Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/vMDVP6X7D3_eJxKjqfzaF2bQzCk.roa
File:                     vMDVP6X7D3_eJxKjqfzaF2bQzCk.roa (raw, json)
Hash identifier:          NV3VANOgJV8qJkCcvCjPvbCSCLJXj71iIu+5UgrmlRk=
Subject key identifier:   BC:C0:D5:3F:A5:FB:0F:7F:DE:27:12:A3:A9:FC:DA:17:66:D0:CC:29
Certificate issuer:       /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial:       0185729ED6549E431D1C2501FCD3D003EA21
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/vMDVP6X7D3_eJxKjqfzaF2bQzCk.roa
Signing time:             Mon 02 Jan 2023 13:14:50 +0000
ROA not before:           Mon 02 Jan 2023 13:14:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60781
IP address blocks:        87.251.19.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:9e:d6:54:9e:43:1d:1c:25:01:fc:d3:d0:03:ea:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
        Validity
            Not Before: Jan  2 13:14:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bcc0d53fa5fb0f7fde2712a3a9fcda1766d0cc29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c0:bd:cb:14:87:c5:27:55:37:62:a6:6a:54:
                    05:47:10:5b:42:25:dd:93:54:3d:c4:f9:1f:ad:0c:
                    8a:a2:22:ac:60:dd:22:87:41:95:df:44:ec:5f:e2:
                    e4:a8:f5:59:13:1a:3c:7d:21:02:92:55:d2:70:50:
                    e0:9e:2c:38:24:bc:f5:c5:a3:5a:fc:67:6f:5e:ff:
                    a7:46:54:05:0d:e9:dc:56:da:08:46:02:89:64:69:
                    9b:0b:2a:15:51:09:9a:8f:d0:b9:ff:ef:51:c3:18:
                    b9:36:74:e8:28:05:7c:08:fb:35:ae:2c:c8:54:c2:
                    52:4c:ee:35:2b:7a:6f:d2:32:66:9e:90:cd:38:03:
                    b3:db:4d:a2:b5:43:94:e7:31:24:83:32:b0:ea:40:
                    27:39:56:ed:56:82:3d:32:9b:f6:0f:af:fa:e0:46:
                    b7:7a:50:10:a5:ef:22:0c:bb:12:67:38:18:2e:2b:
                    a1:1a:83:81:3a:c8:8c:49:14:62:61:4a:62:2e:4a:
                    e4:32:fe:c4:91:98:8d:6e:9f:51:d1:bf:2a:74:9c:
                    46:c8:8e:ed:88:ed:3a:c4:e8:24:be:8a:69:7a:28:
                    3a:78:45:0f:04:6b:9a:db:66:a4:74:17:e2:cb:75:
                    b7:d1:33:db:80:7b:25:cb:96:84:7c:80:69:cf:8e:
                    b1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C0:D5:3F:A5:FB:0F:7F:DE:27:12:A3:A9:FC:DA:17:66:D0:CC:29
            X509v3 Authority Key Identifier:
                keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/vMDVP6X7D3_eJxKjqfzaF2bQzCk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.251.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:26:fd:8f:38:d3:64:33:6a:da:b7:3f:8f:fe:36:c8:aa:f7:
         4b:b3:54:6a:0e:2b:af:b2:86:0e:1f:67:ad:15:70:56:e4:e8:
         a3:53:ec:d6:39:3d:8a:96:d3:86:18:7a:9a:69:3a:42:4e:28:
         7e:51:8c:d0:96:b7:14:18:54:af:0e:51:58:68:2d:a9:9a:fc:
         04:12:30:8c:8d:b5:72:d2:c8:74:e8:3a:c0:a6:94:05:bb:81:
         e4:bd:2e:c9:c7:88:8e:7b:31:dc:f4:87:b5:be:68:4a:ff:8d:
         69:27:e7:46:c2:ac:d1:d5:64:57:87:48:dd:21:20:e5:0f:5e:
         a8:cc:f7:4b:b0:ae:db:32:72:05:e7:82:5f:d4:e6:07:92:c3:
         f4:e4:b1:cf:32:c5:3b:8f:fd:4c:a7:de:4a:af:2a:0e:f9:e4:
         a0:a8:99:d3:ba:af:8a:81:13:16:ff:05:81:85:5d:d3:58:6b:
         4f:83:2a:11:a6:6e:1b:58:c5:a9:b8:2f:93:f6:9d:c2:a9:41:
         75:17:22:7f:c1:e9:5d:75:ee:bc:d1:92:bc:02:fa:ac:fa:1e:
         5e:0f:a0:4e:84:08:bc:6d:e4:4a:b6:ed:50:8b:5c:11:da:f3:
         f5:35:a9:a5:53:9d:d9:32:da:60:62:77:5b:68:46:d8:95:4c:
         e5:ae:56:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:15:27 2024 by rpki-client on console.sobornost.net