Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/aSmH9yR0Q4r4yr1jdClsLL-6NGE.roa
File:                     aSmH9yR0Q4r4yr1jdClsLL-6NGE.roa (raw, json)
Hash identifier:          Hd0A6O/x/mkww8B3CQy9IaPDyDLxJn/cBbiy5h90NhE=
Subject key identifier:   69:29:87:F7:24:74:43:8A:F8:CA:BD:63:74:29:6C:2C:BF:BA:34:61
Certificate issuer:       /CN=12694f6945a21d08d30192cfc1a6b780de728e3b
Certificate serial:       0188E2F17C107DA6C4D3BC09D378A756C535
Authority key identifier: 12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/aSmH9yR0Q4r4yr1jdClsLL-6NGE.roa
Signing time:             Thu 22 Jun 2023 11:50:56 +0000
ROA not before:           Thu 22 Jun 2023 11:50:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35775
IP address blocks:        5.83.46.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e2:f1:7c:10:7d:a6:c4:d3:bc:09:d3:78:a7:56:c5:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12694f6945a21d08d30192cfc1a6b780de728e3b
        Validity
            Not Before: Jun 22 11:50:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=692987f72474438af8cabd6374296c2cbfba3461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:97:10:21:74:66:74:b6:dc:73:91:35:9b:b9:
                    aa:68:4b:e8:90:25:cb:96:5c:cb:3c:0d:e0:51:0c:
                    e6:ad:dc:a3:0c:48:1e:e9:fa:8b:c2:9f:18:a0:70:
                    d7:e1:a1:f4:30:55:ed:ea:ef:9e:4a:32:d6:7c:02:
                    c7:9e:85:7a:6a:66:eb:9f:de:58:f8:ce:c5:63:ea:
                    bc:ca:f4:95:79:a8:bf:fd:d6:25:34:90:ff:fd:20:
                    39:af:1d:6e:48:df:3d:f1:95:c3:4e:02:81:43:6d:
                    35:c2:2f:35:90:8e:59:72:a5:83:45:18:81:14:02:
                    87:c6:22:97:ca:3b:14:82:93:d3:40:29:a6:4f:d8:
                    ae:8b:18:9e:a4:08:1b:2d:34:d7:fc:dc:c1:10:f8:
                    a7:49:27:e8:e3:d8:06:cf:8b:ff:0a:34:f4:13:b0:
                    98:5b:6c:ee:5e:ee:e6:d9:6a:5f:23:ee:de:65:ea:
                    37:e5:a6:df:e4:e1:b0:40:aa:c8:01:c4:8b:03:b7:
                    49:eb:18:2c:f3:71:e8:b6:01:2d:f9:a6:b3:1d:8e:
                    b4:5d:24:0a:c8:2e:3c:30:7f:dd:ed:ad:72:b3:b6:
                    68:0f:12:59:50:8f:d0:1b:29:9f:88:e5:f9:30:6c:
                    ce:95:1b:98:66:e3:67:13:38:94:eb:0a:ce:db:0a:
                    56:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:29:87:F7:24:74:43:8A:F8:CA:BD:63:74:29:6C:2C:BF:BA:34:61
            X509v3 Authority Key Identifier:
                keyid:12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/aSmH9yR0Q4r4yr1jdClsLL-6NGE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.83.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:4b:a1:c1:90:d8:89:88:3e:be:37:6d:45:84:06:e0:8f:e4:
         da:e5:12:2d:b0:af:8a:0f:28:ed:69:2d:27:10:eb:75:32:45:
         4b:29:d0:fa:7f:2d:86:8c:b4:f8:69:96:8a:15:40:40:02:28:
         43:a0:1b:8a:48:a6:5b:dd:ec:bd:82:0e:22:19:98:bd:e0:3b:
         e1:d5:26:a7:b5:fa:a8:d5:ab:6c:27:55:9c:d5:d0:fb:4c:eb:
         22:3f:be:85:fa:c5:ed:a8:6d:51:95:39:56:99:93:d2:33:23:
         b2:5b:75:27:48:2c:6e:c0:ef:23:c2:7b:95:7c:70:e2:c4:8f:
         02:48:92:58:1d:f4:e2:c4:4c:42:b5:77:a9:a3:62:3c:88:c9:
         61:16:af:43:70:8f:11:d4:03:33:6d:21:db:e4:ee:76:3d:68:
         b2:82:8a:13:8b:dc:8f:dd:9c:ab:79:66:c6:e5:0b:e2:f2:8b:
         59:39:ca:00:10:12:c4:c4:9a:d2:44:cf:cd:77:c3:64:8b:89:
         95:b0:94:7c:c6:34:19:73:de:12:b1:0d:bc:c9:c3:1e:cf:9a:
         0d:2e:09:97:f1:81:ce:68:41:45:43:4d:ea:cf:14:86:f2:ce:
         6a:b7:1d:ef:b1:96:d8:ef:fa:df:fb:13:9b:93:60:f9:a4:59:
         d2:b8:41:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:32 2024 by rpki-client on console-ams.rpki-client.org