Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/5c0cc9-f761-4e7a-8155-ba9c371e0b66/1/Ubkrf1UI4rTVjs2mnZUfwoAM-Ow.roa
File:                     Ubkrf1UI4rTVjs2mnZUfwoAM-Ow.roa (raw, json)
Hash identifier:          bOM1Cv8qF1GPeaFAF1akgyQ4eidokwlAbmuANjwPQxY=
Subject key identifier:   51:B9:2B:7F:55:08:E2:B4:D5:8E:CD:A6:9D:95:1F:C2:80:0C:F8:EC
Certificate issuer:       /CN=0a2010093f10810b1b85724ea89e294fcdccfbf2
Certificate serial:       0188498C12DE9558C4513C20D8BC95C14E30
Authority key identifier: 0A:20:10:09:3F:10:81:0B:1B:85:72:4E:A8:9E:29:4F:CD:CC:FB:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CiAQCT8QgQsbhXJOqJ4pT83M-_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/5c0cc9-f761-4e7a-8155-ba9c371e0b66/1/Ubkrf1UI4rTVjs2mnZUfwoAM-Ow.roa
Signing time:             Tue 23 May 2023 16:58:16 +0000
ROA not before:           Tue 23 May 2023 16:58:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        46.31.64.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:49:8c:12:de:95:58:c4:51:3c:20:d8:bc:95:c1:4e:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a2010093f10810b1b85724ea89e294fcdccfbf2
        Validity
            Not Before: May 23 16:58:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=51b92b7f5508e2b4d58ecda69d951fc2800cf8ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c2:6d:f1:fc:f9:bc:8b:3d:2b:6a:66:69:ec:
                    41:ed:ca:8b:a9:6f:0b:84:df:c9:34:93:0b:e1:3d:
                    8a:9c:2e:f0:b5:be:c9:10:e3:68:38:0f:f7:26:b7:
                    7d:e5:18:ad:f1:17:fc:e1:75:41:c7:af:12:7b:69:
                    62:3b:1f:31:8f:c3:f8:26:cb:8a:c9:e1:37:87:9a:
                    6c:1d:49:b2:97:70:50:1e:33:e2:c4:71:88:29:f5:
                    a0:f0:78:bb:c1:35:af:80:5e:1f:43:37:3f:bb:37:
                    1e:ed:8f:93:f0:aa:8a:d5:53:81:6e:93:20:c0:e8:
                    9f:f5:81:45:91:9e:b5:08:ae:dd:66:3b:4d:b7:6e:
                    6a:49:68:40:f1:c1:bf:fe:1c:91:e8:a5:e5:fd:21:
                    23:93:5d:6e:86:0e:96:86:f4:6d:91:9c:62:3e:a2:
                    53:ab:6a:cf:b2:12:e1:10:55:97:fe:21:82:c9:0e:
                    7d:7e:e4:48:cb:89:99:a9:90:a8:af:27:82:ac:1c:
                    35:f2:a6:9c:e0:1d:c8:34:33:65:b2:af:6d:20:73:
                    d0:68:fd:54:e6:05:a2:f0:f8:16:ba:1a:5c:fc:52:
                    6a:b3:a1:8b:25:1f:e2:6f:1d:3d:79:4c:ce:5e:3b:
                    3f:15:a6:44:85:bf:03:13:66:a0:51:6a:c4:1d:e2:
                    40:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B9:2B:7F:55:08:E2:B4:D5:8E:CD:A6:9D:95:1F:C2:80:0C:F8:EC
            X509v3 Authority Key Identifier:
                keyid:0A:20:10:09:3F:10:81:0B:1B:85:72:4E:A8:9E:29:4F:CD:CC:FB:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiAQCT8QgQsbhXJOqJ4pT83M-_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5c0cc9-f761-4e7a-8155-ba9c371e0b66/1/Ubkrf1UI4rTVjs2mnZUfwoAM-Ow.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5c0cc9-f761-4e7a-8155-ba9c371e0b66/1/CiAQCT8QgQsbhXJOqJ4pT83M-_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.31.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:78:55:97:19:28:8d:99:0d:d4:6e:ac:4f:38:10:66:79:21:
         d5:a2:36:54:49:d7:b6:39:1a:b7:de:4a:be:2a:b8:e6:51:a3:
         dc:31:65:c5:a8:26:59:1c:7f:00:6c:69:ae:b7:76:eb:bf:ac:
         48:a3:eb:ec:e4:e2:df:80:b1:60:a6:0f:e0:66:ba:4d:81:a0:
         a1:77:3e:6f:eb:53:4c:4c:2b:71:be:02:54:3e:8e:af:19:97:
         1f:f2:57:ed:fb:d8:c5:f9:5c:7c:3d:0e:c0:7d:98:71:5e:2c:
         dc:ed:bc:94:b2:50:04:4b:1e:21:d5:ce:5f:1f:89:f4:e1:13:
         31:82:f2:74:16:82:fe:16:e4:9b:08:6f:05:fb:12:f0:f7:5f:
         5f:00:0a:96:e2:0c:28:90:64:1c:15:53:06:e7:4e:03:29:0b:
         90:2b:49:2e:98:78:02:4b:c9:4c:14:b5:16:f1:cb:98:80:b5:
         5d:c5:a1:44:06:5f:46:de:1f:32:89:2d:5a:9f:7c:89:8f:86:
         d6:8a:e2:e7:54:ed:92:56:bb:01:3e:e2:74:97:d9:28:fd:cf:
         b7:5a:74:2c:c8:c4:1f:2f:0c:20:cf:dd:f2:05:3d:fd:f2:75:
         9a:9c:c7:74:25:d4:e4:45:df:c8:f2:1d:2b:22:b0:e9:f7:22:
         2d:ec:15:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:16 2023 by rpki-client on console-fra.rpki-client.org