Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/ze-PcxzEjUNo01jQ5VAzni9aYl8.roa
File:                     ze-PcxzEjUNo01jQ5VAzni9aYl8.roa (raw, json)
Hash identifier:          bFS5EGzeW8OMgO0Kan+ZHa5fyIuOOs4TOEx+1f7CZjk=
Subject key identifier:   CD:EF:8F:73:1C:C4:8D:43:68:D3:58:D0:E5:50:33:9E:2F:5A:62:5F
Certificate issuer:       /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial:       0187EA0692C30FC897902546D75D8B963792
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/ze-PcxzEjUNo01jQ5VAzni9aYl8.roa
Signing time:             Fri 05 May 2023 03:48:31 +0000
ROA not before:           Fri 05 May 2023 03:48:31 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        193.228.168.0/24 maxlen: 24
                          193.228.169.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:ea:06:92:c3:0f:c8:97:90:25:46:d7:5d:8b:96:37:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
        Validity
            Not Before: May  5 03:48:31 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cdef8f731cc48d4368d358d0e550339e2f5a625f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:83:1d:75:87:ae:46:7c:5a:0a:0b:0b:2a:31:
                    dd:94:a0:db:f8:4b:87:12:c7:54:e7:3c:d8:0d:50:
                    ab:84:68:68:b0:bf:f5:d3:cb:37:82:5f:f3:2a:45:
                    2b:23:f7:f4:13:8c:bb:5b:ce:74:ff:ab:e9:e7:e5:
                    d1:b1:1c:4e:45:68:3b:c8:c6:25:bb:c1:29:cd:99:
                    e6:50:bc:40:10:ed:98:14:bc:0f:e7:e3:ab:fb:06:
                    b0:51:f5:e3:ad:89:9d:e9:e7:92:56:cf:23:26:65:
                    38:19:04:8f:30:3e:34:95:d3:81:2f:15:77:36:4c:
                    06:3e:3a:fd:7a:92:0f:7d:47:16:7f:8c:14:54:ce:
                    fd:18:cf:f1:c7:f8:4e:23:c4:74:71:7d:90:d0:88:
                    40:5e:8d:02:83:94:9f:6f:76:f5:b6:82:d0:aa:de:
                    e1:9f:58:7c:79:f9:76:45:8c:c1:7f:74:b1:92:aa:
                    a6:27:6f:65:c2:cb:34:44:4e:6c:7a:ef:6a:91:49:
                    7b:14:e0:7f:a6:ef:f3:80:cf:a0:b3:31:0d:7e:d8:
                    37:57:2e:f7:83:f4:9e:42:aa:5f:dc:33:78:51:a7:
                    c2:55:58:98:32:ee:7e:1b:28:fe:21:0b:45:d2:a2:
                    a5:45:6c:0c:a2:62:46:2c:ca:4b:e2:33:83:56:0a:
                    26:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:EF:8F:73:1C:C4:8D:43:68:D3:58:D0:E5:50:33:9E:2F:5A:62:5F
            X509v3 Authority Key Identifier:
                keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/ze-PcxzEjUNo01jQ5VAzni9aYl8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.228.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:6a:33:6e:a2:91:1e:d5:9c:53:f9:d1:cd:4b:c4:b2:b6:90:
         11:50:d9:40:c2:d5:b7:b2:14:5c:86:b1:15:21:5a:17:a9:b3:
         c0:f0:3f:57:da:64:03:11:12:eb:8e:71:5d:79:ca:34:57:a7:
         aa:4e:79:52:05:af:4b:b8:90:b4:70:a6:99:29:37:c3:21:19:
         3b:92:c7:7b:33:a3:ff:44:c0:f3:6f:b5:a9:a3:f2:cd:40:2a:
         0a:d0:d1:d8:e4:38:69:00:4d:33:63:b0:0a:f4:c9:08:75:93:
         25:81:4d:6a:7c:a9:cc:80:68:1f:4c:2f:01:62:2e:3b:8b:d0:
         f4:78:f9:4b:52:1d:d3:77:20:45:eb:b5:83:c9:f7:c5:02:f3:
         65:e2:f1:6d:dd:e2:34:4c:b3:73:33:ce:f8:96:c7:44:65:68:
         d1:87:07:f7:50:9a:ab:48:e7:be:21:5b:8c:5b:7d:54:f1:4e:
         86:27:0a:6c:2c:54:47:e1:f4:a8:51:a6:fd:70:c1:bd:c9:4e:
         a2:e2:5b:22:7a:f8:4b:c8:cd:1a:70:82:00:bc:23:c9:93:bd:
         b3:63:82:6e:b7:3a:99:ff:f6:10:3b:fe:79:05:ad:bb:af:b0:
         cd:d9:6f:72:25:4f:93:45:1e:81:8c:c7:28:8b:4c:bf:59:19:
         8c:5e:dc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:35 2023 by rpki-client on console-fra.rpki-client.org