Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/bvoH9U9OJx1dMpc1pvUGvNzxXVM.roa
File:                     bvoH9U9OJx1dMpc1pvUGvNzxXVM.roa (raw, json)
Hash identifier:          inrlk9xnHULxhM89kKk6UHoWdIU1QBjvZQYKvSV3/Cg=
Subject key identifier:   6E:FA:07:F5:4F:4E:27:1D:5D:32:97:35:A6:F5:06:BC:DC:F1:5D:53
Certificate issuer:       /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial:       018C25F942505F652880E9634F813F8F4C21
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/bvoH9U9OJx1dMpc1pvUGvNzxXVM.roa
Signing time:             Fri 01 Dec 2023 15:22:21 +0000
ROA not before:           Fri 01 Dec 2023 15:22:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50612
IP address blocks:        84.54.55.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:25:f9:42:50:5f:65:28:80:e9:63:4f:81:3f:8f:4c:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
        Validity
            Not Before: Dec  1 15:22:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6efa07f54f4e271d5d329735a6f506bcdcf15d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:cf:e6:6d:2e:ee:c7:f9:be:6d:e9:cf:b2:e7:
                    12:94:6d:31:d2:64:f7:c6:4b:da:90:a5:73:22:b1:
                    2c:fc:aa:55:ee:1a:31:ca:c8:4b:93:fe:8f:b9:16:
                    4b:bc:ac:7a:24:3c:61:4b:5c:bd:42:50:c7:e1:b0:
                    90:fb:02:61:14:eb:3a:bb:02:52:97:d3:69:12:a2:
                    fd:e4:c4:14:4e:1a:07:f5:fe:98:d6:bc:5f:16:ec:
                    62:60:e2:04:98:e0:e8:9d:04:59:a0:4c:0a:39:81:
                    6e:43:b7:4c:af:6b:03:8d:31:46:41:fd:f7:2e:4c:
                    cf:b3:4a:0f:fc:1f:57:44:27:15:b1:25:44:9d:57:
                    b8:ca:71:f4:1a:85:d7:d5:52:19:32:1f:a9:c8:0b:
                    ca:f9:31:6e:4f:2b:bc:4f:da:d2:35:c2:d7:65:06:
                    ce:2d:8a:20:d9:bd:90:4f:ac:c0:f5:60:c1:57:00:
                    99:c4:de:32:c8:a0:94:bd:07:d6:3a:5c:17:3f:89:
                    5d:0b:dc:93:ed:da:66:d8:f2:ef:70:b3:1f:11:95:
                    7a:58:9e:88:17:78:23:a2:47:e9:94:f2:fb:4d:2f:
                    ac:09:53:3e:70:d2:92:e7:53:9c:8e:02:a5:b2:b9:
                    85:0c:3d:da:31:87:81:8b:95:41:f4:59:ae:a4:6c:
                    46:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:FA:07:F5:4F:4E:27:1D:5D:32:97:35:A6:F5:06:BC:DC:F1:5D:53
            X509v3 Authority Key Identifier:
                keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/bvoH9U9OJx1dMpc1pvUGvNzxXVM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.54.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:8d:f7:2a:50:7b:5a:a2:6d:29:94:24:03:8a:c2:c7:cb:b7:
         0c:58:6b:27:90:19:d2:5d:01:fe:1e:09:ff:5a:d6:fe:25:69:
         29:67:71:b5:fb:8f:2b:98:dd:f2:af:14:3a:11:af:11:10:4d:
         74:01:32:05:4b:87:66:9f:21:27:6c:29:a4:fb:2a:9d:5f:90:
         7a:f5:1a:1d:05:fb:99:9d:89:57:d7:b0:0d:b5:d9:91:60:99:
         fb:67:4b:f7:a2:6d:3e:e2:68:80:47:36:9d:fd:e0:26:c5:9e:
         ef:2f:81:b5:41:c9:05:80:4a:b9:24:99:fb:da:83:f8:74:78:
         be:dc:e2:c2:cd:0c:aa:29:d2:6d:d8:32:c1:4a:56:f2:dd:49:
         a1:80:7e:05:7b:d7:38:4a:6d:ca:61:14:b2:bd:69:30:25:53:
         1f:4b:c2:bc:b5:6b:a6:a4:c1:75:27:25:86:20:b6:ae:c4:d5:
         83:35:cf:b2:ca:88:35:e5:c8:08:0a:f1:d0:2c:8b:85:b3:fd:
         28:2e:fc:af:60:2e:d6:da:6d:38:3c:e8:6a:b3:ad:86:e2:6a:
         42:e2:5f:fb:f3:70:47:b3:b9:af:a1:d5:3d:62:b1:61:ab:c9:
         82:16:11:a4:7e:b0:ba:24:a4:d5:15:07:04:75:0c:b5:fd:6f:
         b1:90:63:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:58 2024 by rpki-client on console-fra.rpki-client.org