Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/7926Ty_996WmPDORyF27THuPDTM.roa
File:                     7926Ty_996WmPDORyF27THuPDTM.roa (raw, json)
Hash identifier:          wBbyK+jGimyZvmfUOxGOkamJCiA8/omKxjw7CLoyc6w=
Subject key identifier:   EF:DD:BA:4F:2F:FD:F7:A5:A6:3C:33:91:C8:5D:BB:4C:7B:8F:0D:33
Certificate issuer:       /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial:       0188708EC594F804E8CE072ACDC6A0CFDBE0
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/7926Ty_996WmPDORyF27THuPDTM.roa
Signing time:             Wed 31 May 2023 06:46:24 +0000
ROA not before:           Wed 31 May 2023 06:46:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201703
IP address blocks:        185.215.231.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:70:8e:c5:94:f8:04:e8:ce:07:2a:cd:c6:a0:cf:db:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
        Validity
            Not Before: May 31 06:46:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=efddba4f2ffdf7a5a63c3391c85dbb4c7b8f0d33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:cc:73:53:12:aa:7e:39:ee:f0:98:56:1d:d6:
                    2f:6a:f1:cd:9a:86:29:f0:38:68:e6:ab:47:bf:00:
                    51:10:2f:ac:9c:04:48:f3:d0:e2:78:a1:4f:29:52:
                    a9:4a:fe:a2:d9:cb:95:98:4c:8f:72:37:a1:1b:ac:
                    33:7e:69:15:a5:9c:7a:8d:68:4b:99:56:9b:4a:25:
                    4b:13:56:14:32:d9:3e:e4:d0:b1:71:d9:2f:a5:c8:
                    e7:b2:af:81:5e:73:23:31:41:5e:4a:ba:4e:a8:94:
                    72:f4:16:5a:5d:41:9e:ea:88:40:c3:93:64:49:45:
                    5c:63:d1:a7:ba:65:07:5e:1b:f3:89:f8:98:7f:f2:
                    f4:40:76:9e:35:19:b4:45:1d:97:1a:fa:b3:cf:e1:
                    b2:c3:4f:4a:42:1c:cd:9d:3d:b4:78:24:04:81:d8:
                    49:e8:02:e2:50:c2:04:11:53:3c:e5:cf:54:6d:c7:
                    cc:a6:ac:82:37:39:ba:c8:ca:bf:8a:0d:1a:32:34:
                    1e:89:ff:42:2e:69:5b:1b:a7:22:86:65:86:af:ff:
                    ef:d5:22:f2:90:12:d4:9f:78:20:3e:cb:bc:71:fd:
                    b3:f4:73:e2:37:cb:85:16:70:07:75:c0:85:c8:0b:
                    d7:e1:4b:0f:86:46:41:62:18:78:b5:44:5f:d7:3c:
                    ae:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DD:BA:4F:2F:FD:F7:A5:A6:3C:33:91:C8:5D:BB:4C:7B:8F:0D:33
            X509v3 Authority Key Identifier:
                keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/7926Ty_996WmPDORyF27THuPDTM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.215.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:db:8c:14:b7:f1:ec:f6:bc:e5:c6:82:4c:53:6d:97:f3:3d:
         16:f6:bf:49:56:d1:7c:0b:4f:b9:f6:a4:a9:f5:17:ab:97:01:
         bd:ae:e3:36:d2:7c:3a:b7:c3:58:9b:73:a8:62:fc:a8:86:de:
         bc:e8:90:f8:56:92:54:c7:27:45:ed:08:b2:9b:cb:0b:a5:8b:
         39:bc:99:c2:4e:21:a4:8c:55:cf:22:ed:af:b6:bb:e7:d3:7e:
         6e:50:e8:a4:32:ad:6b:e7:5b:95:b0:56:5b:8e:a5:de:ab:ad:
         03:45:6c:36:5d:4b:c6:cb:bb:e0:5d:d0:d6:fd:dd:3f:f9:20:
         1f:bb:cd:31:f0:ee:82:8b:98:66:48:ed:43:29:64:b3:93:86:
         75:37:f1:55:ef:21:f1:72:96:ab:ec:16:14:41:c8:d3:1d:16:
         62:59:29:cc:c3:da:89:b7:73:ef:99:05:35:ff:64:63:44:5e:
         19:18:74:7d:1a:66:19:9f:c1:18:ff:0b:9a:ea:87:f3:9b:c7:
         b4:eb:59:ec:2b:4f:9e:7f:89:d6:f6:fc:00:84:d5:01:b8:62:
         1b:fd:e8:6e:98:68:cb:3e:3f:6b:25:4a:da:84:23:75:7d:1a:
         45:50:8d:05:37:94:27:ea:89:f6:9f:bf:45:c5:b6:c4:df:0e:
         1f:30:94:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 29 08:37:59 2023 by rpki-client on console-fra.rpki-client.org