Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5ec55a-7461-408e-b45c-e5f26bc4d46e/1/UqN_7eSPnMzxVKwkbx3WIfTEiAg.roa
File:                     UqN_7eSPnMzxVKwkbx3WIfTEiAg.roa (raw, json)
Hash identifier:          PtCBoS2fU2dVe/kQVt6ngep+Cy21rwc2tXuFBDN9uBk=
Subject key identifier:   52:A3:7F:ED:E4:8F:9C:CC:F1:54:AC:24:6F:1D:D6:21:F4:C4:88:08
Certificate issuer:       /CN=a3e6332cc397d338e1d6a1fb86c2b71c92cb2559
Certificate serial:       018663A362DA64BC445A3B9EB5D8883C5E20
Authority key identifier: A3:E6:33:2C:C3:97:D3:38:E1:D6:A1:FB:86:C2:B7:1C:92:CB:25:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o-YzLMOX0zjh1qH7hsK3HJLLJVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/5ec55a-7461-408e-b45c-e5f26bc4d46e/1/UqN_7eSPnMzxVKwkbx3WIfTEiAg.roa
Signing time:             Sat 18 Feb 2023 08:28:17 +0000
ROA not before:           Sat 18 Feb 2023 08:28:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     139660
IP address blocks:        94.247.138.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:63:a3:62:da:64:bc:44:5a:3b:9e:b5:d8:88:3c:5e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e6332cc397d338e1d6a1fb86c2b71c92cb2559
        Validity
            Not Before: Feb 18 08:28:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=52a37fede48f9cccf154ac246f1dd621f4c48808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ea:e6:43:b6:a8:69:9a:15:c3:15:51:a8:ae:
                    eb:ec:4d:df:b3:f4:fb:90:cb:3d:4d:8c:ff:a8:df:
                    1d:bf:fd:41:53:7a:66:c8:08:be:46:66:d2:aa:90:
                    44:fb:c1:67:30:5d:ec:67:59:4a:73:cc:12:7c:92:
                    42:ec:6e:8d:36:26:ab:3b:a1:26:11:8c:77:a1:ed:
                    1d:87:ea:ab:89:76:94:1a:1d:e8:b1:cd:ce:af:ed:
                    81:bb:31:63:1c:6c:5f:c3:8d:0f:97:82:65:e5:35:
                    cb:d2:fe:77:17:83:33:19:5b:4a:8b:b4:b4:04:11:
                    67:d9:e4:c1:8e:1c:53:85:58:28:58:d0:cc:93:a0:
                    08:06:64:6f:1d:93:7a:24:b3:df:70:88:0e:fc:c1:
                    8c:d6:3d:22:db:f1:f3:ca:3c:7d:c1:55:ca:36:d4:
                    3c:43:72:62:57:a7:8d:a0:14:5c:e9:17:4b:62:53:
                    df:4a:1d:94:d4:bf:39:64:c9:30:d8:69:f0:23:c1:
                    ad:19:e9:b9:6e:2f:f6:8f:65:45:54:81:bc:b3:9a:
                    56:96:fc:bd:20:f2:48:ce:bf:da:68:c9:f9:ff:cc:
                    cf:53:a1:7c:0d:dd:8d:55:9e:35:49:e0:30:a0:31:
                    64:5b:f0:e4:69:98:2d:ff:5a:97:7b:99:2f:61:80:
                    14:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A3:7F:ED:E4:8F:9C:CC:F1:54:AC:24:6F:1D:D6:21:F4:C4:88:08
            X509v3 Authority Key Identifier:
                keyid:A3:E6:33:2C:C3:97:D3:38:E1:D6:A1:FB:86:C2:B7:1C:92:CB:25:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-YzLMOX0zjh1qH7hsK3HJLLJVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5ec55a-7461-408e-b45c-e5f26bc4d46e/1/UqN_7eSPnMzxVKwkbx3WIfTEiAg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5ec55a-7461-408e-b45c-e5f26bc4d46e/1/o-YzLMOX0zjh1qH7hsK3HJLLJVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.247.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:94:79:00:df:b9:d0:83:b7:04:14:53:ad:4d:2c:8d:d4:f8:
         9b:d0:ef:cf:ed:3f:88:9f:32:86:64:a1:23:12:9c:1d:34:2d:
         7a:11:ea:86:c1:ea:a6:ab:2f:f4:59:83:2e:fd:6a:09:03:47:
         dc:61:7b:73:fa:87:29:82:8a:3c:cf:ca:8d:ef:91:ff:9d:06:
         43:d6:54:b9:df:03:08:dc:8d:e4:d9:6d:b7:9a:c0:31:fa:98:
         3c:93:49:df:22:7b:0a:ad:91:d8:ee:d6:62:5a:87:10:06:e4:
         32:6d:26:e8:a5:d9:96:ed:1e:a0:a2:74:ca:97:eb:2e:7c:5c:
         67:f6:82:81:fb:60:7c:c6:10:18:20:2a:e3:53:4c:e4:03:04:
         5e:ac:29:74:ab:09:e9:9e:03:78:3c:c7:e4:43:ca:ce:df:0c:
         7a:24:03:d4:b7:48:65:d3:81:ab:2d:4d:34:9c:1c:92:03:ab:
         23:2f:dc:95:d1:84:ec:bd:42:04:6e:28:f5:aa:5e:c8:43:1f:
         31:32:0b:4b:ef:46:7f:67:13:dd:23:0a:5c:33:a0:a8:5d:3f:
         cc:01:e9:d7:80:eb:2e:c9:15:05:d9:e0:59:87:ab:1c:0d:1e:
         99:79:2c:76:85:5f:95:f3:c6:c8:66:c7:2f:44:dc:15:30:62:
         4c:6f:80:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:39 2023 by rpki-client on console-ams.rpki-client.org