Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/3aed9d-4a04-40a8-824d-248d2050e039/1/Xd7un_lzlZwH6SS-rZ5u-IOAt8Y.roa
File:                     Xd7un_lzlZwH6SS-rZ5u-IOAt8Y.roa (raw, json)
Hash identifier:          upDNzEdcbS54UBJAG7vVuOX1+YJF8+Vp8WQlUpm0qlQ=
Subject key identifier:   5D:DE:EE:9F:F9:73:95:9C:07:E9:24:BE:AD:9E:6E:F8:83:80:B7:C6
Certificate issuer:       /CN=5bc96901237cf61aad0b793b725ef8bd0e5e937b
Certificate serial:       018779E374803E08E53892164CCC29389A82
Authority key identifier: 5B:C9:69:01:23:7C:F6:1A:AD:0B:79:3B:72:5E:F8:BD:0E:5E:93:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W8lpASN89hqtC3k7cl74vQ5ek3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/3aed9d-4a04-40a8-824d-248d2050e039/1/Xd7un_lzlZwH6SS-rZ5u-IOAt8Y.roa
Signing time:             Thu 13 Apr 2023 09:12:42 +0000
ROA not before:           Thu 13 Apr 2023 09:12:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        62.106.81.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:79:e3:74:80:3e:08:e5:38:92:16:4c:cc:29:38:9a:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bc96901237cf61aad0b793b725ef8bd0e5e937b
        Validity
            Not Before: Apr 13 09:12:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5ddeee9ff973959c07e924bead9e6ef88380b7c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9b:b9:cb:2d:25:99:4d:29:99:e6:79:fd:ae:
                    37:51:5f:d5:dd:19:57:48:f7:35:4c:03:81:d7:06:
                    86:22:a9:04:aa:37:58:91:bb:b8:de:41:e5:d9:3d:
                    d0:79:0a:8c:87:50:55:b3:41:9f:75:a2:c5:ce:b0:
                    6b:5a:de:08:79:f7:c7:f1:cf:c2:3e:9b:8e:5b:03:
                    3e:5e:03:55:79:6d:8a:13:63:04:cd:bd:96:f3:7e:
                    0a:56:2a:fa:e4:a2:df:9b:c2:6b:0c:de:ff:30:d1:
                    ea:ae:13:e6:bb:6e:43:db:5f:1b:0c:fb:8c:2b:f4:
                    8a:f1:bd:6f:f1:f9:de:21:54:bf:22:be:0c:6b:1f:
                    a0:66:ae:87:5d:d1:32:b3:79:89:dc:31:f2:a5:9f:
                    ce:37:26:63:29:4c:82:59:84:9e:1e:36:28:5e:7a:
                    84:91:c9:93:92:f4:82:0c:94:7c:2c:ed:f2:95:8c:
                    b5:09:5e:cc:17:49:de:86:0d:ea:ab:2a:30:3c:b8:
                    fd:04:a6:ec:07:4f:5d:7e:61:50:d4:5c:bd:8f:71:
                    bd:e8:59:92:da:5a:37:ff:db:e3:92:30:a7:2c:c8:
                    2d:0d:b6:6c:75:30:36:91:55:8b:25:f6:cc:3b:b0:
                    ce:62:45:ea:c4:75:17:0d:7e:88:dc:ae:7d:cc:14:
                    c7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:DE:EE:9F:F9:73:95:9C:07:E9:24:BE:AD:9E:6E:F8:83:80:B7:C6
            X509v3 Authority Key Identifier:
                keyid:5B:C9:69:01:23:7C:F6:1A:AD:0B:79:3B:72:5E:F8:BD:0E:5E:93:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8lpASN89hqtC3k7cl74vQ5ek3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3aed9d-4a04-40a8-824d-248d2050e039/1/Xd7un_lzlZwH6SS-rZ5u-IOAt8Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/3aed9d-4a04-40a8-824d-248d2050e039/1/W8lpASN89hqtC3k7cl74vQ5ek3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.106.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:ca:66:d2:5c:21:ab:23:67:93:2a:99:af:c8:bf:bc:f6:1f:
         9d:9f:fd:b3:d8:33:f1:a4:19:2d:39:93:0e:29:1d:79:25:a6:
         a2:ba:ee:e7:5b:a6:0a:79:d4:77:f8:ac:92:5f:69:3d:e2:ca:
         f0:a5:2d:0c:03:16:ba:6a:81:f2:80:22:22:1e:87:1b:fa:3e:
         f6:d6:96:82:d4:1f:f7:91:1c:3d:df:28:78:fc:2c:c0:bc:81:
         44:a7:9a:9e:ec:2d:7c:5c:f4:d9:00:7a:65:16:e9:fa:c6:52:
         c9:98:e2:f4:f7:33:6a:d7:14:2e:82:c8:ca:4c:27:6c:b8:4a:
         fb:70:1d:9c:40:b6:e5:94:e2:d0:ec:24:ef:de:b2:19:67:ae:
         29:b0:be:71:dc:41:eb:81:60:39:ef:73:34:69:e4:e2:77:fb:
         d6:9d:73:90:68:29:55:32:76:20:bd:8c:0b:05:4f:b5:19:46:
         85:50:04:f6:ff:4b:d1:0f:b1:45:4f:ab:a4:20:b4:bf:43:c0:
         64:0b:af:63:ce:f2:88:bc:6f:18:a3:a6:5e:2f:12:c7:e7:6e:
         16:fc:a4:11:75:99:cd:6e:18:f8:d7:81:09:88:0c:8c:a3:57:
         a0:7d:37:2c:36:86:e0:58:e0:ac:1b:9e:1a:a3:3c:36:b8:ef:
         7b:68:05:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:04 2023 by rpki-client on console-fra.rpki-client.org