Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/v_QoTbwRlDuOfWYerShGN7duziQ.roa
File:                     v_QoTbwRlDuOfWYerShGN7duziQ.roa (raw, json)
Hash identifier:          rGvAuKQNASohFIL6opF9JgeJwk9Zm6+yMmYyuyZa5Qk=
Subject key identifier:   BF:F4:28:4D:BC:11:94:3B:8E:7D:66:1E:AD:28:46:37:B7:6E:CE:24
Certificate issuer:       /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial:       018571278C0D5E05CDD16FFF211210E4D1F4
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/v_QoTbwRlDuOfWYerShGN7duziQ.roa
Signing time:             Mon 02 Jan 2023 06:24:55 +0000
ROA not before:           Mon 02 Jan 2023 06:24:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49345
IP address blocks:        91.219.180.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:27:8c:0d:5e:05:cd:d1:6f:ff:21:12:10:e4:d1:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
        Validity
            Not Before: Jan  2 06:24:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bff4284dbc11943b8e7d661ead284637b76ece24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e5:8d:80:68:f1:bb:19:23:93:18:a4:62:40:
                    3d:dd:68:f8:17:f2:9e:cb:0a:3b:f3:46:48:0a:90:
                    93:14:b0:48:10:80:2d:e6:24:47:df:d1:50:7d:62:
                    a4:f3:27:b2:e6:a8:fd:72:76:48:15:e3:b0:51:5a:
                    fe:d9:f7:22:8f:8e:58:51:b2:5f:36:16:88:66:b0:
                    7b:da:7d:f7:d4:e3:5b:0e:f0:bf:59:df:f4:71:3b:
                    95:f6:aa:fb:51:03:45:46:bd:fc:e0:f7:d3:f9:f3:
                    58:8d:eb:96:65:8c:5d:9c:87:fa:04:05:00:d9:f7:
                    09:01:b1:5f:87:3c:99:af:61:9e:a6:60:76:9f:07:
                    f0:ba:09:73:78:fb:6c:60:7d:1a:dc:c0:19:a9:32:
                    02:cb:b6:80:64:69:35:73:a8:34:1a:36:b5:90:b1:
                    84:ee:03:ad:96:b3:8a:07:50:f5:62:32:b0:87:eb:
                    ec:32:8e:68:f7:80:52:e6:2d:1d:25:ba:45:52:85:
                    d1:44:5a:17:c7:97:fb:7d:71:aa:2f:24:61:ec:5e:
                    1b:ef:49:fb:3c:a6:5c:9a:bb:fa:89:4b:43:52:cd:
                    18:e3:3a:f6:76:1e:3b:69:9b:07:f5:41:5b:0b:c0:
                    1c:f4:41:1c:65:2c:63:f9:a4:2c:67:61:22:f7:8b:
                    d0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F4:28:4D:BC:11:94:3B:8E:7D:66:1E:AD:28:46:37:B7:6E:CE:24
            X509v3 Authority Key Identifier:
                keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/v_QoTbwRlDuOfWYerShGN7duziQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.219.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7e:a5:6e:24:05:3c:91:f9:7b:42:0b:16:4c:2c:15:d7:bf:ed:
         08:b2:33:ad:a9:89:e8:48:a7:f8:03:6f:58:1b:f1:b2:c3:cd:
         23:6d:be:ee:20:f7:21:18:48:30:f6:e4:b9:07:03:7f:69:04:
         d9:bc:45:ee:a1:7f:0a:4e:c1:38:c5:9a:60:28:c6:02:c2:b9:
         70:2c:65:db:55:17:81:cf:16:af:c8:5f:52:b0:0b:cf:1d:93:
         35:68:bc:b9:e6:fb:dd:a9:32:2f:34:15:15:01:05:91:24:8d:
         61:e0:7a:f6:44:01:a7:8e:15:41:8b:4a:b8:5b:e0:0a:ac:7a:
         31:b3:b7:f8:fd:56:2d:34:da:97:71:e9:dc:dd:31:38:50:2a:
         1a:34:7f:d9:7f:4e:2f:6c:eb:7e:5d:c1:c7:e7:6d:c6:43:31:
         fc:55:ba:01:37:79:b0:36:72:97:1c:5a:98:7d:28:12:b4:a8:
         5c:42:21:a4:59:b9:4b:3e:00:aa:51:d2:3d:0d:1c:01:0d:2e:
         4d:94:6b:64:8b:63:ff:9b:0f:08:c1:ad:b9:69:61:45:0e:a3:
         2b:6d:39:18:f9:cc:66:43:2c:4a:d6:c8:23:eb:9a:c0:e8:f1:
         fd:2b:24:ed:19:78:f1:e1:ea:1a:72:b8:56:d9:71:6d:5f:a6:
         94:80:a1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:48 2023 by rpki-client on console.sobornost.net