Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Bah8Fd5wjuWuRn-AA4IZDa8E0ys.roa
File:                     Bah8Fd5wjuWuRn-AA4IZDa8E0ys.roa (raw, json)
Hash identifier:          w6Ox+kMAlSO3T6+TMLJcDIl9FzCAQtGwjj7nydJRLDE=
Subject key identifier:   05:A8:7C:15:DE:70:8E:E5:AE:46:7F:80:03:82:19:0D:AF:04:D3:2B
Certificate issuer:       /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial:       0188A526531DCBBD835B49313F244AE9E7AE
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Bah8Fd5wjuWuRn-AA4IZDa8E0ys.roa
Signing time:             Sat 10 Jun 2023 11:52:12 +0000
ROA not before:           Sat 10 Jun 2023 11:52:12 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     24638
IP address blocks:        92.63.181.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:a5:26:53:1d:cb:bd:83:5b:49:31:3f:24:4a:e9:e7:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
        Validity
            Not Before: Jun 10 11:52:12 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=05a87c15de708ee5ae467f800382190daf04d32b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0b:ed:fb:f7:ed:86:40:6c:71:e1:cb:71:f3:
                    f9:f1:4d:1f:1a:0c:1c:4b:9b:13:b5:81:7d:db:e1:
                    bb:b6:c4:61:e6:55:a0:95:b5:7a:68:9f:6a:cf:c2:
                    b7:3c:7d:a7:76:8c:b8:8d:bd:eb:ba:f7:89:4b:b5:
                    e4:6c:ce:b5:37:49:a2:48:0c:85:1f:dc:d9:31:dc:
                    86:df:4c:84:c6:8e:97:1b:87:ef:12:2e:49:68:2b:
                    93:74:8f:22:20:be:0b:09:ac:90:ba:72:07:68:9a:
                    e8:66:2f:4c:d7:f6:7f:77:d7:9e:25:b8:a1:85:a0:
                    2a:1d:ef:23:03:dc:60:9a:2b:79:03:7a:64:dd:f2:
                    2b:3d:20:aa:51:2d:5a:e5:58:8c:35:16:9e:79:40:
                    97:3e:5b:39:a7:43:84:d3:02:01:69:c0:f2:88:f3:
                    e0:49:6a:49:57:13:2d:a4:c5:8f:8c:57:48:ad:48:
                    55:05:20:5b:59:16:cb:d0:30:a8:b1:0d:2b:f1:da:
                    85:d8:0f:3c:42:fe:3f:23:f7:5f:f4:be:2e:03:f9:
                    c5:8a:5e:39:d4:15:69:76:46:a5:f2:2c:62:db:2d:
                    e3:4b:34:e1:cc:ba:fb:53:21:29:aa:dc:27:44:27:
                    58:d5:5e:0e:73:36:7d:ac:b5:5c:d7:6b:45:6e:45:
                    83:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A8:7C:15:DE:70:8E:E5:AE:46:7F:80:03:82:19:0D:AF:04:D3:2B
            X509v3 Authority Key Identifier:
                keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Bah8Fd5wjuWuRn-AA4IZDa8E0ys.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.63.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:98:f5:36:a4:ed:b8:ec:58:9a:77:42:39:32:60:15:79:a8:
         d1:b7:30:2a:4f:b1:42:8f:1b:73:a5:4b:aa:ac:15:9c:cc:e4:
         1e:ea:2b:db:16:c7:2b:32:4f:b1:82:6b:3d:f0:58:73:64:b8:
         f7:00:69:bc:11:d9:58:96:df:52:cc:3a:f2:40:a3:d3:8c:0a:
         bf:7b:7f:14:0f:3c:9e:55:7e:25:b3:f8:83:9f:58:2a:d3:2c:
         51:fb:f9:08:1d:2a:db:f7:41:7f:c3:c1:e9:50:51:b0:c2:5a:
         f5:21:5e:5b:fc:b0:9f:f8:4f:6e:76:5b:5e:0b:a1:02:fa:50:
         97:84:ad:0b:01:89:0c:03:e3:23:59:4a:db:3d:a4:2c:39:d3:
         96:11:28:db:13:0d:89:55:e7:bf:37:16:3c:23:83:74:a1:26:
         28:6e:42:3c:46:07:d5:c4:99:a2:6a:71:80:6b:55:0c:e3:5a:
         5e:29:bf:2c:09:81:31:e7:65:08:f7:98:d6:f7:a6:1d:da:1c:
         cb:9e:7b:03:85:51:38:65:85:ea:76:15:67:e3:f8:62:3b:97:
         49:af:db:7e:44:90:b5:a6:ea:cd:d5:96:a1:d5:7d:85:12:2b:
         32:98:68:c3:3d:41:ad:d9:62:53:05:bd:55:e3:6a:1a:a1:ee:
         1b:b4:a1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:01 2023 by rpki-client on console-ams.rpki-client.org