Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/ULwS4UlXj1kOGZzKL04-baqlOg4.roa
File:                     ULwS4UlXj1kOGZzKL04-baqlOg4.roa (raw, json)
Hash identifier:          30wrvu5MBbRpTvohIsf/GeBb9xQ8KV8yWRyftxKenwY=
Subject key identifier:   50:BC:12:E1:49:57:8F:59:0E:19:9C:CA:2F:4E:3E:6D:AA:A5:3A:0E
Certificate issuer:       /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial:       0186988CBD0528A474B63063D93F27DE96D6
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/ULwS4UlXj1kOGZzKL04-baqlOg4.roa
Signing time:             Tue 28 Feb 2023 15:03:25 +0000
ROA not before:           Tue 28 Feb 2023 15:03:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200461
IP address blocks:        178.251.228.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:98:8c:bd:05:28:a4:74:b6:30:63:d9:3f:27:de:96:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
        Validity
            Not Before: Feb 28 15:03:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=50bc12e149578f590e199cca2f4e3e6daaa53a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:57:3a:b1:14:67:d9:f6:c0:e4:0c:fd:da:fb:
                    39:25:f2:86:60:ea:7f:05:37:96:95:fe:c8:b7:a0:
                    75:c5:0b:db:ad:5b:3f:8c:3e:0e:7d:1f:e2:0f:ab:
                    51:a6:36:38:50:a1:b3:bf:f2:11:07:3c:41:85:55:
                    17:30:e0:a4:3e:55:11:f0:b6:cd:ea:e3:27:84:76:
                    37:2c:c3:b5:bd:a6:83:e5:f3:98:43:6d:65:60:3e:
                    d2:cd:92:c5:82:1d:ca:50:64:30:f2:54:84:7f:0f:
                    2b:2e:45:65:a1:6e:b1:8b:c1:98:8f:e2:55:cd:6e:
                    d9:13:a9:3e:14:b4:9a:4e:6c:33:fc:91:8a:f1:63:
                    b2:b9:e3:40:e5:2d:d6:60:4d:23:1e:e1:6e:bf:3a:
                    07:29:f1:c7:24:98:16:9d:50:7d:55:66:17:c6:54:
                    e3:ee:f1:6e:69:bf:21:a5:70:b8:d5:c9:fb:76:20:
                    17:13:db:29:f5:bf:f4:ca:97:28:1b:6c:bc:fc:f1:
                    cb:20:4b:b6:96:11:27:78:e8:77:ea:59:7f:14:ae:
                    e2:0d:21:e8:a7:f4:e7:06:1f:8a:6b:8d:88:d9:4c:
                    af:48:41:cb:8d:91:7c:19:9c:3a:6c:e4:6a:4f:a4:
                    b1:48:a3:0f:ae:84:a1:36:32:55:fb:75:19:83:78:
                    c5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BC:12:E1:49:57:8F:59:0E:19:9C:CA:2F:4E:3E:6D:AA:A5:3A:0E
            X509v3 Authority Key Identifier:
                keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/ULwS4UlXj1kOGZzKL04-baqlOg4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.251.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:9d:79:94:bd:90:fc:ac:de:91:58:98:00:27:1b:bd:4e:0f:
         6c:63:6f:c7:9b:dc:ce:c1:4f:3f:61:c8:be:01:d7:2d:f1:9e:
         47:42:b7:97:82:9c:7d:71:ad:9d:b7:1f:79:9d:e7:2c:ff:0f:
         60:b7:3b:a5:4c:36:8e:a7:ac:a0:ce:97:22:78:19:82:4a:be:
         39:03:03:bd:56:30:09:fe:4e:ad:dd:e6:f1:22:8d:2b:3b:e6:
         a0:6c:5e:cb:e1:6e:ff:44:65:af:0f:97:0f:d3:67:ce:e9:26:
         15:07:7f:f8:14:94:1d:be:8c:db:e6:62:88:3f:f1:3f:06:b0:
         0c:a2:0b:46:fe:38:cb:ed:6b:a0:ba:84:64:56:db:f7:19:f2:
         51:8f:db:73:7f:59:21:44:a2:4d:12:c0:26:c5:64:06:c8:5d:
         f0:59:c4:2f:96:1d:29:da:84:06:58:3b:3f:08:74:80:a5:d9:
         9d:d5:fe:75:3f:54:72:d7:74:b1:97:f7:e1:55:70:ad:1a:bf:
         fd:da:2f:8b:33:d9:6f:95:29:40:88:b0:4b:0c:24:2e:6c:bd:
         1b:d7:82:14:61:0e:b7:66:4c:a8:dd:00:fe:aa:2b:a7:3e:8f:
         cb:d1:92:8e:ac:c2:5a:8f:af:ea:a9:d8:d6:e2:54:0f:9b:18:
         e8:d2:5e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:57 2024 by rpki-client on console-ams.rpki-client.org