Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/yAskMmDOTQCrArcN4_xlYRe_Hv4.roa
File:                     yAskMmDOTQCrArcN4_xlYRe_Hv4.roa (raw, json)
Hash identifier:          wZKPHDLNIJzZGcKH1XOg8vycO2v/wOlNOSatiV4N2zY=
Subject key identifier:   C8:0B:24:32:60:CE:4D:00:AB:02:B7:0D:E3:FC:65:61:17:BF:1E:FE
Certificate issuer:       /CN=c0e549fdceeb02912c8a8741c816806bbe19c448
Certificate serial:       01856C53C92D5A7770548D34F968E72E77F5
Authority key identifier: C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/yAskMmDOTQCrArcN4_xlYRe_Hv4.roa
Signing time:             Sun 01 Jan 2023 07:55:08 +0000
ROA not before:           Sun 01 Jan 2023 07:55:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212097
IP address blocks:        185.227.219.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:53:c9:2d:5a:77:70:54:8d:34:f9:68:e7:2e:77:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0e549fdceeb02912c8a8741c816806bbe19c448
        Validity
            Not Before: Jan  1 07:55:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c80b243260ce4d00ab02b70de3fc656117bf1efe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:08:4a:0f:bd:53:f3:0d:ad:62:3c:cb:29:d2:
                    4c:b4:6e:c3:6a:05:dc:c6:4d:e3:97:31:f2:8f:c1:
                    04:50:f6:0c:2b:37:76:fb:5e:48:f8:0b:0b:4b:ee:
                    d8:25:e6:7d:2b:70:d5:a2:93:08:06:b7:95:24:88:
                    6e:bb:56:0a:ac:93:a5:c6:b1:4f:cd:e9:50:e8:66:
                    9f:d1:7f:e3:10:0d:9e:e6:fd:13:8f:5e:93:4d:c4:
                    83:5d:34:78:d7:42:76:c7:fb:d4:ab:4d:62:86:d6:
                    df:d4:8f:13:c2:49:db:7d:b4:ab:d0:72:be:b5:9a:
                    fd:9d:e8:9d:41:04:ec:57:08:09:74:c7:b4:af:ed:
                    56:91:31:67:83:a1:bc:1a:34:44:11:f7:ed:66:13:
                    c8:08:9e:8c:dc:c2:b2:99:e2:c4:7b:73:83:cb:34:
                    c0:76:85:b9:1b:9b:19:cf:4f:f1:78:6f:a2:ff:1c:
                    8a:88:98:25:90:15:67:73:ea:4a:34:4f:90:24:4a:
                    10:25:31:03:70:d1:4c:1e:f2:ba:f8:29:5f:41:b8:
                    01:9e:1e:26:2d:d4:e8:39:cc:39:8f:b3:da:be:21:
                    a2:5f:7d:42:4c:be:54:13:4b:13:de:3c:7d:fe:9f:
                    4d:b9:f3:d3:08:46:a7:92:c8:b8:39:d0:8f:0b:a5:
                    38:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:0B:24:32:60:CE:4D:00:AB:02:B7:0D:E3:FC:65:61:17:BF:1E:FE
            X509v3 Authority Key Identifier:
                keyid:C0:E5:49:FD:CE:EB:02:91:2C:8A:87:41:C8:16:80:6B:BE:19:C4:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOVJ_c7rApEsiodByBaAa74ZxEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/yAskMmDOTQCrArcN4_xlYRe_Hv4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/160f8f-dbab-482d-b39c-ad2fda47988e/1/wOVJ_c7rApEsiodByBaAa74ZxEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.227.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:c6:0b:56:ba:ef:6d:41:4c:05:fb:c3:91:26:6b:ea:95:3d:
         a3:e3:97:68:c2:13:02:e4:ad:37:6d:4d:35:37:1d:cb:82:36:
         70:ee:7f:f4:bf:57:43:63:e9:ef:d0:46:6d:ac:09:77:6f:99:
         2b:c5:1a:16:cc:83:42:b7:b0:e9:7f:7f:fe:25:c3:de:0c:f0:
         7f:09:62:a9:e8:91:3d:0f:14:8d:11:84:8f:18:df:10:d3:0b:
         f0:87:77:de:38:07:8b:75:8c:f4:30:cf:e8:f5:fc:b6:63:f1:
         b1:ba:7a:a1:c3:ab:58:8c:2e:6b:db:0d:f4:28:5d:9e:19:9c:
         2b:8d:55:cb:f8:16:33:e7:20:cc:ab:de:2b:3d:bb:91:db:92:
         10:f3:2d:2e:fa:f4:0c:66:02:e6:3f:00:0c:ab:e4:da:eb:d6:
         28:85:5c:fc:89:62:d7:67:de:fe:0e:bc:52:c7:00:9f:02:d1:
         8e:31:cb:cf:42:dd:66:75:b9:df:8c:88:63:42:ab:aa:b2:71:
         26:1f:c1:b8:21:73:c4:20:ac:9b:bc:a8:57:10:74:3b:d6:77:
         ff:db:eb:68:81:46:37:a1:1e:6e:93:a2:59:2f:17:3c:c5:b4:
         bd:1d:ab:33:bc:bd:b0:15:29:ca:48:67:9b:32:1d:32:fe:7b:
         09:ea:6d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:00:55 2024 by rpki-client on console.sobornost.net