Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/5lkbV_gvqTeUNkBFmzJ-SN2pVxM.roa
File:                     5lkbV_gvqTeUNkBFmzJ-SN2pVxM.roa (raw, json)
Hash identifier:          ULkqcBPPgbsGA0WrAayt+7Vf33REalpidCn1SfqE34w=
Subject key identifier:   E6:59:1B:57:F8:2F:A9:37:94:36:40:45:9B:32:7E:48:DD:A9:57:13
Certificate issuer:       /CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
Certificate serial:       018685B67E92B94053ECCB83B6560D7A49E3
Authority key identifier: E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/5lkbV_gvqTeUNkBFmzJ-SN2pVxM.roa
Signing time:             Fri 24 Feb 2023 23:16:14 +0000
ROA not before:           Fri 24 Feb 2023 23:16:14 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        77.247.116.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:85:b6:7e:92:b9:40:53:ec:cb:83:b6:56:0d:7a:49:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6e4687ab8b1eb6de1abd04a07617c86d118518d
        Validity
            Not Before: Feb 24 23:16:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e6591b57f82fa937943640459b327e48dda95713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:97:53:dc:e5:94:a4:f5:eb:cb:0d:a9:df:3a:
                    ac:b2:bf:a1:2d:3d:e8:84:bb:73:cb:57:9c:78:b1:
                    f0:67:1c:dd:a5:7c:1f:c0:3d:1e:2b:67:3c:ba:4d:
                    31:c7:63:6a:f4:79:a6:6b:96:67:91:9e:2c:fb:88:
                    86:b3:10:b2:68:fa:ba:60:60:89:c3:fe:06:e5:30:
                    67:cc:ae:da:27:e9:82:fb:f2:78:39:bf:1f:1c:a1:
                    47:dc:7f:ea:e9:a5:47:03:b5:3e:d1:61:68:99:7d:
                    05:12:22:80:b8:5f:20:b5:ba:69:fa:d4:24:8b:ef:
                    03:b2:60:8f:df:87:c7:b5:a5:15:3a:37:3a:5a:3b:
                    6d:6c:57:f3:a3:2f:63:d9:4b:fe:dd:c5:b2:8c:dc:
                    2f:f5:e1:62:f3:54:a6:87:92:6c:a3:f2:ee:46:a6:
                    75:49:7a:19:c6:41:dd:00:d5:b9:d0:15:d5:f5:1e:
                    f7:c0:9a:df:68:e4:38:e0:07:34:4a:41:c1:9f:b0:
                    ca:1c:b2:aa:8b:eb:d6:a2:c5:8d:af:51:57:59:dd:
                    8e:c1:e5:60:01:d0:5a:9c:18:87:6c:eb:9f:ce:ce:
                    85:39:a9:df:55:61:61:24:31:e8:04:67:0c:ae:49:
                    0d:63:68:75:b5:60:18:85:30:d5:7f:7a:8c:9c:f0:
                    0f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:59:1B:57:F8:2F:A9:37:94:36:40:45:9B:32:7E:48:DD:A9:57:13
            X509v3 Authority Key Identifier:
                keyid:E6:E4:68:7A:B8:B1:EB:6D:E1:AB:D0:4A:07:61:7C:86:D1:18:51:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uRoerix623hq9BKB2F8htEYUY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/5lkbV_gvqTeUNkBFmzJ-SN2pVxM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/6fd5d2-b7ce-4b3d-8f2c-138bbaac7fe2/1/5uRoerix623hq9BKB2F8htEYUY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.247.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:f1:e7:84:76:df:80:2d:d7:9f:75:73:5e:9d:83:c7:b9:df:
         c6:52:e8:cb:bd:a2:a2:f8:16:d2:a1:d6:0d:20:17:4f:ae:c4:
         0f:73:be:32:ac:b6:63:aa:bc:a2:a5:71:c5:12:4f:c0:6c:57:
         f0:95:6d:2a:b7:83:ac:cb:de:95:9b:45:65:9b:11:4d:e5:fb:
         92:b3:58:06:89:40:cf:b4:93:7b:4a:75:36:34:1e:6a:49:d8:
         98:04:57:20:b1:ca:9b:4b:41:5e:91:9e:bd:6e:98:8f:77:4b:
         ee:6a:5e:22:82:9c:1d:19:d5:e2:99:11:0c:4e:06:02:2c:03:
         93:5a:9c:bb:47:9f:91:48:77:d0:65:88:92:31:85:95:7a:fe:
         9e:e3:f8:43:90:09:d2:97:28:58:7b:92:ed:61:80:26:e9:e3:
         d4:2a:c8:fb:6e:9c:ef:8e:40:28:69:d4:63:a1:0b:fc:73:71:
         e5:c4:09:26:88:49:24:ef:cd:f3:45:ee:e3:48:74:c4:e3:32:
         50:15:ac:62:4f:5f:79:ce:3b:e6:9e:55:b9:c8:20:16:8d:d7:
         73:f0:bb:b1:9b:b2:2d:24:62:5f:ee:bb:a8:8e:a6:31:f6:10:
         05:80:61:48:69:33:74:36:9a:75:3f:da:f3:3d:f2:6f:14:66:
         4e:67:2b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 21 05:15:40 2023 by rpki-client on console-ams.rpki-client.org