Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/EEy6hj3OUEKlytBJ4wNVQNQzNl0.roa
File:                     EEy6hj3OUEKlytBJ4wNVQNQzNl0.roa (raw, json)
Hash identifier:          h+F6GjFBerFUqMLsFiSe9nWM0X6B4++yhZRO5GA6VdI=
Subject key identifier:   10:4C:BA:86:3D:CE:50:42:A5:CA:D0:49:E3:03:55:40:D4:33:36:5D
Certificate issuer:       /CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Certificate serial:       0185729EEA173CF90D0DF3EE8BC4CE17171C
Authority key identifier: 0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/EEy6hj3OUEKlytBJ4wNVQNQzNl0.roa
Signing time:             Mon 02 Jan 2023 13:14:55 +0000
ROA not before:           Mon 02 Jan 2023 13:14:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14537
IP address blocks:        176.113.94.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:9e:ea:17:3c:f9:0d:0d:f3:ee:8b:c4:ce:17:17:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
        Validity
            Not Before: Jan  2 13:14:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=104cba863dce5042a5cad049e3035540d433365d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6b:4e:28:04:65:3b:01:c2:de:bb:77:10:ee:
                    08:ef:ad:2d:91:06:4d:dc:15:26:cf:4e:d6:29:0d:
                    ae:cd:3b:30:0c:1a:b3:6b:b8:98:84:e1:39:9f:31:
                    6e:6a:d3:9e:82:8f:e0:97:2b:19:61:f9:11:22:ef:
                    04:ae:25:6b:32:4a:97:19:82:7c:7f:e3:d8:50:9b:
                    02:d9:90:8e:22:1c:15:dc:a4:c3:48:ed:6a:dc:39:
                    8b:f5:dd:fc:4a:f7:b4:f7:d8:15:95:99:04:59:51:
                    29:fc:77:27:b9:aa:a9:4e:cd:61:1b:a2:b7:d5:81:
                    a6:9a:eb:8f:9e:07:73:96:34:aa:bc:b4:4b:6f:c1:
                    b4:60:b8:92:e9:cf:c0:a8:ae:ec:9c:91:8c:af:bc:
                    3c:c6:ee:ea:fd:bb:98:69:c0:a1:8f:76:c2:2e:e6:
                    b3:63:90:90:52:97:9a:c2:e7:4c:a0:56:48:51:4f:
                    db:95:3b:7d:ed:0d:95:18:38:a8:25:41:de:aa:14:
                    ec:d6:98:9b:c8:c4:b7:59:e0:24:be:2d:61:19:ed:
                    1f:3e:96:91:60:67:bf:bd:06:6c:bb:73:4b:f2:82:
                    7a:32:4d:63:a5:b3:0a:84:58:30:0d:dd:12:21:8e:
                    54:c1:d3:24:e0:d0:3b:df:4d:91:fd:80:b4:87:a1:
                    8d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:4C:BA:86:3D:CE:50:42:A5:CA:D0:49:E3:03:55:40:D4:33:36:5D
            X509v3 Authority Key Identifier:
                keyid:0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/EEy6hj3OUEKlytBJ4wNVQNQzNl0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.113.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:51:a4:b7:93:c2:16:d3:7a:a5:19:cb:3b:d1:dc:b7:2d:3d:
         99:e1:97:8f:8c:47:d6:8c:f0:ff:6c:da:e8:48:9c:9e:e1:9c:
         c5:9b:d0:46:ad:4f:95:9d:49:98:6f:6d:cb:43:8a:88:3e:ec:
         a2:6d:e3:3f:53:3d:2a:73:ea:b4:59:8b:54:82:d5:fd:e8:63:
         97:64:44:ec:d9:72:b9:a9:dc:28:3d:ca:45:b7:ab:40:78:96:
         ab:cb:76:f0:d7:e9:11:af:4c:e9:d6:1d:41:f4:fa:d0:29:e8:
         38:eb:d3:d1:73:a3:84:00:b2:91:12:dd:6b:9d:75:92:bf:54:
         d9:73:c5:16:32:54:79:c3:0d:4c:05:fa:8d:7b:0d:05:80:f0:
         aa:5e:fb:94:8b:97:dc:ab:dd:05:8c:f5:85:c1:4b:da:8e:c5:
         b9:93:25:96:fa:f9:12:b9:8f:17:36:69:f6:e2:76:90:0e:b8:
         b4:54:dd:97:b4:aa:13:34:10:df:5e:62:be:b8:bb:51:04:22:
         6f:75:32:3e:03:48:a3:23:ac:13:33:5e:7e:5b:63:38:17:59:
         8f:c2:6c:22:f4:32:86:5d:15:ac:4b:49:18:d6:4b:b1:ce:51:
         5b:c2:e2:f4:11:5c:7f:d4:82:f2:8f:a6:42:ab:27:8a:1b:83:
         5f:b4:6c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:37 2023 by rpki-client on console-fra.rpki-client.org