Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3aed9d-4a04-40a8-824d-248d2050e039/1/VoksxLgtVj0Fg-dbv-vlcbecHpE.roa
File:                     VoksxLgtVj0Fg-dbv-vlcbecHpE.roa (raw, json)
Hash identifier:          uB4e9FEx00RfdRfPPXw4sa5pwX+ONEfnfDCjRjO7fbY=
Subject key identifier:   56:89:2C:C4:B8:2D:56:3D:05:83:E7:5B:BF:EB:E5:71:B7:9C:1E:91
Certificate issuer:       /CN=5bc96901237cf61aad0b793b725ef8bd0e5e937b
Certificate serial:       018723A0D954624E4AD7B55E986C89782B79
Authority key identifier: 5B:C9:69:01:23:7C:F6:1A:AD:0B:79:3B:72:5E:F8:BD:0E:5E:93:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W8lpASN89hqtC3k7cl74vQ5ek3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/3aed9d-4a04-40a8-824d-248d2050e039/1/VoksxLgtVj0Fg-dbv-vlcbecHpE.roa
Signing time:             Mon 27 Mar 2023 15:12:36 +0000
ROA not before:           Mon 27 Mar 2023 15:12:36 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207279
IP address blocks:        62.106.81.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:23:a0:d9:54:62:4e:4a:d7:b5:5e:98:6c:89:78:2b:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bc96901237cf61aad0b793b725ef8bd0e5e937b
        Validity
            Not Before: Mar 27 15:12:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=56892cc4b82d563d0583e75bbfebe571b79c1e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:51:a6:30:e7:2e:87:2b:10:26:89:00:55:f1:
                    45:bf:75:3c:96:66:60:ea:3e:a1:02:65:04:b3:b9:
                    98:e4:64:50:1a:db:28:29:fc:5a:e6:a8:6c:4a:df:
                    6e:d7:10:55:a3:b2:5e:79:61:a2:85:e4:90:94:5d:
                    16:61:dd:de:06:e6:67:8e:2c:98:9f:cd:fd:7b:c2:
                    24:8c:f5:19:93:d6:51:c8:f6:bf:83:09:f8:11:18:
                    ad:c5:0c:1e:4f:7b:9d:66:28:b0:e5:e8:57:10:2c:
                    85:47:61:2d:a0:ad:10:e7:1e:bb:e9:c5:ca:a3:26:
                    b0:57:a2:17:d6:0c:63:5d:28:bf:a5:ff:69:be:87:
                    70:4d:00:c1:a2:ee:99:aa:98:23:e6:fb:5d:6b:d6:
                    7b:66:2b:17:6b:71:62:61:4f:e4:38:a4:20:aa:7e:
                    ed:43:eb:94:c4:7d:d7:3e:31:c6:6d:d7:aa:50:42:
                    ec:56:0e:9b:68:d8:92:05:8b:34:f0:ad:46:8f:fb:
                    c9:cd:01:9b:2c:ae:02:b0:c9:a1:d8:7c:92:d1:f1:
                    79:be:4a:67:51:97:69:5c:af:b0:4c:83:4c:17:91:
                    c8:5a:90:2f:56:6b:6a:09:1d:79:68:ed:d6:f3:f0:
                    2d:20:62:37:8f:29:72:c2:74:c6:64:16:2e:a2:1f:
                    58:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:89:2C:C4:B8:2D:56:3D:05:83:E7:5B:BF:EB:E5:71:B7:9C:1E:91
            X509v3 Authority Key Identifier:
                keyid:5B:C9:69:01:23:7C:F6:1A:AD:0B:79:3B:72:5E:F8:BD:0E:5E:93:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8lpASN89hqtC3k7cl74vQ5ek3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3aed9d-4a04-40a8-824d-248d2050e039/1/VoksxLgtVj0Fg-dbv-vlcbecHpE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3aed9d-4a04-40a8-824d-248d2050e039/1/W8lpASN89hqtC3k7cl74vQ5ek3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.106.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:89:75:71:d6:7d:a7:95:c8:0a:4e:59:a1:21:e7:54:5a:d7:
         9d:7c:e9:38:31:02:5e:8c:d0:67:5d:8a:74:76:d7:00:ba:81:
         1c:2f:a5:be:aa:48:b5:c9:a6:81:f2:e1:9e:cf:53:ff:bb:85:
         e5:da:9d:c0:c9:77:60:48:ba:dd:de:49:8d:fa:96:08:2e:02:
         43:1a:8f:bd:11:ff:8e:36:5c:b3:82:12:6f:5a:41:ff:36:25:
         67:4e:7b:57:8d:c3:f0:ad:63:64:08:a0:14:de:cc:9b:cd:4f:
         9f:28:0a:47:de:8c:b5:89:98:09:b9:4e:2a:03:b1:a5:fb:29:
         d1:08:ad:f6:74:57:ed:73:00:f1:ed:ef:d9:54:55:a8:f7:a8:
         f9:fc:73:74:9b:e1:fd:e9:02:86:cd:dc:4e:a0:ee:65:07:69:
         60:08:4a:e9:37:ae:87:b0:37:45:49:0a:ed:56:da:55:ea:31:
         9a:33:60:40:bd:ac:54:6f:14:92:15:bc:e8:26:a1:11:a0:51:
         ca:31:a0:5d:ea:ad:91:c2:1b:0b:cd:a1:99:28:3b:45:99:d0:
         fe:87:9e:20:36:e7:b2:96:b8:31:46:c8:8b:57:9c:50:af:b6:
         c9:af:d3:22:8d:81:88:b3:75:60:62:78:7f:3d:89:08:61:d7:
         cf:6b:df:9a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYcjoNlUYk5K17VemGyJeCt5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViYzk2OTAxMjM3Y2Y2MWFhZDBiNzkzYjcyNWVmOGJkMGU1
ZTkzN2IwHhcNMjMwMzI3MTUxMjM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Njg5MmNjNGI4MmQ1NjNkMDU4M2U3NWJiZmViZTU3MWI3OWMxZTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFGmMOcuhysQJokAVfFFv3U8lmZg
6j6hAmUEs7mY5GRQGtsoKfxa5qhsSt9u1xBVo7JeeWGiheSQlF0WYd3eBuZnjiyY
n839e8IkjPUZk9ZRyPa/gwn4ERitxQweT3udZiiw5ehXECyFR2EtoK0Q5x676cXK
oyawV6IX1gxjXSi/pf9pvodwTQDBou6Zqpgj5vtda9Z7ZisXa3FiYU/kOKQgqn7t
Q+uUxH3XPjHGbdeqUELsVg6baNiSBYs08K1Gj/vJzQGbLK4CsMmh2HyS0fF5vkpn
UZdpXK+wTINMF5HIWpAvVmtqCR15aO3W8/AtIGI3jylywnTGZBYuoh9YCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFaJLMS4LVY9BYPnW7/r5XG3nB6RMB8GA1UdIwQY
MBaAFFvJaQEjfPYarQt5O3Je+L0OXpN7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzhscEFTTjg5aHF0QzNrN2NsNzR2UTVlazNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8zYWVkOWQtNGEwNC00MGE4LTgyNGQt
MjQ4ZDIwNTBlMDM5LzEvVm9rc3hMZ3RWajBGZy1kYnYtdmxjYmVjSHBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8zYWVkOWQtNGEwNC00MGE4LTgyNGQtMjQ4ZDIwNTBlMDM5
LzEvVzhscEFTTjg5aHF0QzNrN2NsNzR2UTVlazNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPmpRMA0G
CSqGSIb3DQEBCwUAA4IBAQA4iXVx1n2nlcgKTlmhIedUWtedfOk4MQJejNBnXYp0
dtcAuoEcL6W+qki1yaaB8uGez1P/u4Xl2p3AyXdgSLrd3kmN+pYILgJDGo+9Ef+O
NlyzghJvWkH/NiVnTntXjcPwrWNkCKAU3sybzU+fKApH3oy1iZgJuU4qA7Gl+ynR
CK32dFftcwDx7e/ZVFWo96j5/HN0m+H96QKGzdxOoO5lB2lgCErpN66HsDdFSQrt
VtpV6jGaM2BAvaxUbxSSFbzoJqERoFHKMaBd6q2RwhsLzaGZKDtFmdD+h54gNuey
lrgxRsiLV5xQr7bJr9MijYGIs3VgYnh/PYkIYdfPa9+a
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:04 2023 by rpki-client on console-fra.rpki-client.org