Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/5RIQYfzLkXF4D8LTe6Ftx7YCSPI.roa
File:                     5RIQYfzLkXF4D8LTe6Ftx7YCSPI.roa (raw, json)
Hash identifier:          uw3/gHrJyB8+oRKtADlKNseGgxJ4SdCiSzccoVdNePY=
Subject key identifier:   E5:12:10:61:FC:CB:91:71:78:0F:C2:D3:7B:A1:6D:C7:B6:02:48:F2
Certificate issuer:       /CN=620b0435463746f5f237d93687bec2eacf224551
Certificate serial:       0189CE6255B47DC1CA539B6EB03E182F6965
Authority key identifier: 62:0B:04:35:46:37:46:F5:F2:37:D9:36:87:BE:C2:EA:CF:22:45:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/5RIQYfzLkXF4D8LTe6Ftx7YCSPI.roa
Signing time:             Mon 07 Aug 2023 05:04:58 +0000
ROA not before:           Mon 07 Aug 2023 05:04:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     56974
IP address blocks:        185.44.228.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:ce:62:55:b4:7d:c1:ca:53:9b:6e:b0:3e:18:2f:69:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=620b0435463746f5f237d93687bec2eacf224551
        Validity
            Not Before: Aug  7 05:04:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e5121061fccb9171780fc2d37ba16dc7b60248f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:27:62:73:57:5f:88:0b:58:c0:6e:a6:4b:0a:
                    8f:40:56:ad:9a:dd:f3:88:b2:e3:d8:4a:bf:c7:43:
                    10:c6:e8:80:90:e5:2d:2f:1d:64:ec:d8:7f:c8:a6:
                    f0:1a:bc:75:1f:6f:77:ff:f7:5f:da:4f:36:56:98:
                    41:8f:f0:12:dd:d1:2e:a3:ed:cf:2b:7a:0d:d0:75:
                    e8:5b:19:36:b9:c7:9b:40:58:ca:5c:df:4f:aa:3f:
                    2f:1b:32:6a:16:c2:70:e0:cc:53:f2:ba:4a:19:50:
                    69:83:58:a4:96:f5:d8:45:e2:ae:a3:ae:3a:97:41:
                    ba:90:6d:2f:5a:5d:ff:87:1e:fc:51:4d:17:8d:b1:
                    34:c3:d6:06:8f:33:4a:d2:aa:cb:4a:14:16:97:1e:
                    36:69:e4:f0:b5:dd:a2:99:f9:60:d3:4d:27:a3:2c:
                    40:b9:d7:2d:a7:27:d7:3d:ea:7c:2b:74:67:ab:ad:
                    95:56:3a:de:7d:00:15:3b:3c:76:0e:3a:07:22:23:
                    5c:69:fe:6d:4f:2f:0a:eb:0c:3e:63:42:cf:5a:d3:
                    b1:01:13:13:3d:49:3c:79:e3:ba:75:52:c0:ee:d5:
                    de:66:aa:02:a3:41:ca:ba:cd:65:26:bb:e3:31:80:
                    58:5a:dd:2f:39:2f:42:28:2b:06:76:13:06:cc:fe:
                    8a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:12:10:61:FC:CB:91:71:78:0F:C2:D3:7B:A1:6D:C7:B6:02:48:F2
            X509v3 Authority Key Identifier:
                keyid:62:0B:04:35:46:37:46:F5:F2:37:D9:36:87:BE:C2:EA:CF:22:45:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YgsENUY3RvXyN9k2h77C6s8iRVE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/5RIQYfzLkXF4D8LTe6Ftx7YCSPI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/4bb2aa-44cd-43b6-a76f-68c59c19b935/1/YgsENUY3RvXyN9k2h77C6s8iRVE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.44.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:df:84:5c:28:64:60:f4:3d:be:ed:dc:ed:66:fc:80:77:e7:
         f3:23:c8:66:f3:07:f2:11:96:31:7b:2f:11:51:38:12:9a:d1:
         e2:79:79:d2:ba:fd:ca:c0:3e:ac:cb:c9:91:bf:47:31:25:08:
         29:e6:b5:eb:07:ee:37:19:a7:6c:b0:27:a9:2e:39:12:25:68:
         43:e9:fd:d8:65:70:e5:97:bd:87:57:82:07:63:b9:7d:ef:78:
         3d:bd:24:4f:96:5f:4a:78:17:82:a5:fd:9e:4a:07:05:29:c7:
         2e:d6:97:cc:09:f1:92:0f:b7:5d:0a:6c:70:6c:75:1e:b7:8b:
         dc:52:69:27:71:ab:ac:7b:9a:75:25:a6:11:9b:07:b9:00:18:
         e9:15:1a:3b:3a:ff:88:6d:67:b9:6b:b3:d3:12:b2:eb:44:5a:
         0e:e1:ef:d6:5d:95:56:bb:6e:89:4a:18:d2:0c:6f:bb:74:88:
         29:48:6a:01:de:d5:f6:af:cf:aa:41:90:4c:75:5f:e6:9f:38:
         2e:33:b5:d6:6b:36:ba:a2:d5:a2:7d:0b:2b:46:03:77:b9:8e:
         86:61:4c:18:b0:f3:c2:07:5a:8f:d3:3b:a4:af:8d:c9:dd:2e:
         d7:25:ca:76:5d:48:d6:7a:0d:66:22:af:b4:be:1f:eb:31:2c:
         0b:11:8d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:10:08 2024 by rpki-client on console.sobornost.net