Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/_ledEqtV1JLjAns9ADbEq1YFj0c.roa
File:                     _ledEqtV1JLjAns9ADbEq1YFj0c.roa (raw, json)
Hash identifier:          xcp9jNjsPQsF2gvIATSH7iqwqRo388Me6b5vmmLtQn4=
Subject key identifier:   FE:57:9D:12:AB:55:D4:92:E3:02:7B:3D:00:36:C4:AB:56:05:8F:47
Certificate issuer:       /CN=ef739c0c04a4271b5aad62c119229e18fada5fd3
Certificate serial:       018ADFEF0BFAF2961180E9C33C258A5FEE22
Authority key identifier: EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/_ledEqtV1JLjAns9ADbEq1YFj0c.roa
Signing time:             Fri 29 Sep 2023 07:54:59 +0000
ROA not before:           Fri 29 Sep 2023 07:54:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6730
IP address blocks:        193.5.56.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:df:ef:0b:fa:f2:96:11:80:e9:c3:3c:25:8a:5f:ee:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef739c0c04a4271b5aad62c119229e18fada5fd3
        Validity
            Not Before: Sep 29 07:54:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fe579d12ab55d492e3027b3d0036c4ab56058f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:30:a0:fe:49:28:ff:02:9a:b3:3e:23:16:a9:
                    e6:be:8c:7c:75:a5:64:f5:b3:55:75:bb:fd:61:61:
                    10:4f:8e:02:4f:c1:e4:32:7a:71:ee:6d:c7:ab:12:
                    9d:07:a4:02:c7:dc:ad:90:42:87:26:fc:eb:b5:be:
                    0e:79:21:c4:8e:22:25:67:96:f8:53:bf:37:b6:5d:
                    d7:47:f3:8a:3f:cf:8e:7a:be:05:1f:c0:02:ef:52:
                    04:5a:16:c0:e6:70:09:15:4e:70:33:08:5b:70:61:
                    04:47:c7:b3:d2:92:26:5c:cb:81:a1:06:56:d7:fb:
                    33:1a:e2:ff:5d:6e:ee:6d:2e:fb:e2:87:d9:1e:ff:
                    00:9e:88:01:05:fd:00:ef:8c:47:05:1a:96:94:64:
                    98:c0:bb:a4:8a:6a:fe:b2:6c:6a:c6:7a:3c:c6:f3:
                    60:9d:7e:a1:d8:72:9b:03:54:94:19:57:de:f3:81:
                    03:08:88:6e:40:bf:f6:7b:e7:a7:41:3d:5f:b9:1e:
                    c1:e9:23:58:d7:f8:e4:1a:06:34:93:2b:e6:68:ff:
                    ef:8c:7b:fb:4e:33:f9:bb:b5:94:82:f2:ec:d5:68:
                    44:05:18:38:3d:63:69:f6:ee:95:bc:bc:fe:69:bc:
                    45:ad:30:76:f1:49:2e:39:77:47:09:87:22:2a:b8:
                    e7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:57:9D:12:AB:55:D4:92:E3:02:7B:3D:00:36:C4:AB:56:05:8F:47
            X509v3 Authority Key Identifier:
                keyid:EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/_ledEqtV1JLjAns9ADbEq1YFj0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.5.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:b9:7a:7a:1f:70:d8:28:c8:e0:50:0e:84:ff:f5:23:31:42:
         2d:6b:28:ab:9b:14:f1:cf:94:68:4c:d4:96:1a:64:b4:e1:67:
         ec:f1:41:3b:3e:48:07:8f:86:14:8d:c5:03:86:ef:6e:bd:2f:
         d5:2e:f1:ff:f2:5a:c8:39:62:25:4a:83:ec:38:9e:af:1f:ef:
         3d:b7:d5:1e:42:57:d6:35:3a:7a:e3:6a:0e:76:fb:aa:f2:33:
         9e:b3:c9:1a:da:9e:b8:1d:9f:33:b5:bd:d5:f1:47:2c:1f:1c:
         39:b1:23:81:f9:3c:7c:4d:b2:38:08:f0:4f:be:31:86:89:60:
         c3:b8:69:ff:f7:2d:fa:a3:9c:56:b5:10:29:a1:3d:38:4f:ae:
         81:91:fa:81:d2:8c:65:03:ef:39:77:88:24:62:1b:bc:55:cc:
         5c:00:a4:0b:13:3a:bb:cf:ba:9c:a4:80:ec:a9:01:8c:46:5d:
         81:70:fd:78:70:a9:e4:6b:fd:c4:b5:ce:ee:0e:5f:ef:c3:89:
         2c:59:45:12:0e:53:14:51:37:d5:76:ca:ed:2f:af:ff:ac:05:
         da:64:4d:fb:c0:5b:e7:d7:63:74:87:3a:9a:2f:9b:6a:25:11:
         86:a1:82:06:51:19:ff:30:4c:57:d7:6b:a8:94:fd:42:89:dd:
         b0:e5:7b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:35 2024 by rpki-client on console-fra.rpki-client.org