Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/Jj_kzCN6pj4PjA0blh6JfoJ_Amg.roa
File:                     Jj_kzCN6pj4PjA0blh6JfoJ_Amg.roa (raw, json)
Hash identifier:          +whLXHquOuo1MAzlcg72dG+bIrUaChPJlVp9H2JRQAw=
Subject key identifier:   26:3F:E4:CC:23:7A:A6:3E:0F:8C:0D:1B:96:1E:89:7E:82:7F:02:68
Certificate issuer:       /CN=5833294a1cdc1358afc439c0a72733b065a86f8b
Certificate serial:       0186C289C1E415C3041C3B282BEDDA88C208
Authority key identifier: 58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/Jj_kzCN6pj4PjA0blh6JfoJ_Amg.roa
Signing time:             Wed 08 Mar 2023 18:44:13 +0000
ROA not before:           Wed 08 Mar 2023 18:44:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49352
IP address blocks:        213.189.195.0/24 maxlen: 24
                          213.189.199.0/24 maxlen: 24
                          213.189.194.0/24 maxlen: 24
                          188.93.213.0/24 maxlen: 24
                          188.93.208.0/23 maxlen: 23
                          188.93.215.0/24 maxlen: 24
                          188.93.214.0/24 maxlen: 24
                          178.21.14.0/23 maxlen: 23
                          178.21.13.0/24 maxlen: 24
                          178.21.12.0/22 maxlen: 22
                          178.21.12.0/24 maxlen: 24
                          185.38.16.0/24 maxlen: 24
                          185.38.17.0/24 maxlen: 24
                          185.38.18.0/24 maxlen: 24
                          185.38.19.0/24 maxlen: 24
                          194.67.64.0/24 maxlen: 24
                          194.67.75.0/24 maxlen: 24
                          194.67.76.0/23 maxlen: 23
                          176.99.4.0/24 maxlen: 24
                          176.99.9.0/24 maxlen: 24
                          176.99.5.0/24 maxlen: 24
                          176.99.7.0/24 maxlen: 24
                          176.99.8.0/24 maxlen: 24
                          176.99.6.0/24 maxlen: 24
                          176.99.5.190/32 maxlen: 32
                          188.93.209.127/32 maxlen: 32
                          194.67.106.0/24 maxlen: 24
                          188.93.208.172/32 maxlen: 32
                          178.21.9.0/24 maxlen: 24
                          62.113.93.0/24 maxlen: 24
                          2a02:f20::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:c2:89:c1:e4:15:c3:04:1c:3b:28:2b:ed:da:88:c2:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5833294a1cdc1358afc439c0a72733b065a86f8b
        Validity
            Not Before: Mar  8 18:44:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=263fe4cc237aa63e0f8c0d1b961e897e827f0268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a0:72:f2:cb:29:9d:a9:cd:df:a1:e1:bc:1b:
                    f3:84:bf:e0:d2:e8:93:46:ab:38:37:e0:85:14:29:
                    dc:df:88:49:03:b8:b8:d7:20:d5:b6:6f:1c:58:8f:
                    86:4a:18:e5:88:37:fb:a9:cb:cf:ec:6a:43:36:cd:
                    f8:17:39:15:1b:15:3d:03:d4:76:d0:60:7b:7a:01:
                    d9:1a:e6:09:ec:de:67:f0:48:e9:d8:45:69:92:07:
                    78:92:26:f5:3c:4b:21:63:11:cc:f0:3b:d7:58:90:
                    95:13:dc:fd:ab:11:69:be:75:1e:30:46:ef:ee:dc:
                    9b:06:c1:d9:2b:0c:7b:2e:c5:ee:75:3c:40:2c:d0:
                    cd:04:c2:34:e8:dc:0e:d0:d2:ba:0f:66:0a:7c:7f:
                    ed:2e:29:85:77:2d:4e:10:bc:02:24:53:73:38:45:
                    58:0f:8a:e0:ae:3e:97:45:06:f5:77:b4:4d:9f:bf:
                    24:88:56:64:8f:18:39:26:a0:2e:df:35:2b:26:72:
                    0c:64:19:7e:bb:7f:1a:81:2b:78:a6:29:d2:76:13:
                    37:ec:b3:3a:cd:80:fa:c7:1e:a1:7b:7c:a3:46:26:
                    32:20:e0:62:b2:38:19:67:84:c1:dd:38:f0:bf:cf:
                    b9:35:5f:02:9d:09:39:b5:ec:e2:1b:03:5f:5b:fc:
                    28:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:3F:E4:CC:23:7A:A6:3E:0F:8C:0D:1B:96:1E:89:7E:82:7F:02:68
            X509v3 Authority Key Identifier:
                keyid:58:33:29:4A:1C:DC:13:58:AF:C4:39:C0:A7:27:33:B0:65:A8:6F:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WDMpShzcE1ivxDnApyczsGWob4s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/Jj_kzCN6pj4PjA0blh6JfoJ_Amg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/4b419c-cf8f-4c9a-94d7-bb4b65b6a0d1/1/WDMpShzcE1ivxDnApyczsGWob4s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.113.93.0/24
                  176.99.4.0-176.99.9.255
                  178.21.9.0/24
                  178.21.12.0/22
                  185.38.16.0/22
                  188.93.208.0/23
                  188.93.213.0-188.93.215.255
                  194.67.64.0/24
                  194.67.75.0-194.67.77.255
                  194.67.106.0/24
                  213.189.194.0/23
                  213.189.199.0/24
                IPv6:
                  2a02:f20::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:79:5a:d2:f7:9e:5f:35:6c:73:9d:d9:11:af:7e:f3:43:47:
         20:42:fc:08:43:b3:bb:ce:73:53:bd:10:ac:87:a0:8d:70:5c:
         e9:9f:24:52:29:b5:aa:b1:a7:4c:b6:fb:19:fb:2d:d3:c5:1e:
         08:dd:a0:81:ae:62:6b:8f:e4:d2:8b:8f:4a:6d:8c:2b:b2:c9:
         4a:bc:4c:9f:66:01:1c:46:70:49:dd:0c:d0:cd:94:26:6b:06:
         36:48:2c:52:54:2d:bc:fe:9d:44:60:9c:fa:15:18:5f:1e:ea:
         65:09:0b:ee:78:14:21:19:ea:37:82:4d:8d:53:73:ef:27:74:
         06:5a:e7:e3:4c:f9:30:c6:8f:a3:c5:67:91:88:12:f2:8a:f3:
         b5:0e:a2:60:71:e5:5c:11:a2:73:f7:7c:08:3b:69:72:12:ca:
         08:40:94:bf:f8:f3:bd:bf:0c:85:f9:01:69:6e:83:f1:f3:f4:
         58:e3:10:cd:88:a7:6c:20:bf:68:aa:fa:de:0c:34:5b:70:76:
         17:95:04:5d:8b:17:4e:2c:52:56:c5:f3:e6:f1:22:d5:b2:8e:
         06:f0:76:f8:00:a5:00:68:b6:62:e8:24:48:3d:fc:0a:e1:93:
         16:40:d9:66:aa:63:4d:73:8d:08:6d:89:c1:da:c0:99:75:58:
         40:96:6f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:10 2023 by rpki-client on console-ams.rpki-client.org