Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/Vaw2diX3uORUIBqbHN01AVAMRh8.roa
File:                     Vaw2diX3uORUIBqbHN01AVAMRh8.roa (raw, json)
Hash identifier:          FGRqUhPz2XIlrqSfeTVw6mWdYDexumIW6r+Y3HeFrUg=
Subject key identifier:   55:AC:36:76:25:F7:B8:E4:54:20:1A:9B:1C:DD:35:01:50:0C:46:1F
Certificate issuer:       /CN=b6ed62055a5191c02ec5112e95181a89ac060ceb
Certificate serial:       018A1843B69467CC3F1602A35171EC6D9283
Authority key identifier: B6:ED:62:05:5A:51:91:C0:2E:C5:11:2E:95:18:1A:89:AC:06:0C:EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tu1iBVpRkcAuxREulRgaiawGDOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/Vaw2diX3uORUIBqbHN01AVAMRh8.roa
Signing time:             Mon 21 Aug 2023 13:23:25 +0000
ROA not before:           Mon 21 Aug 2023 13:23:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47242
IP address blocks:        185.73.138.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:18:43:b6:94:67:cc:3f:16:02:a3:51:71:ec:6d:92:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6ed62055a5191c02ec5112e95181a89ac060ceb
        Validity
            Not Before: Aug 21 13:23:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=55ac367625f7b8e454201a9b1cdd3501500c461f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a8:13:d9:bf:82:cc:93:03:2c:7c:a7:7f:b0:
                    02:2c:29:9a:13:ec:56:7c:db:37:ea:21:7f:30:52:
                    b6:a8:20:8e:8f:14:75:92:63:49:19:de:ae:fb:6c:
                    23:b9:39:4d:99:47:72:a4:86:ad:c5:40:07:82:6d:
                    cb:af:84:6e:50:df:8b:f9:12:31:fd:bf:55:f7:ed:
                    74:48:69:54:86:b0:a2:bd:75:b9:95:81:c2:77:0e:
                    2a:37:5a:74:90:1a:ca:68:44:23:eb:ce:bc:53:1a:
                    a8:f8:7d:ad:bf:96:f0:e2:e0:b4:65:91:b7:52:d0:
                    99:56:42:0c:31:eb:7d:63:81:e8:90:77:29:b8:55:
                    b4:d3:55:4f:96:ca:2e:67:0c:0c:23:d5:0a:e6:63:
                    6d:b5:b8:4c:aa:d1:fe:a8:55:de:85:5e:55:45:04:
                    03:13:d7:62:68:29:d7:ac:47:31:05:3c:ba:7b:8d:
                    49:26:36:3d:f9:54:72:1f:83:c4:c7:f3:43:5e:64:
                    74:3c:cc:02:9d:ea:db:f6:66:18:9e:d4:99:7b:39:
                    d7:98:64:4c:5a:3c:42:52:87:4a:fb:25:18:13:70:
                    5b:e4:7b:2f:86:0a:45:46:69:75:8e:52:e4:2e:3c:
                    d7:04:f6:2a:40:64:45:64:b2:ad:d8:e7:12:79:bf:
                    8e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:AC:36:76:25:F7:B8:E4:54:20:1A:9B:1C:DD:35:01:50:0C:46:1F
            X509v3 Authority Key Identifier:
                keyid:B6:ED:62:05:5A:51:91:C0:2E:C5:11:2E:95:18:1A:89:AC:06:0C:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tu1iBVpRkcAuxREulRgaiawGDOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/Vaw2diX3uORUIBqbHN01AVAMRh8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.73.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:36:12:ad:6e:83:09:e0:ef:51:aa:32:0d:2f:3f:6c:90:f1:
         af:46:43:dc:21:d6:52:fd:2f:52:53:8d:03:ad:ed:40:d1:11:
         10:52:b4:94:e3:ef:96:84:b2:94:c6:9a:9c:65:d7:be:1d:9d:
         1d:fc:49:56:19:d7:31:94:bf:22:d6:44:14:72:86:de:ff:7b:
         96:01:5f:4a:f4:4c:8d:f5:c6:d3:b1:fc:7c:fc:d5:d0:1c:c2:
         bb:55:89:cf:cc:6d:00:07:fb:03:8f:31:03:2f:14:cd:83:e1:
         e5:c8:25:27:8e:d3:47:a6:4b:05:d5:55:0e:27:be:76:47:55:
         cb:26:fa:a9:a0:a5:c9:c6:80:17:bf:c2:7e:2a:33:ef:aa:af:
         8f:29:1d:95:03:4a:fd:a0:bc:9b:68:1c:b7:4b:bd:61:af:29:
         e3:26:d5:96:a7:04:11:9e:1e:24:8f:eb:a8:b6:68:99:2a:24:
         20:37:3c:18:3a:5e:df:b4:30:17:47:27:05:85:f7:2c:c4:83:
         e6:b9:8f:81:be:13:98:df:8a:a9:b7:6d:b6:68:bc:a6:2b:44:
         45:8b:12:a7:92:1a:5f:60:6c:4d:2b:72:43:91:7c:de:c0:a9:
         14:ac:0a:14:27:f5:ed:66:2c:51:3e:4b:5f:17:22:44:f5:85:
         01:48:4c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:04 2024 by rpki-client on console-fra.rpki-client.org