Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/dRJsVxkmo4onL_n-g3a5lJSiDIE.roa
File:                     dRJsVxkmo4onL_n-g3a5lJSiDIE.roa (raw, json)
Hash identifier:          N5y5fsryx8r5GlhCfQrclNL80ZS/fMD6TkzsebQUEGQ=
Subject key identifier:   75:12:6C:57:19:26:A3:8A:27:2F:F9:FE:83:76:B9:94:94:A2:0C:81
Certificate issuer:       /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial:       01877EC6F6D01BC43A709DDFD5990D0855DB
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/dRJsVxkmo4onL_n-g3a5lJSiDIE.roa
Signing time:             Fri 14 Apr 2023 07:59:41 +0000
ROA not before:           Fri 14 Apr 2023 07:59:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     0
IP address blocks:        185.110.63.0/24 maxlen: 24
                          46.175.130.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:7e:c6:f6:d0:1b:c4:3a:70:9d:df:d5:99:0d:08:55:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
        Validity
            Not Before: Apr 14 07:59:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=75126c571926a38a272ff9fe8376b99494a20c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d2:a1:26:d0:28:c9:da:9f:70:44:7e:7c:36:
                    87:73:08:99:cd:c4:45:95:06:b6:32:80:ce:c1:6f:
                    23:fd:2b:a2:6e:2b:31:b8:11:5c:8f:d2:9c:f6:c0:
                    80:f1:3e:5d:91:68:71:f0:b1:5e:a8:25:d0:25:f3:
                    ca:f9:85:29:12:c4:89:14:f2:4e:81:5a:92:8d:3c:
                    11:24:38:9c:fb:88:bc:2f:ae:49:85:d1:a6:d4:11:
                    f8:3d:2a:23:49:58:4e:a7:47:fe:af:ca:a1:0f:3d:
                    76:ec:3a:1f:c9:97:fa:ec:d1:2d:e9:31:f8:32:1b:
                    4e:c9:45:9f:da:bb:2f:fa:b2:68:de:54:d0:96:af:
                    b0:1d:06:1d:4b:6b:f3:ff:f1:cd:77:f2:55:c1:ee:
                    b1:d6:7c:6a:c5:0d:f1:fa:a9:65:e4:58:f7:4e:ce:
                    e9:63:81:be:95:fb:3e:0b:2f:8b:a2:35:86:2c:9d:
                    38:c7:6f:e5:9c:25:6d:f2:79:81:24:4a:7d:66:18:
                    78:86:3f:33:c9:0b:be:02:d6:77:e6:aa:9e:c6:a2:
                    0a:e6:1a:2d:c5:a3:a3:a4:7f:46:36:96:8d:17:49:
                    42:a2:db:7f:44:5a:c1:2d:0e:44:05:55:5c:f8:a4:
                    04:49:b0:84:40:38:35:dc:ad:e3:8f:b0:5f:97:e7:
                    ce:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:12:6C:57:19:26:A3:8A:27:2F:F9:FE:83:76:B9:94:94:A2:0C:81
            X509v3 Authority Key Identifier:
                keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/dRJsVxkmo4onL_n-g3a5lJSiDIE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.175.130.0/24
                  185.110.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:7b:8f:c6:a9:8b:e3:5c:88:64:08:80:d5:ae:c7:19:4c:58:
         f2:e8:1b:4a:24:78:ed:8a:e1:d9:20:21:a4:05:54:06:48:b5:
         c5:7e:f5:5d:f8:f6:89:bb:57:6e:7d:14:68:db:79:3b:14:32:
         a7:26:b8:43:7b:3f:c8:cc:15:58:34:33:22:ba:07:db:90:cf:
         fe:16:b6:5c:62:ec:c6:9d:1d:18:9f:40:5d:9b:66:9e:8e:d5:
         0c:54:8d:2e:10:70:57:37:c9:e8:3c:e0:12:0a:20:98:ce:93:
         83:19:d0:1a:ab:f5:35:95:41:6c:6f:5b:b5:71:9e:73:af:db:
         cc:6e:8e:8a:30:d6:a3:4e:8e:36:65:3b:68:80:1a:13:8a:84:
         15:4c:eb:f5:ef:49:41:5a:a5:6d:e4:82:57:97:de:8d:db:89:
         91:a6:0b:10:d0:f8:46:86:3d:71:7a:8e:ae:ac:69:a1:06:18:
         8e:52:ed:e2:2e:d8:c4:57:0f:8e:08:8e:03:c4:91:4a:74:de:
         4f:ab:f2:d1:af:8f:cb:c9:1f:85:9f:cf:97:4a:69:aa:4d:cf:
         59:e4:c6:41:60:db:e5:94:dd:63:ac:cb:fb:cb:93:10:03:d0:
         7f:d4:f6:c8:0e:83:81:ff:e1:b4:4a:01:ba:b2:79:5c:1f:7e:
         d2:9f:0d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:32 2023 by rpki-client on console-ams.rpki-client.org