Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/AEM0BVJ-B7RiiZQXm-uJotmMBVo.roa
File:                     AEM0BVJ-B7RiiZQXm-uJotmMBVo.roa (raw, json)
Hash identifier:          N0mqvETZRRh3u6QxRx3eJj+9FRjr5wK+EKohob8uEmg=
Subject key identifier:   00:43:34:05:52:7E:07:B4:62:89:94:17:9B:EB:89:A2:D9:8C:05:5A
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       0186FED6AE71429F866F595553C5000D64B1
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/AEM0BVJ-B7RiiZQXm-uJotmMBVo.roa
Signing time:             Mon 20 Mar 2023 11:45:27 +0000
ROA not before:           Mon 20 Mar 2023 11:45:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60721
IP address blocks:        83.147.25.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:fe:d6:ae:71:42:9f:86:6f:59:55:53:c5:00:0d:64:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Mar 20 11:45:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=00433405527e07b4628994179beb89a2d98c055a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a0:94:1a:a7:a7:a5:73:0a:f8:13:a1:76:76:
                    17:c0:09:40:6f:58:33:7e:81:e4:57:57:8e:26:cb:
                    bc:f9:13:36:27:ec:44:a3:f6:a3:9f:e7:44:48:38:
                    65:41:ec:27:3f:ae:34:83:59:8c:73:4f:05:75:9d:
                    f8:64:fb:11:3d:3a:7b:fc:b9:6e:da:bf:aa:18:0f:
                    9e:73:ca:ad:cb:b4:75:99:48:87:0f:8c:e7:fb:1c:
                    4f:23:09:d1:17:2d:f9:df:4b:52:7f:3b:ec:12:fe:
                    26:a6:50:f3:1f:22:3f:de:c2:ee:dc:e6:28:f0:5f:
                    45:5b:74:b1:5b:ef:d1:8d:2a:c9:7c:a1:58:e2:22:
                    31:40:28:49:b2:41:2f:6a:e4:31:0b:54:13:d1:8a:
                    05:e6:d6:3f:a4:51:f2:82:39:7f:d6:eb:00:1d:23:
                    05:b7:9a:d0:26:f2:87:79:3d:60:54:a5:8b:6e:a5:
                    d5:ec:70:51:33:38:c4:14:d9:67:32:6d:87:00:2a:
                    35:c4:4b:f3:d8:44:2b:b5:bb:b3:05:2f:46:7f:f8:
                    d8:cb:80:02:15:8e:4b:d5:e6:d5:30:8f:58:7b:5c:
                    98:a1:2c:14:4a:6e:38:30:4b:fe:6f:94:c5:95:24:
                    38:14:5b:0e:1f:3a:69:f1:1d:70:ce:a9:49:f2:a3:
                    28:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:43:34:05:52:7E:07:B4:62:89:94:17:9B:EB:89:A2:D9:8C:05:5A
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/AEM0BVJ-B7RiiZQXm-uJotmMBVo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:01:e8:c2:b0:dc:a3:85:38:87:c3:23:2d:ab:e7:21:fc:d3:
         69:3a:83:d2:29:5a:5b:20:47:01:66:5a:73:43:9a:5e:de:c0:
         11:19:69:6e:fe:ec:b5:48:1e:60:37:88:71:5e:9a:86:1c:ad:
         12:07:d6:86:d2:b7:64:af:1d:5b:2b:53:ec:2d:85:7b:75:20:
         89:c9:f3:91:51:90:16:4a:9e:99:b8:9b:ea:42:24:b7:18:c6:
         56:24:dd:54:a0:ef:bb:c4:da:00:98:ed:14:29:51:92:02:35:
         1b:ff:e5:38:4b:6d:89:79:a7:26:70:6c:8b:4d:27:35:fd:7a:
         54:d1:fa:d3:9b:81:d6:c4:42:07:8d:55:bf:21:47:e2:d2:4c:
         66:74:e1:ed:de:83:36:1a:1a:6d:fa:9a:4c:ce:c8:d9:6a:9f:
         4f:c8:a3:e0:2a:24:29:8e:7a:20:0b:4c:3d:0d:ea:f5:51:c5:
         91:01:2e:64:0e:7c:66:f2:82:50:29:1d:c1:09:0c:21:aa:8c:
         de:58:75:39:e0:92:da:64:84:3b:12:a9:7b:f3:ee:aa:23:26:
         cb:0f:8d:9e:1c:d2:4e:99:ec:ea:62:bd:05:d3:b3:2b:91:9a:
         4f:cc:8f:09:bc:9d:fc:f9:ff:67:c1:87:3f:3b:0b:e2:26:60:
         ec:01:2f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:32 2023 by rpki-client on console-ams.rpki-client.org