Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/wrYPjmE3JsnvkFSUD-I44isUjJ4.roa
File:                     wrYPjmE3JsnvkFSUD-I44isUjJ4.roa (raw, json)
Hash identifier:          wsvPRL1xy1/yjm1tlQwEGpv+lVFq/nPjyF3JTIKMvnI=
Subject key identifier:   C2:B6:0F:8E:61:37:26:C9:EF:90:54:94:0F:E2:38:E2:2B:14:8C:9E
Certificate issuer:       /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial:       01856FD5388D221264570F63331E1ECFE3F2
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/wrYPjmE3JsnvkFSUD-I44isUjJ4.roa
Signing time:             Mon 02 Jan 2023 00:15:22 +0000
ROA not before:           Mon 02 Jan 2023 00:15:22 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     58337
IP address blocks:        93.119.192.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:d5:38:8d:22:12:64:57:0f:63:33:1e:1e:cf:e3:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
        Validity
            Not Before: Jan  2 00:15:22 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c2b60f8e613726c9ef9054940fe238e22b148c9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d6:53:f5:ef:8d:9a:dd:19:61:62:b3:40:91:
                    1d:2e:f6:74:45:38:11:53:ee:a3:5e:df:55:d7:01:
                    fc:4c:c2:46:20:7f:c0:a0:ea:26:14:bd:21:88:1b:
                    3e:cb:cd:e1:b1:1f:5f:f6:bd:35:18:89:28:98:09:
                    d0:8f:8f:95:db:0c:c9:39:22:d6:b9:bb:14:41:ff:
                    51:3f:03:a9:27:4e:5f:7a:b2:74:f2:65:7e:d7:ed:
                    fd:d9:07:9d:cf:98:9e:e1:d9:40:1a:1a:ac:53:5b:
                    db:19:47:29:c1:58:81:b6:5c:cb:d2:04:fb:b8:74:
                    e7:88:37:8c:ad:7c:75:1a:c0:9c:dc:bc:f4:85:a9:
                    af:09:8c:82:db:f6:a7:c1:5d:25:27:cc:08:bd:c1:
                    50:ac:7d:2b:85:5e:97:e9:f4:52:ab:c2:d7:42:e0:
                    31:62:36:63:77:4b:5f:31:46:fa:cd:dd:bc:8e:ff:
                    69:0e:d1:02:ff:51:65:aa:60:fe:e0:07:ae:2a:95:
                    0b:2a:6e:de:26:e3:a1:a3:c3:95:26:7d:a9:c6:5a:
                    a8:ba:23:98:17:84:33:ac:fc:b1:11:45:f9:c9:c9:
                    18:b0:35:e1:ed:63:4c:00:39:29:8a:0f:8e:ad:51:
                    48:3f:d1:42:67:84:6c:cb:57:d4:e2:ca:79:d6:0e:
                    13:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B6:0F:8E:61:37:26:C9:EF:90:54:94:0F:E2:38:E2:2B:14:8C:9E
            X509v3 Authority Key Identifier:
                keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/wrYPjmE3JsnvkFSUD-I44isUjJ4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.119.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:64:d7:84:ae:f8:23:68:bc:40:30:24:e7:2a:be:04:9b:86:
         6f:15:97:8e:b9:b8:ec:b8:59:d0:25:e4:d5:6b:78:11:cd:60:
         43:b4:09:fc:e6:84:ef:69:64:39:a6:bd:ec:c1:f5:31:3c:af:
         33:d2:8d:c6:91:b1:02:27:52:53:81:34:c9:b3:30:b9:6f:1f:
         ba:06:89:4c:b4:fd:d8:79:eb:5f:b5:bc:d3:5f:67:6a:f2:e3:
         bd:7c:de:9e:5d:55:d7:09:28:f2:3d:4d:b4:df:cd:3e:55:97:
         9b:b3:13:a8:c6:5d:bd:65:44:cb:10:58:20:5e:9b:07:9e:b6:
         df:1b:b4:e3:fa:2f:9e:42:d4:72:d1:8c:ed:11:2a:57:9e:34:
         ef:b5:53:a5:0e:59:38:1e:bd:97:f6:27:77:4c:e5:44:dd:c7:
         79:5f:50:18:0b:4b:b6:b3:26:46:8d:d8:1d:a1:d8:8e:3a:bc:
         3c:c5:ba:60:af:04:ea:9c:f3:89:ee:00:80:20:8a:17:f4:d0:
         fc:ad:81:f7:82:ca:25:b9:1c:54:5b:0a:8b:33:f4:2b:c9:dd:
         87:8c:35:de:b2:36:4c:18:2f:31:49:a8:70:0c:16:9b:fe:79:
         67:13:ef:bb:52:6d:21:51:86:61:fc:89:c2:16:d0:1f:83:e3:
         7d:8f:a0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:52 2024 by rpki-client on console-fra.rpki-client.org