Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/V5ZwaXxGr01r1iuEXJefkF-aro8.roa
File:                     V5ZwaXxGr01r1iuEXJefkF-aro8.roa (raw, json)
Hash identifier:          KB7tUgnDQgMTNOIWX8a71CLzsLIPOb9Ikse5szbM2q0=
Subject key identifier:   57:96:70:69:7C:46:AF:4D:6B:D6:2B:84:5C:97:9F:90:5F:9A:AE:8F
Certificate issuer:       /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial:       01896F398087CB663BE1A6B704AA9FC60EF9
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/V5ZwaXxGr01r1iuEXJefkF-aro8.roa
Signing time:             Wed 19 Jul 2023 17:36:26 +0000
ROA not before:           Wed 19 Jul 2023 17:36:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     51026
IP address blocks:        81.12.24.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:6f:39:80:87:cb:66:3b:e1:a6:b7:04:aa:9f:c6:0e:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
        Validity
            Not Before: Jul 19 17:36:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=579670697c46af4d6bd62b845c979f905f9aae8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2e:bf:82:68:41:4f:e0:a8:94:80:73:23:35:
                    49:cd:6f:85:7b:78:45:b1:e6:11:06:83:39:82:e0:
                    71:7e:64:f1:4a:60:8b:82:10:77:0a:57:96:d3:bd:
                    85:df:62:a0:d8:e5:63:40:88:53:5b:3c:a5:c8:84:
                    db:a5:11:4e:a8:93:59:bd:12:93:58:3e:b5:da:a6:
                    d1:db:e0:22:19:03:43:72:9a:43:92:ee:b8:cf:8a:
                    7e:95:24:a2:4e:bc:79:f4:1b:9e:22:8f:73:2e:0e:
                    d1:51:8e:03:12:7e:b4:54:df:b8:54:44:ec:75:dd:
                    4c:3e:49:c5:16:cd:84:4d:9a:9b:1f:a5:ad:43:0e:
                    79:a4:ee:fc:49:66:d8:71:1d:ba:7b:88:9c:9e:0e:
                    5c:a2:d0:55:02:a5:56:6c:82:54:7b:20:46:ed:83:
                    e3:4e:61:eb:50:45:3c:f9:3c:43:e2:6e:28:c5:f0:
                    79:97:b1:c1:82:29:3e:ae:8d:1e:6e:48:72:59:63:
                    f3:ec:7e:7f:5f:24:5b:3e:ee:9a:d1:bf:c6:e1:a9:
                    54:f9:55:6d:e2:ed:fa:70:e9:30:eb:95:d6:57:cb:
                    0e:bd:72:05:5d:31:ec:37:ba:cd:ee:b1:e8:10:51:
                    ee:19:79:57:73:a9:f5:02:f3:8c:74:db:5b:f9:cc:
                    6f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:96:70:69:7C:46:AF:4D:6B:D6:2B:84:5C:97:9F:90:5F:9A:AE:8F
            X509v3 Authority Key Identifier:
                keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/V5ZwaXxGr01r1iuEXJefkF-aro8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.12.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:4c:17:f0:5d:df:1f:30:25:b9:2a:67:dc:37:ad:8a:fe:4d:
         08:7b:bb:d3:41:de:2e:79:5a:cb:dc:4f:0f:8a:94:04:34:bd:
         01:0e:77:c9:07:85:5d:63:0c:f5:d6:42:8d:1d:5d:a8:98:9a:
         31:fa:e3:e7:2d:c1:15:1c:f9:d2:f3:3b:1a:90:38:29:d2:ad:
         26:58:e5:81:b5:45:e0:8c:03:53:be:83:61:8d:a6:19:d6:90:
         d0:d9:a0:43:77:dd:d3:22:6f:ca:81:9b:b4:23:07:a8:09:9a:
         12:3e:7a:f2:9d:78:d0:ba:d9:a7:a8:73:b5:11:ce:35:aa:fd:
         d6:16:69:42:8a:73:f4:29:bb:98:f5:17:6f:2d:bb:17:fe:9b:
         32:fe:df:89:24:bb:3d:72:ad:8f:ff:7b:73:b1:01:de:d5:ec:
         9d:d2:b5:59:9a:16:36:ef:c4:96:f3:e9:80:c5:34:c6:8a:a1:
         62:4d:42:d1:ff:a4:f8:d4:e2:24:f3:cd:5a:57:51:cb:a1:9b:
         33:73:b2:6a:86:54:2c:77:9e:5d:52:23:b2:5d:46:7e:7d:a7:
         8c:97:02:09:83:25:05:66:13:3f:99:7a:2e:f2:06:4c:72:67:
         a7:33:1e:58:b8:a8:51:f7:16:91:c5:9f:ec:26:b4:ac:89:86:
         bc:dd:23:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 16 11:14:41 2023 by rpki-client on console-ams.rpki-client.org