Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/C6Lq7xUSqSyBLIPOoo-g7Gb7A9Y.roa
File:                     C6Lq7xUSqSyBLIPOoo-g7Gb7A9Y.roa (raw, json)
Hash identifier:          IHC2EFEe5GqIh8d+QWR54YfWxvdQovlSbeCGJdc0mYs=
Subject key identifier:   0B:A2:EA:EF:15:12:A9:2C:81:2C:83:CE:A2:8F:A0:EC:66:FB:03:D6
Certificate issuer:       /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial:       018570F0C5050D7260378C0341151F69871E
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/C6Lq7xUSqSyBLIPOoo-g7Gb7A9Y.roa
Signing time:             Mon 02 Jan 2023 05:25:05 +0000
ROA not before:           Mon 02 Jan 2023 05:25:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206093
IP address blocks:        82.177.128.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:f0:c5:05:0d:72:60:37:8c:03:41:15:1f:69:87:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
        Validity
            Not Before: Jan  2 05:25:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0ba2eaef1512a92c812c83cea28fa0ec66fb03d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:31:a4:bf:4c:e5:16:f7:a4:60:47:40:2a:62:
                    31:c6:3f:0e:6b:95:0c:f5:f2:ee:33:f2:57:d6:c3:
                    c9:53:d1:81:04:59:11:9a:f9:19:0f:6b:a9:b2:6d:
                    3c:3d:d7:48:27:96:27:f4:a1:88:e0:8c:72:92:1d:
                    85:87:36:c7:6f:dd:bb:7d:d7:ec:d2:76:3f:7f:5f:
                    0a:58:5f:75:88:bb:71:6b:c2:04:78:a8:3d:f9:c8:
                    ab:4e:15:a7:6e:e8:78:89:54:bb:d3:86:9d:3a:e9:
                    18:89:38:fd:7c:66:0b:95:6f:63:9f:72:e1:5c:4f:
                    c4:17:01:2b:c9:c0:11:eb:08:48:7b:4e:ce:b3:1b:
                    6f:e0:75:ca:65:b8:9a:95:cc:33:31:c3:4d:8e:36:
                    d1:20:bf:e8:4b:24:6a:f3:aa:61:5d:0a:5a:da:6f:
                    03:f4:fd:1b:e0:0a:a5:ad:a6:82:94:2c:5e:89:04:
                    3e:fb:9c:b5:e9:28:3f:a4:81:e5:2e:62:66:9b:4a:
                    69:c2:f0:84:e5:ee:d7:f7:9c:60:a7:e2:8c:3c:b3:
                    9d:96:1a:39:64:1b:23:cd:17:36:1e:5b:c7:23:17:
                    4c:a3:51:82:da:7f:65:61:f9:c8:0d:91:f2:9f:41:
                    12:c7:ab:f5:bf:8d:01:20:ce:32:0f:61:cd:83:7d:
                    0f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A2:EA:EF:15:12:A9:2C:81:2C:83:CE:A2:8F:A0:EC:66:FB:03:D6
            X509v3 Authority Key Identifier:
                keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/C6Lq7xUSqSyBLIPOoo-g7Gb7A9Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.177.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:a8:f4:d7:a1:dc:0f:f3:df:33:56:55:1d:c8:e9:76:00:d6:
         9e:43:19:38:c3:d2:15:72:c2:98:cb:fd:ee:34:5a:09:03:ad:
         d3:77:2e:a5:6b:f6:55:ac:1e:af:1e:17:c4:4e:5d:2c:d2:17:
         0d:61:8a:52:98:f7:ef:18:eb:9b:fc:1e:fb:ef:fa:35:13:be:
         0a:2e:1c:cb:cc:a1:bb:a8:4c:01:31:11:4e:1f:89:12:01:9b:
         3c:1e:66:cc:e2:fe:a0:e6:2f:05:ed:be:9b:c1:0b:e4:be:92:
         44:ae:ff:5b:c0:57:33:f4:67:62:48:4b:99:35:3e:d0:ad:44:
         a6:cc:1e:72:f4:19:6a:12:b1:87:c6:c8:9c:08:0e:aa:1b:4e:
         fe:de:65:17:cf:7f:b8:45:76:86:da:1d:8b:b3:c2:71:07:95:
         ff:3a:e3:00:64:e9:44:77:e2:8d:4f:a6:5c:22:ec:13:62:8e:
         10:f4:7c:3a:6f:3e:bb:81:77:b5:37:8d:7a:df:70:45:71:59:
         b2:d0:4c:d1:f9:3f:7a:8f:f3:20:a6:7f:6c:aa:85:60:a8:c9:
         d0:18:b7:66:89:af:62:df:bc:9b:78:b4:fc:45:94:70:68:b2:
         d5:a5:8e:6a:4b:3b:d4:b1:b5:99:c6:7b:41:7b:48:df:de:21:
         14:85:46:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:36 2024 by rpki-client on console-fra.rpki-client.org