Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a5c6ec-9f81-4322-8239-ef434b1fac0e/1/uDeCKa_e-PU6Mi-l30a7iJtzC-k.roa
File:                     uDeCKa_e-PU6Mi-l30a7iJtzC-k.roa (raw, json)
Hash identifier:          nW0sRrRQc7F7lMPMnIrzYeD2up0v5Eg9iJiLmEUkM0s=
Subject key identifier:   B8:37:82:29:AF:DE:F8:F5:3A:32:2F:A5:DF:46:BB:88:9B:73:0B:E9
Certificate issuer:       /CN=21db69b104ba7c7f912cd725916bf47dd8bb0367
Certificate serial:       01856EA6A1C59A21ADB980B72AAA122136A2
Authority key identifier: 21:DB:69:B1:04:BA:7C:7F:91:2C:D7:25:91:6B:F4:7D:D8:BB:03:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IdtpsQS6fH-RLNclkWv0fdi7A2c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/a5c6ec-9f81-4322-8239-ef434b1fac0e/1/uDeCKa_e-PU6Mi-l30a7iJtzC-k.roa
Signing time:             Sun 01 Jan 2023 18:44:52 +0000
ROA not before:           Sun 01 Jan 2023 18:44:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     18254
IP address blocks:        93.93.247.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:a6:a1:c5:9a:21:ad:b9:80:b7:2a:aa:12:21:36:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21db69b104ba7c7f912cd725916bf47dd8bb0367
        Validity
            Not Before: Jan  1 18:44:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b8378229afdef8f53a322fa5df46bb889b730be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:17:77:c8:26:b4:51:46:eb:52:88:a3:42:15:
                    46:eb:d2:ca:ea:e8:d4:3f:7c:85:bf:23:b4:70:7d:
                    eb:79:25:e6:dd:6a:d8:9e:95:c2:97:7f:05:4a:96:
                    b9:96:b0:bb:b4:e0:bb:73:30:f3:3d:74:47:00:4e:
                    55:e4:30:9b:48:7a:4e:38:bb:5f:b7:5c:84:3e:dc:
                    5a:4c:ec:5d:d5:71:51:cb:c1:71:21:8b:84:72:7b:
                    84:46:37:dc:cd:e6:b9:81:92:21:88:8f:01:f7:56:
                    71:2d:a1:2d:f5:43:3c:b1:9e:2c:2d:12:3c:d3:3d:
                    5d:e0:58:a6:3e:b5:4e:0a:2f:d8:28:e1:59:f9:53:
                    56:19:5f:d5:9f:26:be:01:65:24:31:e8:1e:dd:6e:
                    28:c5:db:e9:22:ca:df:a5:3d:8c:c2:51:20:70:d9:
                    71:83:39:f9:2b:11:bd:22:37:48:b0:24:a2:78:e0:
                    c4:fd:94:76:fb:66:51:40:f7:87:a2:a9:4e:11:30:
                    3c:59:f9:90:e6:a9:6e:c6:7f:ba:a6:0d:74:e5:05:
                    12:3d:4e:fb:d1:c2:68:ff:bd:7a:0c:85:f3:99:58:
                    38:19:ce:e8:55:26:99:57:99:ef:96:30:cc:17:8f:
                    9d:9d:1f:a6:7a:5f:7e:a0:7c:ee:2a:e4:09:07:b2:
                    d0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:37:82:29:AF:DE:F8:F5:3A:32:2F:A5:DF:46:BB:88:9B:73:0B:E9
            X509v3 Authority Key Identifier:
                keyid:21:DB:69:B1:04:BA:7C:7F:91:2C:D7:25:91:6B:F4:7D:D8:BB:03:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IdtpsQS6fH-RLNclkWv0fdi7A2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a5c6ec-9f81-4322-8239-ef434b1fac0e/1/uDeCKa_e-PU6Mi-l30a7iJtzC-k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a5c6ec-9f81-4322-8239-ef434b1fac0e/1/IdtpsQS6fH-RLNclkWv0fdi7A2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.93.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:de:ab:8f:77:58:1a:ec:00:6d:5b:ce:db:03:e5:c0:d1:14:
         76:4e:45:45:92:cd:0a:fd:7a:33:1e:87:55:33:08:da:97:7c:
         74:55:d4:37:ab:e5:dc:ce:6f:06:4e:0d:00:17:64:ac:a1:0c:
         8e:aa:44:2d:85:70:b2:0f:e7:66:48:20:7a:b1:ae:90:72:5e:
         32:33:59:f6:09:8e:17:33:42:be:44:3a:47:0b:d7:7d:80:85:
         04:79:79:5b:b6:ef:3b:c8:cd:90:a2:72:84:15:e3:f2:44:33:
         37:1d:fc:a2:5f:00:3c:2a:96:c9:64:9a:40:53:be:a1:b4:58:
         49:3c:7c:07:48:cd:26:70:b2:7b:0e:ed:1a:f7:f4:b0:03:2c:
         08:4a:4c:d5:8c:7b:aa:2b:79:77:cb:02:04:e7:d4:a2:e8:fd:
         25:6a:45:51:0d:59:ca:09:04:a5:c6:41:07:70:79:0e:ed:9e:
         ef:ea:e6:1a:d4:4d:13:87:20:b7:31:86:b9:e5:1a:96:1e:bd:
         c3:c5:e2:76:1f:ad:9e:fb:81:72:80:16:57:7d:f3:30:8f:f1:
         85:37:9e:a6:31:73:2d:dd:3d:2a:b8:01:72:9e:43:73:7d:8e:
         bb:49:c6:39:34:4d:50:77:9d:60:00:e4:a8:a2:7c:26:58:54:
         04:73:09:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:05 2023 by rpki-client on console-ams.rpki-client.org