Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/BVEOo4zneSgz4qU2Xj1EM02WJHs.roa
File:                     BVEOo4zneSgz4qU2Xj1EM02WJHs.roa (raw, json)
Hash identifier:          j4noIhoDTvOe3APVNSysW004GK8OXEnf4+huJahRWZk=
Subject key identifier:   05:51:0E:A3:8C:E7:79:28:33:E2:A5:36:5E:3D:44:33:4D:96:24:7B
Certificate issuer:       /CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
Certificate serial:       01876A690DD0A146993290D74BF5EE27F1E0
Authority key identifier: D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/BVEOo4zneSgz4qU2Xj1EM02WJHs.roa
Signing time:             Mon 10 Apr 2023 09:04:42 +0000
ROA not before:           Mon 10 Apr 2023 09:04:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29802
IP address blocks:        193.178.31.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:6a:69:0d:d0:a1:46:99:32:90:d7:4b:f5:ee:27:f1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f065c8bdb78ff294f7c5454971dbfabfb6c184
        Validity
            Not Before: Apr 10 09:04:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=05510ea38ce7792833e2a5365e3d44334d96247b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ab:0d:07:a7:91:c7:00:16:6a:2d:04:8f:1a:
                    04:4c:80:bc:ce:3c:6e:c4:5d:ca:01:07:54:cc:0a:
                    85:5b:1a:49:83:02:c1:64:1d:1b:44:32:1b:9f:b0:
                    f6:7f:ac:a5:7f:ef:00:0e:a0:89:30:34:c5:07:5c:
                    2e:0e:9b:a1:45:64:26:b5:ad:c8:e2:da:ed:53:3a:
                    5d:b4:8f:13:08:89:92:2c:55:78:28:f0:c5:d4:15:
                    cd:7d:ce:a6:5f:03:46:a3:a2:8a:5d:06:0c:48:3e:
                    cf:a7:a5:22:c3:aa:6b:26:50:b5:51:6d:7f:f8:c3:
                    6f:26:8e:b5:3e:94:2b:29:9d:5e:e6:ae:14:a3:c3:
                    65:f3:ca:a6:2e:bc:2f:ec:62:8e:17:8f:d6:17:35:
                    79:66:5c:ba:72:7c:8d:81:be:21:07:df:85:8c:de:
                    e2:bc:0b:ea:94:a2:03:ec:ca:a1:74:20:fb:c6:c1:
                    54:75:e6:6f:6a:21:96:23:e1:68:1b:5c:db:1b:2d:
                    c1:8c:6c:1c:3f:f0:0b:ac:af:d3:a7:41:25:04:af:
                    39:aa:54:ef:65:ad:60:f0:00:a2:07:f4:c0:c1:67:
                    60:6f:eb:12:a8:14:cd:73:91:d6:6e:6e:ce:03:93:
                    aa:d2:3f:87:21:f9:59:09:3d:2b:19:7e:bd:1a:05:
                    3a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:51:0E:A3:8C:E7:79:28:33:E2:A5:36:5E:3D:44:33:4D:96:24:7B
            X509v3 Authority Key Identifier:
                keyid:D5:F0:65:C8:BD:B7:8F:F2:94:F7:C5:45:49:71:DB:FA:BF:B6:C1:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fBlyL23j_KU98VFSXHb-r-2wYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/BVEOo4zneSgz4qU2Xj1EM02WJHs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f277ea-726a-4052-8e5b-35a5dc2c792c/1/1fBlyL23j_KU98VFSXHb-r-2wYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.178.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:e1:14:13:a5:b2:af:82:36:a2:2a:80:67:63:c6:ce:60:5d:
         89:b9:86:1a:42:39:8d:3c:0a:c9:bf:9d:9b:47:77:d7:44:1f:
         a8:22:5a:c6:37:b3:2e:a8:7c:06:28:94:d2:4a:58:8f:c5:4c:
         a0:bd:dc:ab:99:4b:1b:6b:d7:f3:31:db:48:f9:3d:77:7d:22:
         95:87:3f:05:19:1e:48:7e:d5:db:00:54:db:42:9d:4a:89:0d:
         68:03:45:b7:07:1b:fb:77:ae:6b:80:fb:57:39:a0:ee:69:01:
         99:ea:ae:2a:6a:45:6f:d1:53:33:d1:67:3f:71:8a:3f:00:b6:
         51:cc:32:46:d5:ae:d9:6a:2c:f1:00:6c:b4:17:ac:5a:35:58:
         e3:71:39:fa:61:e8:70:e4:60:a8:c9:c4:84:67:36:b3:ad:99:
         97:20:6a:35:b7:06:42:93:4b:2e:9d:04:63:21:46:b8:45:72:
         69:0f:d0:f9:75:8d:2d:28:03:ac:75:18:69:d6:71:5a:4c:9c:
         a2:6e:fb:66:43:5e:bb:5c:ab:07:92:79:6c:25:d5:6a:b5:ec:
         62:18:91:89:e9:88:45:ec:12:67:93:b9:21:0a:ea:c1:f6:f9:
         9a:b0:3d:4b:f6:d2:12:8f:7b:d9:97:cb:0c:41:a5:d7:2b:ac:
         fe:a8:d5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:44 2023 by rpki-client on console-fra.rpki-client.org