Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5f8cea-54ba-4965-a454-07a449a50f08/1/vCRSU-R1M4bm2JIftFJF94aet8k.roa
File:                     vCRSU-R1M4bm2JIftFJF94aet8k.roa (raw, json)
Hash identifier:          UXOjKrWIQ2N0e33C4DoIcqcNcSHUgK5XNhzSYzm7Xsg=
Subject key identifier:   BC:24:52:53:E4:75:33:86:E6:D8:92:1F:B4:52:45:F7:86:9E:B7:C9
Certificate issuer:       /CN=c5a82f3936f244edcb6013e121d51a7690d13599
Certificate serial:       018570B98CE5703846244CD58F5A2B29FA53
Authority key identifier: C5:A8:2F:39:36:F2:44:ED:CB:60:13:E1:21:D5:1A:76:90:D1:35:99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xagvOTbyRO3LYBPhIdUadpDRNZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/5f8cea-54ba-4965-a454-07a449a50f08/1/vCRSU-R1M4bm2JIftFJF94aet8k.roa
Signing time:             Mon 02 Jan 2023 04:24:46 +0000
ROA not before:           Mon 02 Jan 2023 04:24:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     20473
IP address blocks:        185.203.91.0/24 maxlen: 24
                          2a10:8c00::/32 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:b9:8c:e5:70:38:46:24:4c:d5:8f:5a:2b:29:fa:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5a82f3936f244edcb6013e121d51a7690d13599
        Validity
            Not Before: Jan  2 04:24:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bc245253e4753386e6d8921fb45245f7869eb7c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:04:cb:90:5d:91:d9:34:ab:85:b2:54:b2:5c:
                    91:48:d8:cb:1f:ee:15:0e:ed:d6:b8:58:63:bc:54:
                    0c:e1:e9:d6:41:fe:d1:03:47:ac:51:b7:16:ee:34:
                    e2:9a:7d:1a:5a:3f:fe:fd:b4:94:41:4b:3f:74:8c:
                    c8:4e:a7:b8:be:66:d1:10:21:73:30:e0:41:1a:cd:
                    2b:f3:d3:05:65:3b:13:4f:c1:e2:90:c8:9a:4f:3f:
                    1e:36:20:6f:7d:86:03:bb:d6:e5:6c:72:94:2b:37:
                    71:82:98:a2:98:40:24:53:8e:c1:d5:ff:bb:4f:8b:
                    dc:54:f3:f6:03:f6:cc:7d:e7:cd:93:75:e1:eb:d9:
                    43:c8:14:ab:17:a6:3c:fd:fb:7d:6f:ba:77:f2:55:
                    c6:be:2e:80:f5:a8:7f:d9:fd:fc:bc:91:4a:e2:6c:
                    77:01:78:97:14:59:2b:5e:49:7f:d0:43:ef:15:c8:
                    3b:3f:4e:98:c9:ca:91:a7:d8:e2:72:21:e4:84:c8:
                    9b:27:1a:fd:7e:2e:86:36:80:b3:b7:63:a5:cc:b9:
                    b8:ac:ed:ca:f5:f3:aa:99:4b:19:39:bb:c2:e4:62:
                    da:47:e2:d8:03:94:85:99:29:2d:52:d9:ac:88:d0:
                    17:14:51:b5:fc:08:26:48:43:79:60:40:92:1b:7c:
                    e5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:24:52:53:E4:75:33:86:E6:D8:92:1F:B4:52:45:F7:86:9E:B7:C9
            X509v3 Authority Key Identifier:
                keyid:C5:A8:2F:39:36:F2:44:ED:CB:60:13:E1:21:D5:1A:76:90:D1:35:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xagvOTbyRO3LYBPhIdUadpDRNZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5f8cea-54ba-4965-a454-07a449a50f08/1/vCRSU-R1M4bm2JIftFJF94aet8k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5f8cea-54ba-4965-a454-07a449a50f08/1/xagvOTbyRO3LYBPhIdUadpDRNZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.203.91.0/24
                IPv6:
                  2a10:8c00::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:2d:9f:a3:55:8a:53:d6:3f:c4:18:38:42:2c:dc:d1:dd:6e:
         74:28:33:28:15:36:dc:59:78:4b:32:40:99:07:06:0d:05:ef:
         0d:d4:f4:40:f8:66:f9:7f:61:6a:cb:36:f9:54:64:20:29:e9:
         7b:f6:a9:e8:40:6c:c9:7f:50:3b:e3:5c:04:c4:dd:ea:45:c3:
         0f:ab:77:c3:18:5f:a8:45:9f:5e:f1:25:a5:e5:e9:60:62:d0:
         11:88:2d:ab:98:9f:d7:eb:5a:56:6f:4a:95:76:83:6c:3f:81:
         ca:13:12:37:7a:80:74:ae:cc:d1:1a:f9:c6:aa:c5:0f:cf:a4:
         39:d9:1a:66:aa:bb:ca:5c:e4:a4:0d:cd:d2:55:f5:e1:f6:9e:
         5a:f0:d7:0f:40:3e:cc:38:47:0b:8a:e1:db:ef:c3:21:3c:87:
         3c:50:a0:65:5c:02:4f:0d:8a:47:d7:7c:27:2f:81:83:ad:86:
         b4:a7:a7:3d:f0:56:86:ba:cc:12:6e:b9:23:8b:91:d4:72:91:
         1c:b6:58:82:66:ec:9e:7c:54:25:0a:f5:f6:17:f4:82:41:4a:
         d5:ce:7c:b4:7b:73:86:ea:80:44:34:5d:8c:b0:26:18:19:f4:
         23:03:3e:40:16:68:4a:7e:87:e1:10:82:88:60:1a:47:02:f3:
         d7:a4:a1:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:54:22 2024 by rpki-client on console-ams.rpki-client.org