Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/ViZaZfKU-2zFJvCzHJ9wRcP46b0.roa
File:                     ViZaZfKU-2zFJvCzHJ9wRcP46b0.roa (raw, json)
Hash identifier:          Zx5Tm9DUNNL3ppkdBioLBwlNGVwWK9xF9SsOZ06uQAY=
Subject key identifier:   56:26:5A:65:F2:94:FB:6C:C5:26:F0:B3:1C:9F:70:45:C3:F8:E9:BD
Certificate issuer:       /CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
Certificate serial:       0185719E697AC50896AD48E811D2714F5BB6
Authority key identifier: 9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/ViZaZfKU-2zFJvCzHJ9wRcP46b0.roa
Signing time:             Mon 02 Jan 2023 08:34:45 +0000
ROA not before:           Mon 02 Jan 2023 08:34:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     9132
IP address blocks:        212.110.193.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:9e:69:7a:c5:08:96:ad:48:e8:11:d2:71:4f:5b:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d066cb8488dae7e4234aa7c892430dad11fe5b1
        Validity
            Not Before: Jan  2 08:34:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=56265a65f294fb6cc526f0b31c9f7045c3f8e9bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6a:1e:73:d6:e7:59:40:89:1a:b7:01:f4:1b:
                    e4:5e:a0:e0:1a:e5:07:1d:ce:35:7d:7a:e1:0c:bc:
                    55:28:45:9d:f3:96:99:d7:9b:a4:16:20:c6:8a:1e:
                    29:6f:2d:3f:b3:f8:45:cf:d7:df:8f:26:d6:83:6d:
                    3b:3c:10:3c:13:95:48:5c:c3:7a:5d:38:ae:cc:35:
                    b6:d9:50:40:f3:39:f1:11:05:5b:49:f2:fc:45:f6:
                    d0:f3:a0:04:c9:f8:8d:8b:79:0b:93:c5:fe:0c:ea:
                    35:a0:fd:df:d7:46:fc:85:c7:22:9c:3b:9e:67:38:
                    e5:c2:ab:1b:53:e0:60:f4:ae:5e:29:7a:53:94:18:
                    a4:b5:3b:f0:0e:f3:58:8b:b1:c2:01:41:8c:77:a2:
                    96:ed:ba:bb:b2:90:09:c0:ff:87:04:c1:50:71:de:
                    d4:df:a3:ce:af:4f:b8:0a:23:c0:f4:83:dc:b7:1a:
                    38:72:8d:dc:e9:ae:60:70:e6:01:02:18:c4:f1:d0:
                    a3:b9:df:40:c1:e6:f4:bd:f3:70:ab:e0:e7:d7:0b:
                    05:81:b0:f4:86:73:d4:48:1d:d3:a1:69:15:83:00:
                    57:82:8a:65:b6:67:a5:59:13:74:b4:fc:87:75:8c:
                    ae:2e:09:70:bc:3a:14:32:64:0c:e8:5d:6d:6e:4a:
                    74:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:26:5A:65:F2:94:FB:6C:C5:26:F0:B3:1C:9F:70:45:C3:F8:E9:BD
            X509v3 Authority Key Identifier:
                keyid:9D:06:6C:B8:48:8D:AE:7E:42:34:AA:7C:89:24:30:DA:D1:1F:E5:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQZsuEiNrn5CNKp8iSQw2tEf5bE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/ViZaZfKU-2zFJvCzHJ9wRcP46b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0d2fd-aa90-4207-9104-3ef02d5140b7/1/nQZsuEiNrn5CNKp8iSQw2tEf5bE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.110.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:a5:9e:9e:f8:dd:94:a5:4f:6b:69:5a:ca:c5:84:02:70:12:
         d3:9d:d9:68:7c:c0:55:51:d9:41:4c:6c:7f:dc:01:87:90:84:
         5c:75:5c:67:d6:7f:1d:40:17:23:6a:90:8b:8e:86:7b:03:1e:
         10:70:1a:a7:70:8a:2d:6e:9b:70:6a:6f:a9:f5:f5:84:92:ca:
         ca:fa:8e:08:66:02:55:99:3c:57:d8:d8:40:ba:17:c8:79:b6:
         81:06:26:9d:b8:25:03:ba:91:c5:5b:96:cc:36:39:a9:e3:34:
         5c:e2:f4:fc:8d:37:36:45:ad:e2:35:04:00:01:dd:70:aa:24:
         bd:bc:cc:19:32:ab:c7:4b:90:28:d9:6d:f0:1d:14:6f:0d:a4:
         3e:8e:9c:00:31:78:bb:ad:73:45:1d:29:33:c5:c6:1d:5a:35:
         13:86:24:53:f6:47:5f:82:be:a9:88:45:9b:43:02:91:09:cb:
         8a:b7:c0:05:13:07:cf:65:b8:fb:4f:91:53:88:2a:f6:6b:a3:
         15:85:08:a4:c5:ae:1b:c0:2e:08:50:93:8a:44:ca:5c:a2:a6:
         fc:28:13:5e:84:08:dc:9c:08:87:87:27:76:ba:10:e4:4c:3e:
         54:55:15:a1:2c:ef:5c:55:1a:3f:80:e7:06:03:6c:54:ec:37:
         f6:38:86:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:13:29 2024 by rpki-client on console.sobornost.net