Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/VrIz2kh5wzi2BeLVA32AuIh1IHI.roa
File:                     VrIz2kh5wzi2BeLVA32AuIh1IHI.roa (raw, json)
Hash identifier:          lrFkV9MQgJGxCAihym/p4ITX4sUQEBnjQhSS+piEhdY=
Subject key identifier:   56:B2:33:DA:48:79:C3:38:B6:05:E2:D5:03:7D:80:B8:88:75:20:72
Certificate issuer:       /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial:       0188BFA7080FF9780209303806B736DFFCB9
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/VrIz2kh5wzi2BeLVA32AuIh1IHI.roa
Signing time:             Thu 15 Jun 2023 15:22:54 +0000
ROA not before:           Thu 15 Jun 2023 15:22:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     11938
IP address blocks:        185.65.201.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:bf:a7:08:0f:f9:78:02:09:30:38:06:b7:36:df:fc:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
        Validity
            Not Before: Jun 15 15:22:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=56b233da4879c338b605e2d5037d80b888752072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1d:ea:27:d2:d0:38:c6:89:18:2e:c6:a0:97:
                    66:7e:15:93:e1:b5:db:5b:ff:5b:68:09:01:09:cb:
                    1d:61:c6:b2:8b:0e:fd:21:29:c3:01:79:bd:aa:4d:
                    89:bf:c3:7d:64:df:f6:e5:67:ef:48:3c:e5:18:9c:
                    eb:d0:0c:dc:37:ac:ce:5c:2c:7a:5d:e6:00:9b:89:
                    75:b3:8c:01:e4:cd:4d:13:ae:44:87:b0:78:9b:cf:
                    d0:1d:d0:8a:7d:77:49:6a:aa:56:bf:68:d8:b2:82:
                    27:22:88:c7:82:2b:ee:90:f4:c3:da:60:2f:8e:11:
                    c6:98:79:d7:f7:e6:df:cf:dd:89:90:49:96:0c:26:
                    e6:48:04:cc:83:a0:a9:ec:e4:86:8a:9a:3e:79:5a:
                    84:ad:50:d1:78:f3:a0:c2:e1:a6:62:ad:69:3c:60:
                    e1:76:61:0c:b6:c0:8f:fa:48:d8:46:88:65:e7:9d:
                    47:3c:f6:e7:60:53:35:ef:7a:9b:1a:a1:ce:84:18:
                    56:db:13:07:5e:d5:0e:c0:85:24:3c:c0:77:b8:1e:
                    f1:16:4f:08:6a:4c:6a:37:56:3c:bc:35:7d:5a:60:
                    24:7b:49:7b:c3:61:bd:cc:8a:2c:33:28:62:47:88:
                    7a:1c:f8:58:33:45:98:ed:cf:bc:a4:81:8e:85:31:
                    a5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B2:33:DA:48:79:C3:38:B6:05:E2:D5:03:7D:80:B8:88:75:20:72
            X509v3 Authority Key Identifier:
                keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/VrIz2kh5wzi2BeLVA32AuIh1IHI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.65.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:dd:9e:52:39:cd:ed:0d:6e:d0:67:86:c9:a5:06:7b:13:9d:
         e9:69:a5:35:ac:a3:14:68:c0:19:34:55:5a:1c:54:19:81:ed:
         16:b8:39:62:f8:d5:93:84:d8:45:63:1b:b3:fa:ca:46:09:6a:
         1d:ab:4b:14:3a:9d:39:ea:d5:86:86:b4:b6:b2:10:cd:fc:dd:
         9d:0b:64:76:2e:4f:89:c4:da:e7:13:d3:14:11:f2:25:aa:65:
         dc:d8:99:d0:80:83:7c:f0:5a:18:0b:c3:8c:39:73:18:97:16:
         de:9f:8c:fb:1c:f8:01:0f:94:00:bf:de:a7:f8:7b:b0:62:aa:
         c9:34:5a:05:95:34:97:a4:29:be:2f:2f:c7:9c:07:65:61:94:
         86:b7:38:72:c8:e6:60:67:fc:07:d4:31:72:6e:8e:f0:37:32:
         24:1a:89:5d:49:d8:a3:2a:bf:6c:d8:93:15:9e:08:0b:68:ba:
         bb:00:3b:74:99:6f:bb:67:ee:9f:dc:b3:32:89:16:8c:1a:c2:
         c2:5b:6b:99:6c:19:af:3b:2a:9f:a3:6a:28:a5:04:92:9f:84:
         5b:c1:ae:6d:80:8b:bc:9f:44:f4:ee:49:ea:a4:36:7e:70:87:
         d0:23:9e:86:d0:34:d3:97:3f:c2:6d:e5:02:b2:8c:27:80:69:
         ac:52:86:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:44 2023 by rpki-client on console-ams.rpki-client.org