Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/Mp7_JGUPLeSpuKjLiimIEVKLy_E.roa
File:                     Mp7_JGUPLeSpuKjLiimIEVKLy_E.roa (raw, json)
Hash identifier:          5t4C/9iEpFniOsvfxAOSqwT85pVskpNIdj5/qZeA9ac=
Subject key identifier:   32:9E:FF:24:65:0F:2D:E4:A9:B8:A8:CB:8A:29:88:11:52:8B:CB:F1
Certificate issuer:       /CN=e9e415ed5c0c7759981001b8db262da779a04b3d
Certificate serial:       0187E5728FBFBCE83B81728E05378A77F641
Authority key identifier: E9:E4:15:ED:5C:0C:77:59:98:10:01:B8:DB:26:2D:A7:79:A0:4B:3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6eQV7VwMd1mYEAG42yYtp3mgSz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/Mp7_JGUPLeSpuKjLiimIEVKLy_E.roa
Signing time:             Thu 04 May 2023 06:28:22 +0000
ROA not before:           Thu 04 May 2023 06:28:22 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3225
IP address blocks:        213.132.251.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:e5:72:8f:bf:bc:e8:3b:81:72:8e:05:37:8a:77:f6:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9e415ed5c0c7759981001b8db262da779a04b3d
        Validity
            Not Before: May  4 06:28:22 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=329eff24650f2de4a9b8a8cb8a298811528bcbf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:35:80:67:d0:e0:24:44:88:ca:8e:36:e4:8b:
                    b2:e6:a6:e9:97:a9:6c:4a:d3:9b:ca:0a:ce:18:10:
                    1b:d1:9e:af:23:88:33:c1:af:da:48:cb:0a:26:b5:
                    4c:d8:0b:07:42:2c:74:56:05:0c:eb:5f:db:13:a9:
                    6f:e1:ad:6d:60:e5:90:ba:fa:e7:35:94:f9:8b:8d:
                    d2:ed:e3:d3:41:94:d5:1b:eb:a2:3a:bb:02:48:34:
                    51:9a:72:21:c0:8a:df:cc:4b:80:2c:09:c0:ae:fd:
                    b6:cd:61:a1:6b:93:ee:c5:06:51:ea:66:74:15:05:
                    98:2b:fe:39:05:64:77:bc:f0:66:ed:25:1b:03:52:
                    ae:92:bd:0b:5e:70:6f:b9:76:ee:f1:ff:85:fb:04:
                    a6:ea:56:52:ef:a4:2f:23:15:e7:7e:b8:9c:1e:0d:
                    64:e2:73:38:ec:83:53:30:79:b0:c3:46:a1:ea:4f:
                    7d:66:5e:80:45:b7:35:4c:c3:e1:2e:b8:05:58:48:
                    e9:08:62:33:e0:06:1d:b1:9c:fa:44:f0:c6:6f:85:
                    a3:3c:99:7a:8c:9a:98:17:9b:1a:83:ea:13:c2:4d:
                    98:9b:5d:5d:e4:bc:0f:b4:bb:37:a3:c0:b6:94:b8:
                    84:78:e7:c0:2c:1c:fe:9b:50:4d:e2:87:c2:24:54:
                    1c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:9E:FF:24:65:0F:2D:E4:A9:B8:A8:CB:8A:29:88:11:52:8B:CB:F1
            X509v3 Authority Key Identifier:
                keyid:E9:E4:15:ED:5C:0C:77:59:98:10:01:B8:DB:26:2D:A7:79:A0:4B:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eQV7VwMd1mYEAG42yYtp3mgSz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/Mp7_JGUPLeSpuKjLiimIEVKLy_E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/7eb683-e218-4382-bfd9-28da6a1ba128/1/6eQV7VwMd1mYEAG42yYtp3mgSz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.132.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:57:6d:07:58:d9:c0:42:cb:5f:7e:78:38:13:9a:7f:05:2c:
         b1:6f:95:3b:f5:56:fd:2d:8d:bf:61:12:3b:ed:58:cc:1b:ec:
         57:6a:32:c5:90:2f:92:f1:1a:ba:9d:3d:e6:96:c1:5f:ee:f0:
         fa:af:ab:56:91:f8:ff:6c:d8:c3:03:44:f5:ab:af:34:00:a5:
         87:c4:13:10:1b:4c:15:3b:7f:8c:74:6d:55:9d:db:f1:e6:bf:
         15:a3:db:ac:d7:5f:a2:ab:96:8a:83:fe:98:d3:36:ee:ac:1c:
         f5:b0:39:00:cb:3a:a7:60:0e:ec:d5:8e:9d:14:2f:5a:b5:51:
         76:ec:28:93:7f:26:28:a2:5d:16:44:0e:f0:05:cd:e9:86:c7:
         ab:56:e9:2d:83:66:f5:80:e9:74:c7:19:4c:7c:a4:8e:66:0d:
         ea:63:ae:af:a5:f0:64:dd:00:9b:f4:28:5d:74:31:4c:10:f5:
         c4:60:1e:fa:23:8a:b4:5b:82:37:8a:d3:03:bb:7a:90:f6:06:
         67:c4:8e:a8:59:bf:b4:17:8e:e4:f5:f8:e5:b6:39:f7:1f:1c:
         a5:c9:be:15:5f:3d:8d:1c:23:88:14:ec:bd:35:ad:be:dc:07:
         69:27:63:6e:6d:91:77:8b:d0:de:77:b9:cb:74:de:17:10:ba:
         57:3a:3c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:43 2024 by rpki-client on console-fra.rpki-client.org