Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/cd63ea-faa9-404e-9f57-0dae0d653e38/1/6_G15sJwUg7fK6ltJ8JDv4WrER8.roa
File:                     6_G15sJwUg7fK6ltJ8JDv4WrER8.roa (raw, json)
Hash identifier:          03/pEm4/+MKkAqY+MJGqxC5m+HvSO1F/sf6lcG22vOY=
Subject key identifier:   EB:F1:B5:E6:C2:70:52:0E:DF:2B:A9:6D:27:C2:43:BF:85:AB:11:1F
Certificate issuer:       /CN=07f5ccf6abd7582cc51940a76f99505633982bb4
Certificate serial:       018570A72C4B7A47921B963E4CDEADF94524
Authority key identifier: 07:F5:CC:F6:AB:D7:58:2C:C5:19:40:A7:6F:99:50:56:33:98:2B:B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_XM9qvXWCzFGUCnb5lQVjOYK7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/cd63ea-faa9-404e-9f57-0dae0d653e38/1/6_G15sJwUg7fK6ltJ8JDv4WrER8.roa
Signing time:             Mon 02 Jan 2023 04:04:42 +0000
ROA not before:           Mon 02 Jan 2023 04:04:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        217.114.39.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:a7:2c:4b:7a:47:92:1b:96:3e:4c:de:ad:f9:45:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07f5ccf6abd7582cc51940a76f99505633982bb4
        Validity
            Not Before: Jan  2 04:04:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ebf1b5e6c270520edf2ba96d27c243bf85ab111f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:47:f0:ee:7d:ed:b5:42:7a:6e:44:63:71:4a:
                    c3:c4:42:bd:0e:4f:56:4c:a6:90:89:74:5d:98:6b:
                    b6:ff:25:b9:cb:92:e4:de:cd:2a:19:f9:9f:d1:30:
                    bf:f7:b2:d3:9f:f9:9c:62:81:de:d0:ab:08:bd:5b:
                    b7:19:4f:d6:4a:ed:c3:1f:3b:4b:4b:15:67:54:f0:
                    f1:13:79:31:1a:95:f7:2f:d3:f3:ff:10:c8:01:5c:
                    3e:9b:f4:37:a3:9b:7f:95:20:3a:5a:13:a3:d3:e5:
                    8c:11:f9:3d:69:1d:1f:49:89:1a:f9:8b:3c:6d:93:
                    8e:41:0c:e5:da:f1:d6:cd:3e:58:d3:83:f8:98:e2:
                    e5:b1:70:78:4e:c5:c3:27:3c:c3:30:64:0e:b1:97:
                    9a:26:6b:09:64:bb:3b:05:10:5f:1a:6c:7b:1b:0d:
                    ac:32:60:ad:ed:45:d7:ab:48:bf:71:fb:80:80:ef:
                    df:e1:82:36:8c:74:48:49:08:31:c7:c1:ad:87:6c:
                    c0:4c:25:74:9b:bc:9d:60:55:62:d1:ec:6a:ab:5c:
                    15:80:ac:e2:19:53:43:9a:3f:a3:69:b9:72:93:91:
                    fc:22:d3:e7:99:e4:5c:0b:b9:ab:53:c6:11:8a:7f:
                    29:14:1e:69:93:7f:99:f5:ea:ca:8d:91:ec:ba:b1:
                    bf:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F1:B5:E6:C2:70:52:0E:DF:2B:A9:6D:27:C2:43:BF:85:AB:11:1F
            X509v3 Authority Key Identifier:
                keyid:07:F5:CC:F6:AB:D7:58:2C:C5:19:40:A7:6F:99:50:56:33:98:2B:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_XM9qvXWCzFGUCnb5lQVjOYK7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/cd63ea-faa9-404e-9f57-0dae0d653e38/1/6_G15sJwUg7fK6ltJ8JDv4WrER8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/cd63ea-faa9-404e-9f57-0dae0d653e38/1/B_XM9qvXWCzFGUCnb5lQVjOYK7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.114.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:b4:48:e7:73:43:02:74:3c:af:e5:5e:a5:67:c7:02:80:0b:
         f6:ef:d0:6e:1f:0e:8e:9c:2c:8a:e1:d2:3a:09:0f:5a:9e:13:
         93:4b:0e:be:25:6f:ac:bf:d7:21:32:4f:dc:18:af:4a:0c:65:
         8e:ac:3c:eb:6e:55:54:d5:b7:4c:a9:c2:fb:84:7e:ce:51:16:
         41:85:a2:00:b7:55:d2:c3:f3:06:8b:73:31:7b:c1:57:ce:38:
         67:d2:32:b7:a2:ab:8a:78:e0:0d:19:a9:4b:94:ae:8a:66:51:
         05:ee:d2:83:bc:b6:51:52:65:b5:93:aa:6c:f2:c8:0a:09:a9:
         2b:9b:53:25:4c:42:4a:cf:d7:bc:16:57:84:f1:f3:74:92:3d:
         91:61:73:30:08:00:ed:e8:2a:d9:d4:ec:38:8a:14:d3:bf:51:
         10:30:5b:09:b5:41:17:c0:81:fc:21:c2:60:de:ac:df:1a:6b:
         a6:1a:9c:bf:a2:74:dc:c1:7d:4c:5c:ed:56:7f:af:09:af:bf:
         d7:cc:bd:45:46:40:17:e8:08:bf:39:a6:c8:53:db:12:d2:a1:
         55:06:17:cf:a9:85:51:59:4c:f3:72:9d:8d:74:37:7c:d5:b5:
         73:32:4d:66:0c:ff:31:f3:6a:35:fd:61:49:cc:bd:5d:cb:82:
         b6:01:3d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:48 2023 by rpki-client on console-ams.rpki-client.org