Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/J27KeRRCEjT6_dPeTqckXAZ2iRM.roa
File:                     J27KeRRCEjT6_dPeTqckXAZ2iRM.roa (raw, json)
Hash identifier:          D8ZF0Z9rUX4YX4vjajt7ez0avb+2bnZWBnfSoyeWuwg=
Subject key identifier:   27:6E:CA:79:14:42:12:34:FA:FD:D3:DE:4E:A7:24:5C:06:76:89:13
Certificate issuer:       /CN=a04845af1dc0087b274cee52a4a9e0880335435d
Certificate serial:       01856C1375D26FF8FBAB0B3E365BA6D29661
Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/J27KeRRCEjT6_dPeTqckXAZ2iRM.roa
Signing time:             Sun 01 Jan 2023 06:44:52 +0000
ROA not before:           Sun 01 Jan 2023 06:44:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     56582
IP address blocks:        46.235.14.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:13:75:d2:6f:f8:fb:ab:0b:3e:36:5b:a6:d2:96:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d
        Validity
            Not Before: Jan  1 06:44:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=276eca7914421234fafdd3de4ea7245c06768913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b2:92:c6:bb:af:d1:97:53:c8:94:2e:ca:a9:
                    5f:5c:b8:ea:95:34:a7:60:3b:37:cf:a5:b9:da:48:
                    46:d1:af:32:6d:ea:59:bb:d2:41:95:a3:7a:60:4c:
                    bc:bf:2e:c0:ea:c2:ad:25:28:fc:52:df:8a:d4:ce:
                    74:92:af:a0:40:5f:44:ab:9a:fc:b6:f3:e1:7d:48:
                    dc:37:39:34:de:16:f5:00:56:46:19:6b:a3:da:0e:
                    0a:4f:d3:fa:c8:69:45:fa:32:c4:98:fc:8c:5b:d8:
                    5e:77:05:c6:fe:7c:52:8e:92:28:80:30:ff:76:bd:
                    0f:a1:4f:5e:45:b5:a4:b7:7b:7a:bc:cb:fb:98:13:
                    23:1b:95:87:f8:f0:34:05:58:70:7c:7d:44:05:fe:
                    96:15:94:15:20:32:7f:28:cc:8e:2d:ed:17:20:44:
                    42:8c:fc:7b:13:8f:8f:f2:2e:e2:fd:58:f9:d9:1b:
                    b1:3f:8b:1e:7e:70:9b:2f:74:8b:43:35:15:43:dc:
                    8f:8a:f4:e2:6e:ec:7e:89:cb:e7:ce:ed:19:e9:bf:
                    8c:5f:00:5b:eb:1b:de:36:6e:4b:ed:0a:71:27:71:
                    c9:ce:8a:cc:0e:b4:e8:20:a6:c7:94:c6:f6:b8:65:
                    3d:e0:b5:ba:11:54:a0:89:1c:3f:ef:4c:87:cb:c7:
                    d5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:6E:CA:79:14:42:12:34:FA:FD:D3:DE:4E:A7:24:5C:06:76:89:13
            X509v3 Authority Key Identifier:
                keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/J27KeRRCEjT6_dPeTqckXAZ2iRM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.235.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:10:88:a5:71:49:f2:41:1f:0b:eb:ac:30:c2:aa:0e:8c:bb:
         d6:4a:c3:c0:0b:47:fb:07:1a:a3:51:be:30:53:06:eb:4c:46:
         fd:fd:34:c8:31:94:22:61:89:e6:67:e5:51:45:d6:d5:3c:f7:
         af:49:25:a3:77:a0:90:03:4e:6b:f3:c3:3f:07:54:42:2d:a6:
         87:3f:70:4a:cb:55:25:76:62:bc:76:bf:31:4a:7e:b6:40:56:
         ce:e0:57:d1:fa:d0:08:84:d1:e3:61:53:ff:49:66:55:a1:73:
         33:7c:58:17:c8:d5:e1:57:b1:9d:c4:d4:25:5d:1e:6f:23:8d:
         fb:6d:04:17:74:70:19:73:56:34:5e:f1:30:6d:a3:72:fd:8b:
         89:7c:35:de:c6:60:39:12:a1:f5:68:a9:3f:53:02:6d:32:ec:
         d9:37:a8:c1:b9:5b:33:d8:50:50:a7:7e:a4:9c:d7:ee:b1:e6:
         2a:c1:e1:d6:ea:b3:80:0c:3f:c3:57:fc:a0:8a:ac:2b:35:42:
         9c:ef:6e:22:a2:78:b2:e4:7c:d5:4a:e2:6b:52:70:6c:59:01:
         b8:c5:d2:cc:66:c9:18:92:75:76:db:f6:d3:bd:56:89:8b:2e:
         67:14:ff:5a:ce:ef:56:89:fa:4d:e7:b6:14:99:d3:bd:da:a7:
         1b:c0:00:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:17 2024 by rpki-client on console-ams.rpki-client.org