Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/UVYIRO52kUgthGszAN7nqp4j6Kc.roa
File:                     UVYIRO52kUgthGszAN7nqp4j6Kc.roa (raw, json)
Hash identifier:          9MIuxGpOYr76Zy5HjBlWuRyO1jp3TIGtMA70MMLW0bs=
Subject key identifier:   51:56:08:44:EE:76:91:48:2D:84:6B:33:00:DE:E7:AA:9E:23:E8:A7
Certificate issuer:       /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial:       01856FD53C724F8849828E695CEDE2DC3EF6
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/UVYIRO52kUgthGszAN7nqp4j6Kc.roa
Signing time:             Mon 02 Jan 2023 00:15:23 +0000
ROA not before:           Mon 02 Jan 2023 00:15:23 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60033
IP address blocks:        188.213.217.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:d5:3c:72:4f:88:49:82:8e:69:5c:ed:e2:dc:3e:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
        Validity
            Not Before: Jan  2 00:15:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=51560844ee7691482d846b3300dee7aa9e23e8a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a6:d6:ac:9f:13:e3:df:cc:7c:17:44:79:90:
                    9b:7d:e2:09:a2:6a:e2:62:6e:57:9c:1c:fc:61:14:
                    4a:05:0c:41:05:0b:11:58:69:bc:c9:04:69:27:ea:
                    48:7e:22:ab:02:ad:d0:00:5e:b0:b5:ab:1a:8e:ad:
                    47:dd:1f:cd:55:8e:5b:cd:77:c5:65:e4:c1:01:67:
                    cf:22:14:37:56:ea:ae:e9:33:e6:cd:45:b9:4d:90:
                    4b:52:c2:a5:6d:fd:6c:2d:8f:86:d6:f0:48:bf:80:
                    30:67:c5:dd:c2:19:38:4a:8e:0d:f6:50:99:cf:6f:
                    eb:2f:26:c0:fc:04:35:87:2d:ac:bb:81:e5:5e:26:
                    26:90:85:92:6e:dc:4c:41:2c:15:40:59:90:6a:2a:
                    35:99:fd:91:b6:8c:eb:56:de:38:6a:57:63:5f:9a:
                    67:1b:fe:7c:a4:1f:a1:57:34:53:52:7e:28:47:e0:
                    2e:bd:79:44:9e:a1:01:ff:ff:1d:e9:97:08:52:a4:
                    00:b0:06:b7:a6:64:fe:e4:1b:c3:93:f1:22:fa:2c:
                    ab:11:04:31:e8:17:88:3a:f7:c4:2f:2c:98:b2:ef:
                    fb:47:eb:45:8b:ab:97:32:3c:6a:93:51:56:94:d4:
                    3e:8c:3b:5d:eb:1a:95:32:0e:6a:43:84:a7:64:6a:
                    d8:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:56:08:44:EE:76:91:48:2D:84:6B:33:00:DE:E7:AA:9E:23:E8:A7
            X509v3 Authority Key Identifier:
                keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/UVYIRO52kUgthGszAN7nqp4j6Kc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.213.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d7:db:72:43:2b:2e:78:ba:84:42:13:ec:95:bf:a9:f0:66:b5:
         be:86:9d:89:0f:48:bb:8b:f2:97:2c:d6:fe:cf:21:ee:53:22:
         0d:9a:1b:94:ea:3d:ec:28:c2:51:9b:23:f6:6f:57:89:d7:19:
         6e:f3:63:03:62:c3:8d:2b:2c:fd:e0:aa:eb:45:5a:24:31:43:
         ec:c2:f5:24:0d:37:c5:6d:d4:19:fa:bf:0d:1c:62:17:1f:7d:
         41:fd:c8:72:ea:64:b4:b9:53:73:70:92:b5:a8:e1:0b:e3:46:
         0d:d2:52:7f:e1:6b:c4:47:0a:5d:a6:cf:30:e8:40:ae:ee:1e:
         02:92:01:7d:79:55:60:45:7b:90:2d:e8:39:ec:8b:a2:c8:4b:
         fe:11:ab:06:d3:26:8a:95:17:49:64:37:ea:74:f4:d2:da:98:
         b7:7c:bd:f2:f5:fa:a6:03:2c:61:1d:bf:03:a4:b5:46:a1:c4:
         9b:10:2c:86:85:3a:35:bb:63:c6:60:84:b1:08:d8:ea:57:e2:
         2e:a3:72:77:1d:e7:94:c6:26:99:fa:bb:bf:09:3e:70:5f:a2:
         43:a8:34:c1:94:e1:45:5e:15:d3:11:1c:b8:4e:36:be:73:87:
         45:99:40:74:b3:e8:c5:5c:26:d7:67:ab:76:ce:51:c0:3c:ca:
         2e:9c:3f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:05 2024 by rpki-client on console-ams.rpki-client.org