Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/SxlBA2H-dOrFgVlDw5XsjIrO-AM.roa
File:                     SxlBA2H-dOrFgVlDw5XsjIrO-AM.roa (raw, json)
Hash identifier:          am44GqZ0leLUCyqlaaGyen6nJ5HWYIwr981GE1w4nqo=
Subject key identifier:   4B:19:41:03:61:FE:74:EA:C5:81:59:43:C3:95:EC:8C:8A:CE:F8:03
Certificate issuer:       /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial:       018570707A57197A280069208CFA530FB4FC
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/SxlBA2H-dOrFgVlDw5XsjIrO-AM.roa
Signing time:             Mon 02 Jan 2023 03:04:57 +0000
ROA not before:           Mon 02 Jan 2023 03:04:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     63023
IP address blocks:        87.254.31.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:70:7a:57:19:7a:28:00:69:20:8c:fa:53:0f:b4:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
        Validity
            Not Before: Jan  2 03:04:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4b19410361fe74eac5815943c395ec8c8acef803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3f:9d:ff:57:ac:94:80:19:d3:75:a2:b6:c8:
                    a8:3e:ca:07:92:7c:45:af:b0:6d:1e:d5:cd:64:67:
                    fb:c6:0b:c3:b6:1d:5a:4c:1f:62:00:22:f4:6c:f6:
                    27:07:e3:59:e0:df:d6:e0:9f:0a:ea:ad:b2:ae:c6:
                    cd:1e:a4:98:db:e3:79:7c:ba:a7:13:a5:42:d6:ca:
                    4f:ca:4f:61:25:ac:05:fe:39:fd:68:0e:ea:fd:69:
                    47:dd:a7:ab:34:af:f8:c5:0c:ff:c2:65:57:6d:ae:
                    2f:ae:0e:b7:4d:f7:53:86:58:88:bc:22:da:06:99:
                    ed:d4:ec:53:47:fd:72:11:1a:a1:57:35:b5:b8:f1:
                    f8:12:5c:34:75:db:65:84:40:ef:37:58:03:35:94:
                    82:cd:24:ea:17:35:8c:3a:22:ff:45:a5:d9:f3:60:
                    45:3a:1c:6e:f5:a7:61:dd:c0:d7:04:00:c2:2d:12:
                    1f:6b:a5:cc:dd:4e:eb:94:ab:4f:99:e7:e2:78:38:
                    c7:2a:99:2c:fe:7e:70:29:76:10:05:9d:86:94:f7:
                    d5:85:76:bd:68:d4:dd:1c:8c:be:e0:4b:25:fb:39:
                    f8:35:b2:a6:fb:03:5b:d9:7a:5b:8b:49:6a:41:e8:
                    a4:50:7a:d8:09:32:84:58:e8:ae:a5:a3:4f:56:f9:
                    78:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:19:41:03:61:FE:74:EA:C5:81:59:43:C3:95:EC:8C:8A:CE:F8:03
            X509v3 Authority Key Identifier:
                keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/SxlBA2H-dOrFgVlDw5XsjIrO-AM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.254.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:8e:18:03:3e:86:be:98:71:eb:64:db:e2:93:fa:76:a3:1f:
         5d:dd:65:8b:f2:36:7b:39:88:08:02:0c:fe:ca:ed:7a:18:52:
         60:81:2c:aa:74:2d:d7:53:dd:f0:48:0f:ac:78:38:f7:03:71:
         31:8c:f0:10:de:6f:4b:62:a0:39:1d:19:4d:59:30:04:90:07:
         8e:fa:56:36:50:60:ce:ca:1d:6e:c8:e5:f7:62:ed:46:38:68:
         a3:cb:71:e3:b4:8b:80:f9:de:7c:ef:25:d7:b1:5f:9b:3f:4a:
         99:c0:30:ec:99:6a:8b:90:ce:0b:fc:01:12:e9:c5:6c:75:b6:
         a7:4f:e7:b9:5a:03:f2:97:22:20:71:93:47:ce:7c:d0:3b:26:
         15:c4:d9:69:60:d1:b5:67:f3:40:d4:ae:a6:2a:f8:42:a9:36:
         12:4e:0e:72:d0:97:39:13:88:4f:f1:64:d2:de:19:19:42:2d:
         16:df:32:a9:69:a5:85:70:d2:3f:58:c1:dc:38:62:d5:4a:76:
         0d:60:b9:2c:49:a8:58:1c:3c:20:e3:98:a1:a0:d8:1c:21:06:
         9b:94:9a:85:bb:3a:d1:be:ff:17:36:0c:85:e9:75:78:60:4f:
         2a:be:1f:ff:ad:17:94:dd:44:c6:31:4a:b4:71:e8:95:de:24:
         40:a0:e9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:48 2023 by rpki-client on console-fra.rpki-client.org