Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/_5RtKzW4pf0nCoTi8n1LOH6zIgU.roa
File:                     _5RtKzW4pf0nCoTi8n1LOH6zIgU.roa (raw, json)
Hash identifier:          ifto0VtPbJNonDYHfvXO2dS8IAXx6lqZ6zdZ5M95fOo=
Subject key identifier:   FF:94:6D:2B:35:B8:A5:FD:27:0A:84:E2:F2:7D:4B:38:7E:B3:22:05
Certificate issuer:       /CN=379cd67c0c18959239358553229e91f543cc5a5f
Certificate serial:       01856BEEB532FD6437C86D01702DD8744F2C
Authority key identifier: 37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/_5RtKzW4pf0nCoTi8n1LOH6zIgU.roa
Signing time:             Sun 01 Jan 2023 06:04:44 +0000
ROA not before:           Sun 01 Jan 2023 06:04:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6453
IP address blocks:        193.142.125.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:ee:b5:32:fd:64:37:c8:6d:01:70:2d:d8:74:4f:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=379cd67c0c18959239358553229e91f543cc5a5f
        Validity
            Not Before: Jan  1 06:04:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ff946d2b35b8a5fd270a84e2f27d4b387eb32205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d0:53:ca:2b:3d:38:99:4a:bb:25:77:de:1f:
                    b6:fe:b1:ab:d5:88:ce:72:21:08:5a:7b:53:75:f7:
                    b4:1b:d6:fe:e0:af:8b:08:c9:7a:ab:c6:1d:ee:82:
                    77:f2:f8:c1:3f:7f:9f:50:b2:f5:db:34:ad:2a:bb:
                    1a:e9:43:d9:9b:7c:71:55:c1:9e:e8:c7:f5:fd:e3:
                    e8:21:40:cb:30:f7:4c:c3:a8:9f:0e:e4:4e:3b:b6:
                    d6:12:6e:a3:eb:84:6e:d6:b7:c5:7e:e4:62:2a:69:
                    64:77:b6:d3:f6:41:0d:a7:bb:74:10:20:a3:c0:71:
                    cf:d6:86:45:c1:af:c0:53:e4:68:8a:67:18:f8:5f:
                    ea:12:03:e9:2c:3b:61:26:f8:1a:1e:1c:6e:e4:50:
                    9b:08:aa:29:ae:bb:2c:1e:ee:86:b1:38:ab:34:66:
                    f8:e1:2c:0e:b4:34:00:84:da:95:f7:8e:3f:cb:48:
                    65:48:e3:0a:03:55:ef:27:c1:86:15:a0:13:9c:56:
                    9c:d8:29:32:72:4d:fb:0c:d3:94:1d:84:4e:b9:b0:
                    1b:31:6a:b0:1b:7c:bf:0a:4d:f2:8e:ae:47:60:90:
                    a9:25:f5:40:98:67:dc:83:4e:43:c9:35:ec:e0:34:
                    43:6c:3c:b5:e8:3b:7f:90:ad:5d:dd:e7:bc:12:15:
                    07:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:94:6D:2B:35:B8:A5:FD:27:0A:84:E2:F2:7D:4B:38:7E:B3:22:05
            X509v3 Authority Key Identifier:
                keyid:37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/_5RtKzW4pf0nCoTi8n1LOH6zIgU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.142.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:05:c8:83:cd:d0:1c:cb:85:f1:fb:be:ba:bf:44:4a:31:1d:
         a7:0f:dc:36:46:eb:b0:9a:1b:e2:55:7b:01:c7:30:37:67:05:
         3e:e2:2f:61:b1:cd:88:33:e8:77:48:57:43:af:6b:b9:e8:61:
         15:7f:6f:a8:e9:2f:1f:2b:d5:96:9f:98:a5:b6:83:b9:1e:3a:
         6e:16:36:7d:7f:de:ca:80:c3:b8:c2:8b:ba:fc:bf:81:ea:f0:
         f8:83:bd:0b:01:e1:40:60:48:6b:fa:d5:3c:f4:f6:3d:bf:a2:
         09:80:fd:78:e0:5f:38:32:b1:05:9b:46:61:c1:76:3d:55:8d:
         35:99:e8:61:86:80:71:15:b4:bf:67:17:ce:24:91:a6:4b:c2:
         97:8d:b5:ff:2a:43:93:77:94:a1:75:0d:83:ed:c0:f1:65:9f:
         4d:9f:08:66:b2:e6:4b:9c:32:75:d8:4c:1a:f2:00:74:5e:ac:
         c1:c7:b3:10:9e:ac:5f:cc:c3:0b:cb:07:fc:05:28:7a:c4:b8:
         e5:d7:b5:0a:68:d4:6e:b6:cf:12:34:c7:44:a4:78:35:f4:e4:
         f6:66:b3:84:84:8a:eb:69:50:34:c3:d4:31:d7:6e:2a:f6:2e:
         5b:d2:a9:79:1f:2b:ae:2b:ee:f3:31:d0:1c:bc:da:44:45:52:
         01:32:1a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:57 2024 by rpki-client on console-ams.rpki-client.org