Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/dc504f-473c-4e9f-a87a-5a08c5e97209/1/eA0cOqGAhDg2wRzc-BSYTME-acs.roa
File:                     eA0cOqGAhDg2wRzc-BSYTME-acs.roa (raw, json)
Hash identifier:          zcxKjBHBXFrvO7oEGYUHuspkk81IkM4c6w9YmOGwz5g=
Subject key identifier:   78:0D:1C:3A:A1:80:84:38:36:C1:1C:DC:F8:14:98:4C:C1:3E:69:CB
Certificate issuer:       /CN=2ce3894512e48705a5db0609d4fac675a750fc4f
Certificate serial:       01856BD3530A8F654356A6886FF690986A05
Authority key identifier: 2C:E3:89:45:12:E4:87:05:A5:DB:06:09:D4:FA:C6:75:A7:50:FC:4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LOOJRRLkhwWl2wYJ1PrGdadQ_E8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/dc504f-473c-4e9f-a87a-5a08c5e97209/1/eA0cOqGAhDg2wRzc-BSYTME-acs.roa
Signing time:             Sun 01 Jan 2023 05:34:49 +0000
ROA not before:           Sun 01 Jan 2023 05:34:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        109.234.76.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:d3:53:0a:8f:65:43:56:a6:88:6f:f6:90:98:6a:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ce3894512e48705a5db0609d4fac675a750fc4f
        Validity
            Not Before: Jan  1 05:34:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=780d1c3aa180843836c11cdcf814984cc13e69cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:25:63:de:44:e2:e4:24:94:83:85:c5:23:c4:
                    56:a1:b0:e8:eb:1c:9b:53:df:de:8a:dd:da:e7:85:
                    bc:58:fa:f3:dc:d0:6b:10:72:ef:7c:30:53:9c:67:
                    13:71:d0:1e:58:9d:0c:d7:77:a5:03:e3:0f:76:3c:
                    5e:24:15:ba:79:b1:19:c0:5e:e5:7d:07:5b:4d:da:
                    8f:fa:97:53:4c:2d:c6:e4:58:d1:df:1d:14:3b:6f:
                    2e:50:9c:f8:34:7a:0b:e1:fc:7b:ce:45:e1:62:57:
                    1d:f0:ac:cb:c4:34:0f:a3:0a:b7:c5:07:ce:f3:48:
                    04:d6:64:15:ec:e5:ed:4b:6e:c9:99:3c:25:d9:92:
                    a1:a9:f9:3b:2e:c2:14:2e:4b:66:8e:68:d1:8e:66:
                    49:49:de:52:b6:c2:9c:e7:f2:c6:43:a7:43:e9:c4:
                    8d:fc:eb:52:9f:79:64:d8:54:fe:0f:41:39:4d:47:
                    c4:f8:de:ca:64:46:7c:2e:ba:ef:cd:d1:a6:d5:f2:
                    f1:b4:9a:ad:70:a0:ce:d3:c7:34:3b:ac:8a:5d:93:
                    d9:ec:8d:69:e8:ed:93:76:8f:95:c5:e1:64:81:84:
                    56:d5:d0:83:e2:71:9a:da:8d:d3:58:b4:ba:72:6e:
                    6f:41:72:3f:9f:8e:7f:87:b1:46:13:31:14:c4:93:
                    fa:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:0D:1C:3A:A1:80:84:38:36:C1:1C:DC:F8:14:98:4C:C1:3E:69:CB
            X509v3 Authority Key Identifier:
                keyid:2C:E3:89:45:12:E4:87:05:A5:DB:06:09:D4:FA:C6:75:A7:50:FC:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LOOJRRLkhwWl2wYJ1PrGdadQ_E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/dc504f-473c-4e9f-a87a-5a08c5e97209/1/eA0cOqGAhDg2wRzc-BSYTME-acs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/dc504f-473c-4e9f-a87a-5a08c5e97209/1/LOOJRRLkhwWl2wYJ1PrGdadQ_E8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.234.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:9c:18:bc:a2:d2:ca:a5:85:59:7d:12:ab:e4:7f:fd:bd:9b:
         6d:74:be:2d:b6:1a:d2:c6:e9:99:ec:42:68:a9:8d:80:f1:41:
         c3:d2:3a:1f:77:cb:c3:aa:bd:47:03:62:70:6b:11:b3:0e:9c:
         c2:95:93:b7:e5:cc:20:c0:b4:4b:9d:16:60:02:a5:ad:c1:c5:
         9f:c0:3e:71:22:c1:6c:e9:2d:f0:0c:28:d4:97:fc:19:b4:b6:
         01:3a:46:4d:2d:7b:bf:1a:b8:e3:31:86:ce:ba:db:fc:df:8f:
         fa:8b:ea:d1:64:41:f4:1d:35:a7:93:51:ff:f7:f1:b7:77:35:
         18:8f:ce:12:a4:06:cc:41:50:d4:82:4a:bb:f4:14:e3:15:71:
         ef:3e:2b:7f:c3:bb:57:2a:ba:55:ff:98:e4:b6:12:56:71:87:
         9a:67:5b:26:fd:ce:24:dc:73:81:8f:81:42:57:43:37:f5:30:
         94:d3:02:b0:24:24:ae:10:ae:37:5d:43:70:1b:3c:44:c7:81:
         9a:a4:d1:47:be:ef:3e:e5:9e:26:81:f2:7d:b5:27:68:57:07:
         11:e8:5b:c6:4d:eb:70:a8:fb:6b:dd:b8:5e:ed:4c:b3:17:79:
         ed:47:4b:2e:1a:d2:7c:8e:68:ab:65:3a:f8:67:cb:e4:61:33:
         f0:2e:db:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:43 2023 by rpki-client on console-ams.rpki-client.org