Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/ZizZy2JrdnFj9knsmLjnp46JLgs.roa
File:                     ZizZy2JrdnFj9knsmLjnp46JLgs.roa (raw, json)
Hash identifier:          PyPBtjRI6hfXRP95HFgKsXp62EPE53Z2VVkymIqgChE=
Subject key identifier:   66:2C:D9:CB:62:6B:76:71:63:F6:49:EC:98:B8:E7:A7:8E:89:2E:0B
Certificate issuer:       /CN=f6af433974df373b70abd76b13e1c70c775f554b
Certificate serial:       018C1B442B2B05A392DDDC854E85B157A0C3
Authority key identifier: F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/ZizZy2JrdnFj9knsmLjnp46JLgs.roa
Signing time:             Wed 29 Nov 2023 13:28:21 +0000
ROA not before:           Wed 29 Nov 2023 13:28:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200482
IP address blocks:        193.187.255.0/24 maxlen: 24
                          2a12:3e80:401::/48 maxlen: 48
                          2a12:3e80:402::/48 maxlen: 48
                          2a12:3e80:500::/40 maxlen: 40
                          2a12:3e80:300::/40 maxlen: 40
                          2a12:3e80:200::/40 maxlen: 40
                          2a12:3e80::/40 maxlen: 48
                          2a12:3e80:200::/39 maxlen: 48
                          2a12:3e80:100::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:1b:44:2b:2b:05:a3:92:dd:dc:85:4e:85:b1:57:a0:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6af433974df373b70abd76b13e1c70c775f554b
        Validity
            Not Before: Nov 29 13:28:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=662cd9cb626b767163f649ec98b8e7a78e892e0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2d:76:23:91:10:cf:5c:6e:d5:33:3d:0f:3c:
                    cb:7c:4e:8b:aa:22:5f:e9:79:35:24:30:24:bd:13:
                    31:70:c1:5a:4c:dd:18:4f:2f:c6:21:23:6b:1c:ea:
                    69:57:34:27:f3:04:76:34:25:41:39:f4:4f:6f:3d:
                    02:e8:56:2a:1b:17:85:07:3e:c1:a3:84:bd:2b:c3:
                    d8:bc:1e:07:70:cf:c1:a8:35:97:ff:8b:85:cf:01:
                    1d:cb:a1:50:a7:7e:29:df:95:da:a0:c8:ec:93:b7:
                    44:52:7d:35:ab:f9:bc:6b:72:5e:69:fb:01:a0:35:
                    e3:e6:ff:ef:04:8f:1f:7d:ba:fd:bf:12:55:8d:c4:
                    27:b1:8e:8b:07:9d:32:d0:ec:16:3c:fe:5b:df:27:
                    41:46:ec:5f:b8:06:25:7f:1d:1b:e6:d5:2e:b1:56:
                    24:c3:0f:5c:ab:7b:51:2f:80:5e:b2:99:9e:59:1e:
                    df:9f:ca:d2:66:64:84:60:54:11:a9:a5:81:55:6a:
                    40:f7:5e:ae:ef:f9:32:33:0a:b2:f1:be:f0:15:66:
                    39:93:50:90:38:8d:a7:fe:a2:8c:9b:21:43:0a:39:
                    35:bd:70:fc:41:65:75:7b:09:78:04:58:a8:e3:2b:
                    f8:cc:62:f4:0d:bf:ef:22:bb:33:73:31:6a:20:8d:
                    16:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:2C:D9:CB:62:6B:76:71:63:F6:49:EC:98:B8:E7:A7:8E:89:2E:0B
            X509v3 Authority Key Identifier:
                keyid:F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/ZizZy2JrdnFj9knsmLjnp46JLgs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.187.255.0/24
                IPv6:
                  2a12:3e80::-2a12:3e80:100:ffff:ffff:ffff:ffff:ffff
                  2a12:3e80:200::/39
                  2a12:3e80:401::-2a12:3e80:402:ffff:ffff:ffff:ffff:ffff
                  2a12:3e80:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         25:0e:9d:18:c2:e2:9b:65:89:0a:40:f7:99:47:04:95:10:e1:
         19:d0:13:a4:db:a9:0d:14:6e:21:d6:86:1a:f4:26:25:9b:79:
         60:49:02:fc:2c:af:2d:94:f8:87:f1:c7:13:d0:e4:70:3b:46:
         df:71:32:8b:7e:73:8d:3c:23:4b:10:eb:5f:8e:10:05:a7:d6:
         7a:9a:bc:b0:6d:02:36:09:a8:ef:ab:a1:19:cd:ba:2e:9a:b8:
         3c:e2:f2:92:d6:48:fd:bc:af:81:d6:96:9e:7f:db:0f:49:fa:
         c7:a4:6e:5f:fa:bf:28:16:f7:48:83:2e:98:e0:69:03:5a:71:
         60:91:17:79:ae:81:8a:c5:97:06:0b:9f:0b:e6:90:6f:03:b3:
         89:c0:ff:45:60:13:a9:67:34:e0:05:a4:ff:7e:75:e9:f8:9c:
         a6:4c:1e:fa:f0:aa:34:89:bd:b3:6e:bf:75:fb:a9:d6:5d:e5:
         0f:ee:b6:91:98:48:85:7f:77:e9:45:34:01:69:56:c2:c4:88:
         ef:5c:9f:a0:27:bc:65:62:2d:6f:8a:e4:87:4d:5f:36:a4:01:
         14:29:6c:50:76:fe:6f:30:48:a8:1a:24:18:c9:73:69:3a:5f:
         69:09:55:42:84:6d:36:d8:de:fd:e0:6c:6e:3f:c9:01:24:b5:
         62:24:23:c1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Dec 11 17:47:37 2023 by rpki-client on console-ams.rpki-client.org