Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/jvMm2CA2xCjxl1rpTyzlDF4yyY0.roa
File:                     jvMm2CA2xCjxl1rpTyzlDF4yyY0.roa (raw, json)
Hash identifier:          /S+O35zjhg0hCSo+bHRQ7ROJGLVPCueDx376DNA5j+Q=
Subject key identifier:   8E:F3:26:D8:20:36:C4:28:F1:97:5A:E9:4F:2C:E5:0C:5E:32:C9:8D
Certificate issuer:       /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial:       018C266BB325562A9EA276442622A434EB89
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/jvMm2CA2xCjxl1rpTyzlDF4yyY0.roa
Signing time:             Fri 01 Dec 2023 17:27:21 +0000
ROA not before:           Fri 01 Dec 2023 17:27:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47122
IP address blocks:        193.22.228.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:26:6b:b3:25:56:2a:9e:a2:76:44:26:22:a4:34:eb:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
        Validity
            Not Before: Dec  1 17:27:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8ef326d82036c428f1975ae94f2ce50c5e32c98d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8d:66:94:36:7e:1b:f9:32:ce:1a:95:8e:a9:
                    0b:d5:8c:16:62:7e:c8:ae:9f:40:d3:48:c0:ee:f1:
                    f4:03:cd:71:80:45:c8:04:5b:68:a8:ab:d9:22:cb:
                    68:89:9d:4e:18:63:a5:9b:1a:73:9f:80:3b:4e:67:
                    b2:d4:fe:bd:63:1f:80:3a:2b:ec:cb:ed:ff:ff:bc:
                    14:61:cd:75:d0:f7:79:5a:66:fd:df:4e:90:94:fe:
                    3b:c9:7f:8d:5c:0d:bb:fa:f3:b6:fa:e3:c2:29:0d:
                    9c:13:4a:7b:bb:02:3d:03:3b:5d:e8:a0:0e:e8:2b:
                    aa:8f:89:ae:eb:cc:73:e5:ec:6c:3e:0c:8f:80:a3:
                    6d:37:05:23:30:c2:b4:88:04:1a:38:22:96:bc:2b:
                    6a:00:f1:6e:d4:dc:bf:89:a5:90:eb:3b:45:d6:13:
                    e3:af:c6:7f:b1:77:aa:1c:15:f5:99:2a:64:2e:c9:
                    84:e2:04:b3:8b:5a:4e:ab:f8:f1:b1:50:1e:d9:9a:
                    7b:b1:80:0d:de:b8:44:e6:7a:6f:81:e2:5b:a0:5e:
                    b4:b9:4a:30:e7:c5:ba:8d:f7:37:b0:fe:fb:6c:ed:
                    ce:7d:c3:e5:99:b4:6a:bb:ce:b8:5f:7c:d3:a5:3a:
                    ea:9e:56:00:d2:4b:02:7c:20:e9:d5:d9:e3:87:24:
                    4f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F3:26:D8:20:36:C4:28:F1:97:5A:E9:4F:2C:E5:0C:5E:32:C9:8D
            X509v3 Authority Key Identifier:
                keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/jvMm2CA2xCjxl1rpTyzlDF4yyY0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.22.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:a8:5c:56:06:d4:3c:83:87:e3:9b:f1:1f:71:c7:15:aa:32:
         f5:f7:93:81:ee:11:48:c8:d0:73:2d:3d:ef:e0:33:93:59:d7:
         57:48:de:9d:28:39:b3:4d:e6:a9:6b:85:41:09:cb:ce:61:ac:
         1d:52:67:9a:ab:13:8c:90:56:3b:f2:1f:44:c9:cb:fd:f9:57:
         ea:b4:06:f7:57:f5:47:60:e0:3b:b9:bc:d6:38:1a:5b:c3:66:
         22:56:b8:4a:e3:d2:63:52:0e:59:9c:cd:cb:ce:1d:a5:e6:d4:
         df:6c:1c:c4:dc:6f:c3:a4:a2:a5:4e:8b:a2:1c:1c:e8:98:59:
         c9:86:99:ca:b4:12:d0:30:bb:31:56:88:4f:f4:d1:3d:29:c0:
         6d:a6:60:61:be:7a:c8:2e:09:4d:89:a0:11:7a:7c:a9:c9:cc:
         a7:ec:a1:e7:2d:fd:14:f0:27:cf:a4:d8:19:cd:bf:fd:ec:ad:
         3b:09:af:93:a6:7a:69:68:c1:b7:59:ca:cd:73:9c:ac:86:56:
         6c:ce:c4:46:8c:94:71:15:b4:46:3a:3e:ab:f0:7b:3e:b9:f1:
         d0:c0:df:1f:9e:4f:e3:37:95:7d:8d:50:17:84:55:a7:e3:01:
         53:71:14:27:c1:bb:b8:0a:59:8e:d1:57:d1:e6:0d:73:18:85:
         b5:93:ad:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:58 2024 by rpki-client on console-fra.rpki-client.org