b:f7:cb:4a:b8:04:98:99:49:75:16:13:24:9f:c3:65:2e:
         10:9d:fb:8b:ca:2b:f6:6a:ab:03:85:68:ce:f2:20:fb:9c:51:
         d1:75:dd:64:f0:54:68:90:d5:c0:9c:d9:32:95:84:05:95:e6:
         e7:65:e9:b1:a6:38:53:40:9e:a7:66:29:35:da:f8:43:21:23:
         a4:79:2e:fb:bc:62:a1:e6:aa:8f:9b:72:c1:c0:42:cd:2d:56:
         c8:19:e0:9f:47:47:c7:ce:a1:86:63:3f:a2:ab:c5:f9:10:59:
         e0:5b:ac:74:80:42:b7:ca:d7:69:e2:21:0a:f9:64:6d:fd:7d:
         7a:43:ed:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:01 2023 by rpki-client on console-fra.rpki-client.org