Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/p6d9HfcuFg4M0iT0RsXrNph8npQ.roa
File:                     p6d9HfcuFg4M0iT0RsXrNph8npQ.roa (raw, json)
Hash identifier:          6JlJm3SN/Id06J/iFPY9975OhIIg4tTOzbimvWPkoJY=
Subject key identifier:   A7:A7:7D:1D:F7:2E:16:0E:0C:D2:24:F4:46:C5:EB:36:98:7C:9E:94
Certificate issuer:       /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial:       01865A9E6DD5B878C043B24677D8E95F9F04
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/p6d9HfcuFg4M0iT0RsXrNph8npQ.roa
Signing time:             Thu 16 Feb 2023 14:26:17 +0000
ROA not before:           Thu 16 Feb 2023 14:26:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     205331
IP address blocks:        5.104.183.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:5a:9e:6d:d5:b8:78:c0:43:b2:46:77:d8:e9:5f:9f:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
        Validity
            Not Before: Feb 16 14:26:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a7a77d1df72e160e0cd224f446c5eb36987c9e94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a4:3a:65:71:8b:12:28:08:8b:3b:50:5a:c1:
                    44:9b:82:9e:83:64:75:1d:34:70:93:24:5e:85:33:
                    6e:be:0d:3a:37:1e:f8:59:fd:4a:8b:d2:ca:61:7f:
                    ec:1e:e2:20:c6:84:8f:78:53:e1:d2:77:ff:24:af:
                    62:3c:ab:09:01:f9:f8:7c:54:c0:3f:27:73:4a:93:
                    b4:ff:51:e8:61:a8:64:a4:35:63:ff:4c:d6:dd:81:
                    92:01:73:52:bf:0b:06:95:62:63:f3:21:e7:34:7a:
                    be:45:e4:f2:28:58:91:ca:2d:09:49:4e:86:5c:b9:
                    44:86:6c:b6:9f:0b:a5:6b:f7:96:85:0c:81:e0:63:
                    36:ef:ab:c3:eb:16:1d:3a:36:14:d8:00:35:53:b2:
                    97:12:31:51:d6:2b:83:67:7e:be:b1:4a:f0:e4:1f:
                    2c:d2:d4:77:ea:4b:1f:21:cd:76:7f:a6:96:5b:0c:
                    02:67:46:6c:2a:dc:22:a3:ff:16:ec:c8:ac:2d:e9:
                    e3:db:de:e5:f5:bc:a0:8a:69:ef:ce:9c:95:47:54:
                    cd:f0:a4:3f:ff:fa:e0:19:b5:2d:e1:cd:24:57:96:
                    52:51:c4:9b:35:df:e2:a0:f9:94:7e:5d:c8:d0:1f:
                    15:ab:ac:ad:c9:df:40:de:21:65:1a:a3:66:8c:87:
                    7e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A7:7D:1D:F7:2E:16:0E:0C:D2:24:F4:46:C5:EB:36:98:7C:9E:94
            X509v3 Authority Key Identifier:
                keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/p6d9HfcuFg4M0iT0RsXrNph8npQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.104.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:2e:8a:b0:f1:18:c7:eb:b4:93:65:1d:22:a5:d9:f8:8b:33:
         44:eb:d1:d6:ca:5d:1e:53:f0:93:fd:c2:0f:5b:46:d1:b8:52:
         58:6b:6b:08:7f:b0:07:c9:4b:7c:bf:54:38:a9:2b:3e:c1:e7:
         bd:e9:1b:e1:bc:c1:f3:4c:f3:0d:89:e5:65:8e:b4:02:19:8b:
         ff:a0:b8:bd:d6:31:ae:c1:28:63:b9:54:e2:4d:34:d5:34:a0:
         3f:89:0e:2b:bc:8b:2e:7f:36:c3:e1:81:4c:2a:f8:3b:d0:3b:
         b0:cb:24:c4:37:29:0f:1a:60:4a:87:46:b8:fb:eb:53:af:47:
         08:f6:e9:24:ca:d3:78:07:f1:e9:1a:b5:7f:4a:2b:ec:78:f8:
         85:67:9e:bc:34:db:d8:fa:4d:73:28:d3:5d:f9:b4:8c:5c:5f:
         f3:a9:73:3d:d0:62:5c:9c:66:a1:17:8a:3e:3e:aa:84:d0:2c:
         bd:42:2b:c8:b8:6d:b9:2d:ae:6a:1a:fc:30:fb:20:e3:14:cf:
         2d:f5:29:bf:90:9e:06:bb:2f:38:ca:b7:1e:86:d9:52:11:90:
         4d:ad:53:4d:bf:4f:01:bc:fe:a7:2c:b3:c6:35:cd:4d:4c:fa:
         3f:ba:0e:b0:ca:38:42:07:50:0c:49:91:67:93:bd:51:85:30:
         a7:47:3e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:29 2023 by rpki-client on console-fra.rpki-client.org