Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/t2b-pEicq_NjIHX0fuxDvm9Iw1k.roa
File:                     t2b-pEicq_NjIHX0fuxDvm9Iw1k.roa (raw, json)
Hash identifier:          ujRqKsB6ERb4t5LcpybMPDvlUISHWt0EOvfgvZ3Ps50=
Subject key identifier:   B7:66:FE:A4:48:9C:AB:F3:63:20:75:F4:7E:EC:43:BE:6F:48:C3:59
Certificate issuer:       /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial:       0189D4912D1DD92EF2988CF66D2707C94EBB
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/t2b-pEicq_NjIHX0fuxDvm9Iw1k.roa
Signing time:             Tue 08 Aug 2023 09:53:51 +0000
ROA not before:           Tue 08 Aug 2023 09:53:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     197842
IP address blocks:        185.255.196.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:d4:91:2d:1d:d9:2e:f2:98:8c:f6:6d:27:07:c9:4e:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
        Validity
            Not Before: Aug  8 09:53:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b766fea4489cabf3632075f47eec43be6f48c359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e0:2f:86:ef:3a:b2:c1:62:82:e8:23:9d:e9:
                    c0:5d:5f:9c:74:2f:99:df:c4:f2:a6:2c:64:a3:d6:
                    93:9c:34:e5:61:d6:3a:76:11:c5:c1:2a:62:c0:d2:
                    f2:82:07:64:d7:46:9d:d1:90:5f:45:4b:0f:66:31:
                    fe:b5:b3:3b:1e:c7:b7:94:83:a5:cd:1d:ad:a7:d3:
                    d2:23:16:57:02:0a:5a:84:4d:ea:d8:b6:ee:57:4e:
                    62:04:42:31:64:c0:a3:ee:7e:36:5c:d0:17:81:73:
                    8c:29:8f:bd:a9:ae:25:4a:59:7e:87:3e:f7:ce:98:
                    aa:e0:5a:a4:2f:79:c2:e6:55:c5:20:1e:3f:22:af:
                    90:d1:6d:ff:82:f3:a8:46:c8:d6:67:ef:8f:b6:e8:
                    b1:fb:dd:25:2b:07:9c:5d:6e:a5:aa:92:c3:5f:a6:
                    82:a3:de:34:6d:02:dd:11:16:94:08:13:76:cb:6a:
                    ae:9c:cd:7b:34:33:6a:a3:36:80:97:04:d6:b2:4a:
                    35:85:4c:05:bb:4c:fc:f8:ac:5c:50:1f:fa:3f:e7:
                    2c:f0:c3:d3:3a:95:ee:9b:fa:a4:e0:33:b5:f7:5b:
                    86:aa:d3:fa:65:ec:e1:da:1c:e4:b2:c2:61:97:2e:
                    0b:01:12:ac:12:1c:1d:3c:ed:c1:ef:35:a6:89:6d:
                    d5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:66:FE:A4:48:9C:AB:F3:63:20:75:F4:7E:EC:43:BE:6F:48:C3:59
            X509v3 Authority Key Identifier:
                keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/t2b-pEicq_NjIHX0fuxDvm9Iw1k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.255.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:8c:0d:69:f4:c2:f4:78:ec:10:71:bd:02:51:37:ac:80:0d:
         56:b1:80:3f:74:d2:e1:02:79:23:8b:07:8c:fc:7b:f0:f6:b2:
         3c:91:01:7d:7d:f7:49:d9:1e:55:8b:4d:58:42:19:d9:64:67:
         aa:47:6d:66:4d:f1:52:7a:e6:ee:48:40:30:a9:e2:d8:cf:89:
         e4:2a:c2:98:64:44:a4:08:f8:ab:de:42:28:9f:43:08:1e:00:
         00:ca:0c:ff:f0:85:95:a3:2c:dc:a5:04:24:0d:55:a6:ae:93:
         e9:85:41:2b:aa:69:0e:87:16:eb:1a:b6:7b:df:45:37:c7:c2:
         cb:dd:ce:b4:cf:c7:73:64:87:1f:87:af:e9:8d:f7:99:cc:9a:
         ac:74:13:92:11:26:5c:03:8d:3a:0b:36:ff:bf:fe:89:00:cf:
         a1:36:82:24:de:a5:8b:59:d3:b1:d8:bd:fe:f2:51:e9:b9:12:
         9b:28:e9:ce:dc:eb:67:87:92:60:08:5b:71:04:08:84:d6:35:
         9e:4f:f6:99:33:60:43:af:b4:af:39:25:dd:b4:4e:da:7e:e8:
         a0:ee:7f:2f:45:ce:40:ed:0f:7c:a4:37:d6:f0:f2:eb:ac:b4:
         37:90:df:5d:42:a5:17:d4:23:3a:18:e0:0b:fd:85:e1:0c:8c:
         02:24:0b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 9 11:16:03 2023 by rpki-client on console-fra.rpki-client.org