Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/VUObcPwsskavAo_IO8YaOSKR0R4.roa
File:                     VUObcPwsskavAo_IO8YaOSKR0R4.roa (raw, json)
Hash identifier:          ADTqfDSPKs1HAD42zOu7uHcXpXLmFU1MYMvJWVqSnFs=
Subject key identifier:   55:43:9B:70:FC:2C:B2:46:AF:02:8F:C8:3B:C6:1A:39:22:91:D1:1E
Certificate issuer:       /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial:       018875427ECD597AAF4A2AEEB1DA3806935F
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/VUObcPwsskavAo_IO8YaOSKR0R4.roa
Signing time:             Thu 01 Jun 2023 04:41:12 +0000
ROA not before:           Thu 01 Jun 2023 04:41:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        31.43.165.0/24 maxlen: 24
                          195.34.78.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:75:42:7e:cd:59:7a:af:4a:2a:ee:b1:da:38:06:93:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
        Validity
            Not Before: Jun  1 04:41:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=55439b70fc2cb246af028fc83bc61a392291d11e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:37:9d:36:c5:5a:6e:c9:4a:1f:f7:e1:bc:7a:
                    1e:6f:95:20:4f:b9:09:53:90:eb:63:cb:4a:4d:8c:
                    3d:56:70:a5:86:c6:27:db:d8:d1:74:64:ce:01:6a:
                    b8:ab:f5:04:f2:b5:b8:c2:a2:a3:3f:48:e2:e3:61:
                    14:7b:85:95:a7:95:8f:0e:3f:48:38:83:7e:de:e5:
                    37:f7:d9:34:15:46:97:ad:ad:13:31:ac:70:63:ee:
                    f6:74:14:96:07:80:61:1c:f5:df:23:23:b8:c2:4b:
                    34:4a:fe:97:7b:2a:9e:8c:c7:0d:e9:ec:04:94:76:
                    5d:7e:86:5c:33:1f:87:f1:ef:0c:de:6b:5d:8d:16:
                    d2:8f:1c:8d:63:78:11:3e:08:2b:84:f4:17:4e:91:
                    2e:07:1a:19:f9:d0:4b:6c:6e:c0:08:ae:22:ba:f9:
                    d7:19:51:f1:7c:61:cd:b4:66:f2:14:73:6b:f4:a7:
                    08:48:80:a0:1b:cd:01:f6:c0:b1:46:85:87:8a:cc:
                    5b:fb:03:0e:60:3f:1c:8f:17:64:24:fd:d3:9b:08:
                    22:66:60:7a:bb:6c:b7:b3:35:6a:17:b1:f9:33:b1:
                    98:47:58:3c:25:25:71:1b:49:c8:3e:94:f6:16:4f:
                    f2:66:a5:37:e6:42:9c:0e:f1:28:c5:2e:e3:40:a5:
                    a3:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:43:9B:70:FC:2C:B2:46:AF:02:8F:C8:3B:C6:1A:39:22:91:D1:1E
            X509v3 Authority Key Identifier:
                keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/VUObcPwsskavAo_IO8YaOSKR0R4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.43.165.0/24
                  195.34.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:b7:99:cd:b2:f2:0f:4d:c5:32:11:50:61:3e:53:d4:f0:e1:
         67:40:25:1f:ab:6c:27:f3:c1:d9:4f:b2:90:a2:ad:a0:b1:70:
         f4:4c:bf:c5:a1:33:dc:04:48:ca:8d:e3:a0:5d:f2:03:c8:13:
         61:bd:b5:2b:63:7d:05:42:0b:0e:8e:12:be:8b:80:fd:23:63:
         fb:e2:78:c0:08:2f:26:e9:d1:d4:df:53:84:67:29:63:82:f8:
         5f:44:7c:56:4b:18:a9:3e:b0:82:14:48:0b:f1:95:45:35:67:
         ae:41:4c:1b:88:3f:c1:3e:cd:20:1d:96:4a:a0:a8:9f:d0:0f:
         c7:00:2f:f9:72:0f:b3:53:22:31:bf:03:55:ad:8d:6b:0a:cf:
         13:73:72:4e:ff:87:3e:4c:f0:35:35:28:2e:52:d7:e4:44:ca:
         ee:80:82:a1:0b:1f:27:fb:7e:f1:28:77:c0:58:44:be:d9:d8:
         f1:64:92:12:bb:08:ea:67:ac:ea:89:50:b6:36:ae:da:ba:98:
         e6:09:b9:2c:29:66:cd:47:9d:9e:f1:29:f4:dc:37:ef:ff:1c:
         ae:69:a7:04:5b:e7:0e:6d:60:93:1d:47:90:26:aa:2b:e4:75:
         49:64:29:39:5c:fd:59:01:c8:4b:09:86:16:75:f4:64:9e:51:
         d0:80:08:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:53 2023 by rpki-client on console-fra.rpki-client.org