Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/mOGKcY2aQxYDWb319bUwqk79gBQ.roa
File:                     mOGKcY2aQxYDWb319bUwqk79gBQ.roa (raw, json)
Hash identifier:          r3Q9ZtPidXZ9urQ9HUFgr5IG7XqnnJtnB9B4yUuGgBE=
Subject key identifier:   98:E1:8A:71:8D:9A:43:16:03:59:BD:F5:F5:B5:30:AA:4E:FD:80:14
Certificate issuer:       /CN=02bbd4f865a12d79a09a034486ce61ba023882c7
Certificate serial:       018C2C00D6A8383192B0360B47E2995CE062
Authority key identifier: 02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/mOGKcY2aQxYDWb319bUwqk79gBQ.roa
Signing time:             Sat 02 Dec 2023 19:28:21 +0000
ROA not before:           Sat 02 Dec 2023 19:28:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51020
IP address blocks:        5.62.136.0/24 maxlen: 24
                          5.62.142.0/24 maxlen: 24
                          185.69.4.0/23 maxlen: 23
                          185.69.4.0/24 maxlen: 24
                          185.69.5.0/24 maxlen: 24
                          185.69.6.0/24 maxlen: 24
                          37.77.51.0/24 maxlen: 24
                          37.77.50.0/24 maxlen: 24
                          37.77.48.0/24 maxlen: 24
                          5.62.128.0/24 maxlen: 24
                          5.62.129.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:2c:00:d6:a8:38:31:92:b0:36:0b:47:e2:99:5c:e0:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02bbd4f865a12d79a09a034486ce61ba023882c7
        Validity
            Not Before: Dec  2 19:28:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=98e18a718d9a43160359bdf5f5b530aa4efd8014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6d:b9:36:c7:bd:dc:00:b2:42:9c:93:3a:da:
                    6a:35:64:8c:d2:1d:5a:db:53:a4:67:a0:1e:9b:bd:
                    79:0f:27:af:5e:18:b3:f5:36:3f:8a:2c:82:e5:a4:
                    3e:7d:2f:c5:45:c8:b8:9b:d6:78:8f:b6:e5:c9:b0:
                    41:cd:d7:1d:d8:4d:89:0b:a4:d7:d9:11:47:51:ea:
                    40:78:7b:db:89:0b:e6:c8:b3:84:be:c1:d8:56:ea:
                    c7:7d:ac:08:d2:20:a8:a0:f6:e4:31:67:69:7a:1a:
                    de:9a:81:71:79:ee:77:c7:3c:18:ee:ad:9e:ad:34:
                    75:84:6f:b1:b3:8f:70:9c:98:44:f7:6c:91:eb:32:
                    4c:ba:f0:9d:7d:18:e5:91:86:6a:c0:3d:34:bd:ec:
                    17:39:ae:15:9a:cd:f9:6e:57:5d:a2:bb:42:f7:f3:
                    2f:c5:88:e3:40:bf:bf:00:47:58:a4:35:16:a1:3b:
                    da:cf:82:79:8b:e8:46:c9:d2:bb:36:46:34:85:70:
                    f1:ab:38:bc:10:d4:3d:e2:0f:c4:9e:88:2c:7d:76:
                    01:31:9f:b7:1f:20:be:25:4b:04:d7:cf:ee:b6:4e:
                    53:2a:c9:9d:63:ce:a1:62:5b:98:1e:c7:d3:b2:be:
                    10:37:8c:0a:eb:f4:49:c5:04:5b:df:65:77:66:50:
                    3f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E1:8A:71:8D:9A:43:16:03:59:BD:F5:F5:B5:30:AA:4E:FD:80:14
            X509v3 Authority Key Identifier:
                keyid:02:BB:D4:F8:65:A1:2D:79:A0:9A:03:44:86:CE:61:BA:02:38:82:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArvU-GWhLXmgmgNEhs5hugI4gsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/mOGKcY2aQxYDWb319bUwqk79gBQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/cb83b2-33b5-4560-8935-0a98048cdf72/1/ArvU-GWhLXmgmgNEhs5hugI4gsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.62.128.0/23
                  5.62.136.0/24
                  5.62.142.0/24
                  37.77.48.0/24
                  37.77.50.0/23
                  185.69.4.0-185.69.6.255

    Signature Algorithm: sha256WithRSAEncryption
         c5:48:6f:e4:47:5d:8b:a3:c2:40:e7:b2:7c:87:f2:1b:3f:ce:
         48:f2:8f:84:f9:64:de:95:b7:f9:f1:b9:32:55:b2:a5:f1:8d:
         de:e0:3a:a5:bf:23:13:9c:12:a7:d7:34:3c:72:f7:27:50:27:
         f9:8a:16:f7:65:ad:6d:7a:e6:c7:7f:2f:50:95:92:46:cb:74:
         9e:82:93:f3:be:97:a9:0d:0f:52:89:4e:e8:be:64:5e:16:68:
         95:0c:25:89:6b:14:c5:3e:6f:18:83:3b:3e:8b:cc:34:e3:3c:
         8f:a1:1d:dc:21:fe:df:77:b3:72:89:b1:1b:af:72:2e:4b:fd:
         ea:82:e9:a6:b5:15:a0:bd:57:25:6f:ad:3b:61:61:a8:a4:7d:
         c3:cb:16:3e:bd:09:0f:5b:b8:55:91:6d:78:ff:06:d3:ab:80:
         08:c6:65:27:bb:36:3c:fb:29:d3:3c:7c:c5:0a:b6:26:16:8a:
         b8:30:99:3c:3c:b8:37:88:16:e7:cb:62:6f:7d:49:ec:9b:78:
         94:af:75:bb:48:b7:43:be:35:13:65:13:2f:03:b5:5d:65:82:
         0e:af:f2:13:17:0b:59:a1:29:6c:20:6c:63:e0:44:e4:c5:ba:
         ea:22:5f:23:6f:09:5d:4b:5f:fd:66:ef:28:5f:ca:f0:ac:c3:
         99:df:78:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 2 23:02:23 2023 by rpki-client on console-ams.rpki-client.org