Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/inLL8bT5C5QkHQUf_ahfwCCUEiY.roa
File:                     inLL8bT5C5QkHQUf_ahfwCCUEiY.roa (raw, json)
Hash identifier:          8bzhDsnKPd3qTd6mwx01PmtGwhNTy1YDwfSfM2D2gbc=
Subject key identifier:   8A:72:CB:F1:B4:F9:0B:94:24:1D:05:1F:FD:A8:5F:C0:20:94:12:26
Certificate issuer:       /CN=3c4ed942e5c742e77bfb9beb954f872534f52848
Certificate serial:       0188B1AB7427209494EF0FF9881B3C7162B6
Authority key identifier: 3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/inLL8bT5C5QkHQUf_ahfwCCUEiY.roa
Signing time:             Mon 12 Jun 2023 22:13:03 +0000
ROA not before:           Mon 12 Jun 2023 22:13:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        62.182.170.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:b1:ab:74:27:20:94:94:ef:0f:f9:88:1b:3c:71:62:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4ed942e5c742e77bfb9beb954f872534f52848
        Validity
            Not Before: Jun 12 22:13:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8a72cbf1b4f90b94241d051ffda85fc020941226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a8:37:ee:37:28:b2:0a:20:b7:31:a0:83:32:
                    5a:32:ee:85:5a:e7:6c:9f:74:b2:06:45:53:3c:39:
                    61:08:78:f8:e9:9c:a9:90:23:23:d1:15:c4:53:f1:
                    fc:5a:11:71:8c:90:81:0f:24:53:25:92:9b:34:52:
                    43:91:6f:c6:5f:ce:ca:7f:6b:dd:3d:a2:ac:e6:86:
                    99:95:a5:d1:4c:47:c0:ae:3b:6e:ac:c2:26:c0:d8:
                    0d:56:88:94:d9:ce:74:b7:0a:21:35:12:ea:fd:6b:
                    d7:3d:fc:8d:e9:6d:f4:13:9b:57:35:77:01:4d:92:
                    e6:f7:2d:18:d7:da:43:1b:0f:c4:85:4f:62:75:db:
                    59:02:33:a3:79:10:70:db:55:42:e7:19:4e:88:6f:
                    13:2b:c9:8a:8d:cd:be:a7:7e:9d:e8:78:ca:cc:13:
                    56:bf:25:14:6b:75:37:6c:c1:a8:4e:61:f9:1f:49:
                    08:f6:f3:a0:71:90:f6:46:4d:0d:54:9d:b8:68:96:
                    47:82:d6:f0:6b:49:f3:88:7d:aa:29:4a:1a:c6:a6:
                    0d:fa:e7:5b:4c:4d:6c:ea:93:74:bd:1a:c6:7a:05:
                    5e:4a:22:6f:ce:e1:73:d9:4d:24:eb:93:a5:4d:1b:
                    a7:88:47:9c:4f:25:19:7f:2a:15:65:25:5d:f7:c7:
                    3b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:72:CB:F1:B4:F9:0B:94:24:1D:05:1F:FD:A8:5F:C0:20:94:12:26
            X509v3 Authority Key Identifier:
                keyid:3C:4E:D9:42:E5:C7:42:E7:7B:FB:9B:EB:95:4F:87:25:34:F5:28:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PE7ZQuXHQud7-5vrlU-HJTT1KEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/inLL8bT5C5QkHQUf_ahfwCCUEiY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/1bb45a-551c-4967-95ca-77344bcc9191/1/PE7ZQuXHQud7-5vrlU-HJTT1KEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.182.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:9b:ac:5a:08:df:cc:45:2b:2a:21:c2:e0:55:55:c5:9c:9f:
         7e:12:8e:b4:6b:23:88:13:85:22:d9:ed:34:4d:65:40:aa:5b:
         8a:40:1e:47:73:5b:2a:78:64:47:f6:4d:0c:c9:ea:a7:1e:bf:
         3e:ab:5e:25:9d:e7:29:ff:2d:9f:c7:e1:3b:7e:37:f9:a7:22:
         9a:37:57:e6:b1:e4:86:83:8f:fa:7e:17:85:25:86:27:88:6b:
         4d:6b:df:8a:31:f8:e7:c0:37:ff:91:e8:6e:af:ab:fe:26:bd:
         06:8e:d7:65:7c:fe:1b:dd:2b:44:ed:eb:34:96:1b:ab:4f:78:
         70:16:f8:fb:93:fa:51:76:39:1e:d9:3d:f8:f4:9b:3e:9c:d3:
         d0:0b:2e:e3:30:bf:3e:e3:05:45:ac:77:aa:7e:02:b0:2b:1f:
         f0:f7:0c:1d:68:30:c6:5f:06:86:ce:31:63:c1:ce:fa:0a:ed:
         66:86:63:62:5e:de:a4:62:44:08:68:95:b9:b9:1b:81:69:0a:
         c2:19:21:66:5f:75:8e:53:24:a4:e3:1d:07:31:c0:16:d6:1b:
         76:27:8f:e6:d2:05:c1:b0:a1:4a:ca:56:d4:b7:e9:99:2e:76:
         9b:9c:43:43:5a:33:38:1a:da:56:12:aa:39:5c:05:de:cd:ce:
         8b:b4:d9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:13 2023 by rpki-client on console-fra.rpki-client.org