Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/E4xLa6ZEsxxMZpCbYIB1j3-1WkU.roa
File:                     E4xLa6ZEsxxMZpCbYIB1j3-1WkU.roa (raw, json)
Hash identifier:          BY7k/Rj7yrTr+TynmIi6HQJYR78d6Kjp9J0dijrMDvw=
Subject key identifier:   13:8C:4B:6B:A6:44:B3:1C:4C:66:90:9B:60:80:75:8F:7F:B5:5A:45
Certificate issuer:       /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Certificate serial:       018A471A0F953EED44A7DB55255DBD9C3700
Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/E4xLa6ZEsxxMZpCbYIB1j3-1WkU.roa
Signing time:             Wed 30 Aug 2023 15:40:04 +0000
ROA not before:           Wed 30 Aug 2023 15:40:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     41911
IP address blocks:        176.110.32.0/19 maxlen: 19
                          176.110.0.0/19 maxlen: 19

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:47:1a:0f:95:3e:ed:44:a7:db:55:25:5d:bd:9c:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
        Validity
            Not Before: Aug 30 15:40:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=138c4b6ba644b31c4c66909b6080758f7fb55a45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:be:47:4c:3c:43:78:b8:fe:73:6e:ea:d4:1e:
                    9f:04:b5:ed:76:2c:8d:01:5d:3f:9b:e6:b8:0b:78:
                    0f:7b:73:d1:68:75:46:77:c8:f9:71:47:1a:5b:35:
                    df:b0:5d:2a:c6:b0:dc:7f:ef:2d:f0:c3:ad:6f:1e:
                    c4:f1:fe:11:46:5c:57:98:de:1f:b6:d5:2c:c9:88:
                    90:6e:1c:6f:11:62:1b:2a:64:83:58:63:0c:aa:ce:
                    fc:62:6a:b3:ed:f1:3e:80:35:cf:e1:95:c5:de:16:
                    36:7c:1e:9d:08:73:76:da:da:f7:18:43:e0:f7:ff:
                    64:71:cd:59:ba:21:6f:8a:7a:00:8d:5a:9c:fe:5a:
                    f8:39:fd:3a:36:6d:a6:ff:3c:74:47:ab:11:da:dd:
                    42:94:7f:b6:70:78:3f:89:94:b3:9f:01:4f:8c:12:
                    c9:0f:85:62:c7:71:9f:98:dd:f2:37:96:71:b5:47:
                    05:b9:e6:2e:2a:e1:93:5a:12:3b:d7:39:17:d5:e7:
                    45:cc:5b:d5:47:62:59:1d:4f:f5:b2:bf:00:c3:51:
                    db:cf:0a:95:8f:c2:fc:9e:ad:7f:19:20:21:f0:60:
                    7d:b0:90:84:e7:a4:fc:33:d9:e8:15:d8:f6:a9:d0:
                    ba:4f:6c:3c:72:b0:82:fe:54:bb:27:27:80:50:80:
                    e2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:8C:4B:6B:A6:44:B3:1C:4C:66:90:9B:60:80:75:8F:7F:B5:5A:45
            X509v3 Authority Key Identifier:
                keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/E4xLa6ZEsxxMZpCbYIB1j3-1WkU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.110.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         27:fd:30:1d:d7:2b:9c:23:cd:96:be:99:e0:01:08:52:b3:d5:
         48:89:1c:1a:6f:90:1d:e6:02:48:44:62:e9:77:96:b3:70:c3:
         76:1f:27:49:93:7d:ac:11:3f:84:02:f9:b6:0d:29:b7:77:a2:
         af:99:e2:82:4f:4d:92:8a:04:1d:34:23:ab:2e:9a:31:7e:f8:
         8c:09:c5:c3:8e:03:5d:a1:7e:87:0e:27:05:5a:f1:61:fd:eb:
         c2:98:08:5c:1c:38:97:00:cb:41:18:1a:54:b0:9e:2f:75:64:
         d1:00:91:9a:c6:29:a7:d9:03:69:58:91:0c:05:84:b2:82:cd:
         49:10:94:fd:c3:cf:cb:30:58:fe:8a:8c:6d:cb:14:f2:c6:47:
         32:70:44:87:ac:a3:e1:3a:36:58:f3:bf:45:99:73:b1:4a:d2:
         2c:c4:55:74:ed:44:11:e0:4f:b7:a9:1e:58:8d:59:a5:24:7d:
         eb:14:e3:01:b8:0b:67:e3:84:dc:2f:43:38:40:29:af:6a:d6:
         4f:19:b3:35:b7:31:42:7b:84:85:a3:cc:6f:69:fe:54:2d:37:
         09:9e:d0:df:5f:45:2a:48:63:13:2b:3f:99:9f:b8:b4:4b:e8:
         d5:45:06:33:8a:41:6f:40:8e:c3:36:7c:0a:2f:44:c4:78:c8:
         6c:93:f3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 2 06:55:05 2023 by rpki-client on console-ams.rpki-client.org