Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/rLjCE6mNXQNoZ814-GH12u7fh24.roa
File:                     rLjCE6mNXQNoZ814-GH12u7fh24.roa (raw, json)
Hash identifier:          AOelhxIIcRbeOos0HamFXt28MYoXbK/XZ89akWeOm5g=
Subject key identifier:   AC:B8:C2:13:A9:8D:5D:03:68:67:CD:78:F8:61:F5:DA:EE:DF:87:6E
Certificate issuer:       /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial:       01856F022902AE686307F2468E639CC8C499
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/rLjCE6mNXQNoZ814-GH12u7fh24.roa
Signing time:             Sun 01 Jan 2023 20:24:50 +0000
ROA not before:           Sun 01 Jan 2023 20:24:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     56913
IP address blocks:        188.240.83.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:02:29:02:ae:68:63:07:f2:46:8e:63:9c:c8:c4:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
        Validity
            Not Before: Jan  1 20:24:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=acb8c213a98d5d036867cd78f861f5daeedf876e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1d:c6:6c:05:d2:ed:6f:97:b1:c9:28:43:49:
                    51:13:f2:81:4b:a5:e4:b1:51:18:f3:9d:38:36:f9:
                    8c:58:3d:d8:36:7b:0c:57:d1:a4:55:52:33:d7:f5:
                    8c:4d:0b:6d:e4:55:b8:b6:48:fe:2d:63:1e:19:0f:
                    3d:52:02:9d:7d:b7:67:c0:bf:53:8f:0d:7e:87:63:
                    c4:df:7b:96:86:3c:db:4e:31:5c:a7:16:dc:cb:ef:
                    df:61:f1:79:32:8b:f9:c4:f3:03:d4:2d:7c:1b:3c:
                    02:28:97:ca:af:38:e3:58:a1:55:1f:91:7e:b9:80:
                    f0:dc:91:65:6a:04:54:c5:c3:e2:88:0b:ea:b9:a9:
                    1e:e3:6d:46:4f:77:d5:19:67:9b:55:c0:ee:2c:34:
                    b3:eb:ff:5d:d6:50:32:c4:ad:15:aa:3f:28:e6:ca:
                    20:8d:35:a4:e9:22:6a:c2:6e:98:42:d6:40:7a:fc:
                    5b:e5:01:20:08:d2:33:3f:e5:48:86:6b:7d:b4:ea:
                    88:b1:35:7a:dc:a2:74:a6:ab:fb:18:4e:61:c2:ba:
                    73:77:81:a9:43:b0:e2:ff:6e:98:66:cb:e5:51:c3:
                    d1:bf:ca:c6:f8:1c:f5:c6:04:b7:49:21:9e:bd:04:
                    01:95:38:3d:c0:14:1c:64:b2:1f:11:54:c6:1a:c6:
                    4c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B8:C2:13:A9:8D:5D:03:68:67:CD:78:F8:61:F5:DA:EE:DF:87:6E
            X509v3 Authority Key Identifier:
                keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/rLjCE6mNXQNoZ814-GH12u7fh24.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.240.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:9c:d3:32:d1:57:4b:bd:d2:be:2d:f8:50:1f:c1:65:2a:df:
         fb:f0:fc:24:3a:2c:aa:88:a0:d8:2c:90:b2:36:d5:65:31:20:
         0f:80:62:6d:00:f2:47:42:95:98:50:87:74:57:e3:20:7c:d1:
         f1:72:5c:72:1d:01:51:19:51:d7:46:6c:05:b3:1f:d3:e9:ac:
         83:19:5a:c3:81:1c:3e:d1:c4:00:92:7f:48:e0:17:a2:03:cb:
         83:c6:8c:1c:f3:49:8f:52:d5:d6:37:4e:42:59:f1:7f:32:65:
         d4:63:7f:a4:bb:05:61:3c:df:96:50:f6:2b:f5:ac:55:82:04:
         f0:ae:52:48:03:d4:7f:23:6b:ea:5c:ad:bc:17:16:93:cb:0f:
         d3:fe:10:b1:4f:a7:c7:70:27:95:44:3e:d3:e5:c0:5a:8b:5e:
         57:43:ef:0f:b7:17:f5:82:85:84:02:0f:18:a1:35:79:92:83:
         15:c6:43:ac:f1:b2:60:76:4d:4c:e4:71:fc:23:6c:51:49:49:
         97:4c:5d:0a:27:a9:48:c4:cc:79:1c:9a:29:ed:dd:92:e8:fd:
         38:43:54:9b:0f:14:c5:a8:5c:f8:24:77:b2:44:b9:58:8c:fb:
         f8:31:05:c4:e9:a4:a5:f4:59:41:6a:41:c9:47:67:b4:ad:b1:
         d5:d5:7a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:55 2023 by rpki-client on console-ams.rpki-client.org