Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1-1BSFxSO7kmUO9Tf0MoRMsA9Su8.roa
File:                     1-1BSFxSO7kmUO9Tf0MoRMsA9Su8.roa (raw, json)
Hash identifier:          EAMuMWefmjiuMyiJc3wsRazPcau+Hj830iBUpXXsUAc=
Subject key identifier:   FB:50:52:17:14:8E:EE:49:94:3B:D4:DF:D0:CA:11:32:C0:3D:4A:EF
Certificate issuer:       /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial:       018BB51BC409F80460C4C1FBEBB1DB1EB9AB
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1-1BSFxSO7kmUO9Tf0MoRMsA9Su8.roa
Signing time:             Thu 09 Nov 2023 17:22:57 +0000
ROA not before:           Thu 09 Nov 2023 17:22:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16276
IP address blocks:        103.47.59.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:b5:1b:c4:09:f8:04:60:c4:c1:fb:eb:b1:db:1e:b9:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
        Validity
            Not Before: Nov  9 17:22:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fb505217148eee49943bd4dfd0ca1132c03d4aef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8f:cc:11:d0:17:db:02:23:91:36:d3:ec:de:
                    96:f9:cf:31:85:68:b8:f4:6c:3e:29:74:ea:7a:dd:
                    11:92:00:52:2b:55:a4:61:c7:c7:2c:6e:e4:f4:9d:
                    d3:34:ac:b5:f7:fa:5c:fb:13:90:b0:d9:45:cd:08:
                    8c:fa:2a:6b:51:e0:eb:20:57:e0:15:ed:64:65:1d:
                    3b:f8:4f:d1:c1:85:1e:32:92:47:1c:00:97:d9:65:
                    3d:da:7a:25:c4:6a:01:4d:fe:89:06:ab:8c:6f:c0:
                    b5:7a:37:c4:6b:04:4a:c7:48:2b:0b:11:dc:91:e5:
                    f5:f6:ff:c0:17:b1:cb:51:de:2c:5a:d4:ea:43:3b:
                    59:ab:16:52:6b:30:1d:58:3b:64:df:ec:1e:ea:fe:
                    9c:9a:0d:a3:63:21:02:58:43:33:4f:05:d3:cf:cc:
                    34:fb:80:ee:93:42:89:92:78:c5:12:70:74:64:0b:
                    cc:ac:9c:9e:b6:08:43:1d:0d:a3:b8:50:ba:97:e7:
                    77:68:36:e5:92:cc:1c:d8:07:eb:fd:45:64:59:87:
                    b4:5c:6e:2b:c7:80:61:7c:35:4f:d5:b6:2e:8e:3a:
                    43:78:d1:be:2e:ae:5a:4f:7d:17:95:fd:8c:d2:52:
                    75:ae:9b:2a:c6:95:7a:15:13:35:75:5a:01:69:0e:
                    99:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:50:52:17:14:8E:EE:49:94:3B:D4:DF:D0:CA:11:32:C0:3D:4A:EF
            X509v3 Authority Key Identifier:
                keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/1-1BSFxSO7kmUO9Tf0MoRMsA9Su8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.47.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:9b:72:25:63:84:55:69:15:c6:2e:07:ea:eb:a9:94:58:07:
         da:73:54:63:f5:da:23:4d:78:a0:b7:ca:64:b2:3a:9e:3c:35:
         c3:05:93:89:ef:06:45:8e:c7:16:40:9e:21:2a:5c:03:76:c1:
         7f:a6:68:a3:97:2b:df:b9:54:0e:35:d7:33:dd:90:aa:72:8b:
         67:e3:7f:e1:cb:a7:8b:87:06:12:04:85:6b:e4:25:9f:af:ce:
         4e:d2:7e:28:e6:48:2f:4f:6d:48:9f:ed:3f:fe:b4:25:5d:46:
         01:f3:e4:7b:f3:93:4e:7d:c5:5f:b1:7f:f9:e2:4b:eb:21:5b:
         5e:71:e1:60:9e:df:15:ba:a7:96:29:f6:3c:29:a9:7d:3d:eb:
         38:c6:21:3d:e4:13:66:a1:52:1d:30:4d:1c:02:3d:c4:b9:5b:
         e9:96:dc:b3:10:96:62:09:b2:f4:66:27:5c:5d:18:ce:fd:91:
         a3:d2:08:c9:61:44:cc:60:18:73:3d:32:67:f3:65:54:86:fc:
         93:81:83:87:86:3d:2e:61:54:97:33:00:0f:e2:61:67:1d:97:
         61:0e:fc:9a:bf:02:ad:4e:a3:34:4b:1f:2b:95:bd:bb:87:4e:
         11:e8:b4:61:1c:6b:98:b5:e4:e5:1a:36:ef:9a:02:cf:4c:da:
         f4:a2:b1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 6 20:14:34 2023 by rpki-client on console-ams.rpki-client.org