Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/F8mO2vjzsZcqqtD4OqtSveZ7C3M.roa
File:                     F8mO2vjzsZcqqtD4OqtSveZ7C3M.roa (raw, json)
Hash identifier:          PS28fMixk9AHtQUI1S4p8/ki95FITQfmV4IYyTD4RoA=
Subject key identifier:   17:C9:8E:DA:F8:F3:B1:97:2A:AA:D0:F8:3A:AB:52:BD:E6:7B:0B:73
Certificate issuer:       /CN=4d6f0e44a7f6f0c88cce9c46dba8ec72ec61752b
Certificate serial:       0187BE0AA4E2C04DCF9FE944F057AFB6B335
Authority key identifier: 4D:6F:0E:44:A7:F6:F0:C8:8C:CE:9C:46:DB:A8:EC:72:EC:61:75:2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TW8ORKf28MiMzpxG26jscuxhdSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/F8mO2vjzsZcqqtD4OqtSveZ7C3M.roa
Signing time:             Wed 26 Apr 2023 14:49:41 +0000
ROA not before:           Wed 26 Apr 2023 14:49:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6830
IP address blocks:        185.87.112.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:be:0a:a4:e2:c0:4d:cf:9f:e9:44:f0:57:af:b6:b3:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d6f0e44a7f6f0c88cce9c46dba8ec72ec61752b
        Validity
            Not Before: Apr 26 14:49:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=17c98edaf8f3b1972aaad0f83aab52bde67b0b73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ac:c5:0e:97:22:4d:c6:50:1e:24:e9:f1:4a:
                    d0:2f:85:7f:db:af:d8:b1:8e:43:75:40:5f:49:b0:
                    09:69:69:96:3e:b7:8a:d3:6b:37:0f:ef:ed:14:1b:
                    d7:7a:70:97:84:bd:a3:4b:ce:a4:72:b6:ff:ab:7b:
                    23:8e:79:10:e7:d6:05:89:3c:5b:15:9f:24:84:eb:
                    1c:4a:68:b5:a5:0c:0f:70:94:11:ea:53:15:f1:67:
                    71:e4:73:28:29:3c:61:0f:4d:91:da:88:10:5a:b5:
                    ce:1e:2d:13:ed:9b:13:bd:28:2b:f2:e0:06:46:c1:
                    9a:2c:5e:02:2a:c4:69:49:fc:36:96:0c:f8:3a:47:
                    65:84:4d:05:00:5d:3a:0c:aa:a8:a1:08:66:84:44:
                    5a:98:f1:75:f4:38:41:5c:ec:f3:69:21:8e:68:9e:
                    3f:91:76:e4:46:f3:94:bc:f3:90:9b:57:a6:a5:41:
                    2e:5d:5d:a1:b2:82:53:1a:c3:33:63:d0:8e:19:70:
                    d0:2a:d6:dd:3c:20:91:a1:26:46:28:90:2b:df:d7:
                    29:9a:a4:77:31:81:dc:55:ce:4d:e3:80:36:ee:09:
                    d1:4e:b5:0d:09:cf:53:25:82:70:b8:b6:9d:30:66:
                    e9:42:26:e1:d9:95:82:f5:84:fa:78:cc:a7:5f:fa:
                    63:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C9:8E:DA:F8:F3:B1:97:2A:AA:D0:F8:3A:AB:52:BD:E6:7B:0B:73
            X509v3 Authority Key Identifier:
                keyid:4D:6F:0E:44:A7:F6:F0:C8:8C:CE:9C:46:DB:A8:EC:72:EC:61:75:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TW8ORKf28MiMzpxG26jscuxhdSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/F8mO2vjzsZcqqtD4OqtSveZ7C3M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/133bb5-11fb-4f94-8f29-aca3b8283fe3/1/TW8ORKf28MiMzpxG26jscuxhdSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.87.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:ab:47:a7:2f:a9:9e:fb:16:08:87:68:04:b9:f2:dc:b3:de:
         44:0b:19:2a:45:2f:b4:06:8a:83:15:86:9e:83:97:d8:be:fc:
         7c:e6:0d:4b:2d:52:7e:bc:8d:38:de:ff:0c:78:39:20:97:a4:
         d0:0e:36:09:02:c4:a8:a3:43:42:46:a9:be:3c:f0:5c:0c:b8:
         b5:92:1c:15:b0:d3:4e:ca:39:a4:42:3d:99:06:a8:13:e7:c8:
         0e:51:45:58:3c:61:7a:20:da:d6:03:e6:bd:ce:d9:44:c4:1f:
         85:d3:6f:cb:f2:05:fe:85:ee:2c:71:6f:16:ad:8f:39:79:bb:
         90:89:d5:d8:43:a9:93:47:25:40:0d:b7:1d:8e:b1:51:5f:61:
         6b:6c:8e:25:42:02:98:aa:b6:30:c3:8d:a9:1e:2e:74:d2:bb:
         c0:45:c1:bf:f9:36:e6:76:5e:0e:45:f5:76:4d:dc:33:05:28:
         86:0e:b3:2c:fc:da:19:42:04:07:a0:ab:31:8c:f4:9f:66:6c:
         2b:8e:ff:04:60:b3:87:90:ff:96:71:74:41:49:13:e7:c5:58:
         a7:be:b5:13:c8:1e:85:55:39:16:10:18:4b:52:9a:2d:31:a1:
         36:d9:fc:a8:44:7a:c7:b7:0a:2d:8d:fe:df:80:b4:ce:cb:33:
         01:dc:28:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:00:58 2024 by rpki-client on console.sobornost.net