Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/uhz-uxNcqhAYlIsGfybCMbSAdMc.roa
File:                     uhz-uxNcqhAYlIsGfybCMbSAdMc.roa (raw, json)
Hash identifier:          CvauBfHKV0gcq0WCzSc3zrxMjTmwWEcNrqgvCCMyDvY=
Subject key identifier:   BA:1C:FE:BB:13:5C:AA:10:18:94:8B:06:7F:26:C2:31:B4:80:74:C7
Certificate issuer:       /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial:       0187E608D83597174188EB3AF0D0A151C985
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/uhz-uxNcqhAYlIsGfybCMbSAdMc.roa
Signing time:             Thu 04 May 2023 09:12:32 +0000
ROA not before:           Thu 04 May 2023 09:12:32 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43072
IP address blocks:        185.33.26.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:e6:08:d8:35:97:17:41:88:eb:3a:f0:d0:a1:51:c9:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
        Validity
            Not Before: May  4 09:12:32 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ba1cfebb135caa1018948b067f26c231b48074c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:79:25:a6:ce:67:00:56:af:bb:08:be:dd:40:
                    d9:a0:12:ac:db:ba:97:be:99:68:b6:55:d7:90:84:
                    b1:29:36:75:89:f6:ff:b6:4b:f6:12:9f:24:6b:e4:
                    72:6e:02:3c:40:61:82:9e:af:c9:a3:d8:50:a5:0f:
                    db:a8:23:0f:7a:4d:b8:15:b5:11:75:fb:f1:24:05:
                    89:13:69:41:d8:c7:20:bc:7a:95:85:19:59:f3:ba:
                    53:9e:57:1e:aa:03:49:9b:03:b1:e6:76:26:fc:26:
                    cc:1a:70:ef:af:2f:2e:dc:0a:53:44:b7:c7:53:2d:
                    8d:c7:67:80:7c:b8:dd:24:21:3c:0d:d8:00:2b:df:
                    16:cc:ae:65:c9:f4:5a:4d:86:2f:df:85:bd:f5:39:
                    19:98:3f:c7:8c:35:47:77:03:c7:ca:ed:17:74:75:
                    78:81:0e:f9:cf:e7:b3:d5:0f:de:7e:15:17:02:04:
                    33:82:03:9f:96:c6:a8:b0:1a:0b:9d:ce:ca:6d:40:
                    94:e9:83:90:05:a8:af:1c:ea:a4:2e:08:44:18:4b:
                    e9:8c:46:26:e8:5b:39:60:59:1e:51:02:21:4f:73:
                    ea:dc:16:e8:82:08:59:0d:1b:26:89:ac:d9:4f:56:
                    22:b8:dd:53:6b:e4:d9:46:d8:42:a1:16:36:02:b9:
                    db:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:1C:FE:BB:13:5C:AA:10:18:94:8B:06:7F:26:C2:31:B4:80:74:C7
            X509v3 Authority Key Identifier:
                keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/uhz-uxNcqhAYlIsGfybCMbSAdMc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.33.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:5e:16:74:c9:e4:76:87:29:b5:2b:4a:f5:29:d8:8a:aa:75:
         38:b4:0b:51:0c:56:ab:a2:ea:52:5d:1d:55:5c:41:c9:24:0f:
         be:46:ec:65:10:f9:f8:0b:fe:16:cf:c2:0c:c2:5b:90:33:b4:
         e1:eb:62:28:54:46:9e:c8:b4:c8:40:19:87:24:47:d9:16:ad:
         06:33:4b:fb:01:8e:57:0c:16:a8:73:56:5f:c2:00:c0:b9:17:
         0f:33:3a:30:5d:c8:99:9f:5d:65:45:14:17:95:18:6f:b3:df:
         63:1f:5d:ea:63:6b:d5:dc:ab:94:37:80:32:59:0c:a5:bc:ac:
         bc:cb:4d:88:65:68:bd:c3:e9:23:93:0b:b7:66:4d:ee:40:c0:
         19:ba:7d:40:e7:5e:b9:e5:16:aa:15:fc:97:4a:30:bf:f4:99:
         dc:26:ab:73:e5:62:03:7b:20:57:58:b6:7e:24:b2:fa:b4:59:
         f4:e5:c2:e3:60:e5:8c:93:75:da:d2:12:10:de:6c:3b:de:03:
         90:62:bd:6c:f0:36:cb:f1:e7:21:15:54:c7:4b:b8:c7:89:00:
         b7:0c:38:20:ea:3d:61:a7:43:bb:1a:dc:d4:ee:de:69:05:5d:
         8a:d8:81:3e:69:68:80:66:06:e1:ed:51:de:f6:bc:19:ef:fc:
         55:74:8f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:03 2023 by rpki-client on console-ams.rpki-client.org