Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/0iQXIDCQX6ejlyYJ9C5VhzRTuOk.roa
File:                     0iQXIDCQX6ejlyYJ9C5VhzRTuOk.roa (raw, json)
Hash identifier:          DO1sZx31WJYDLZ2Rd4dtuqCXpWhNnY6TEq4ZTGmaTjg=
Subject key identifier:   D2:24:17:20:30:90:5F:A7:A3:97:26:09:F4:2E:55:87:34:53:B8:E9
Certificate issuer:       /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial:       0187DC34D6FE59D9BD758489B1A310028763
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/0iQXIDCQX6ejlyYJ9C5VhzRTuOk.roa
Signing time:             Tue 02 May 2023 11:24:23 +0000
ROA not before:           Tue 02 May 2023 11:24:23 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61173
IP address blocks:        94.182.162.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:dc:34:d6:fe:59:d9:bd:75:84:89:b1:a3:10:02:87:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
        Validity
            Not Before: May  2 11:24:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d224172030905fa7a3972609f42e55873453b8e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a0:cf:55:94:52:bb:eb:3d:81:0e:8d:04:73:
                    de:55:6a:42:a5:8e:a6:56:4d:09:1a:31:b0:54:3e:
                    00:96:d3:63:b5:f2:9c:b3:da:73:54:05:92:8e:25:
                    11:4a:3a:8a:87:7d:d5:dd:49:90:2e:41:d4:37:f1:
                    7b:ef:ee:fd:71:91:41:e3:eb:58:84:fa:33:f6:9a:
                    dc:ec:52:7b:6b:33:5c:a6:c3:8a:9c:5d:9b:77:b0:
                    f1:89:fb:88:9d:19:6e:ba:38:75:8f:a9:9d:9c:6e:
                    fd:18:09:c3:1a:df:99:22:b4:d3:d4:19:08:61:47:
                    9d:61:aa:d7:f5:18:d7:5b:59:9f:e6:f8:0d:53:59:
                    f5:17:c7:ea:81:0f:b6:15:03:06:ec:93:47:72:e9:
                    07:e5:b1:a9:cc:e0:a5:e6:d3:52:d6:91:71:81:e3:
                    66:0d:26:f8:82:78:c3:31:cf:9a:2e:90:5f:11:f8:
                    a4:64:6e:a6:9c:21:cb:8e:b8:1b:de:db:7a:32:81:
                    6e:dd:3c:c1:c8:0d:f4:c3:bf:2d:70:ad:0c:b3:3c:
                    a8:ae:71:6a:fb:99:07:4a:6e:cb:2a:e6:70:c0:4e:
                    47:a3:55:49:08:39:c2:6d:22:85:63:a5:75:5b:e7:
                    29:f5:59:46:29:c8:46:f0:f0:6d:65:3f:f6:08:ef:
                    e5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:24:17:20:30:90:5F:A7:A3:97:26:09:F4:2E:55:87:34:53:B8:E9
            X509v3 Authority Key Identifier:
                keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/0iQXIDCQX6ejlyYJ9C5VhzRTuOk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.182.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:74:e6:e3:0f:98:7c:1c:da:88:d8:ee:94:8b:d7:da:9f:51:
         2d:18:5e:02:39:65:b6:d4:c8:06:62:9c:a1:50:f4:28:54:83:
         b9:cc:b8:d4:e2:8d:22:02:51:2a:80:54:6c:6a:ab:48:9d:7b:
         1e:cc:2a:b1:1f:b4:48:35:0a:92:dc:f4:88:66:b6:2f:2f:27:
         5c:87:a0:ef:4c:be:17:4c:a8:bb:a0:f1:8b:2e:7a:20:1a:c7:
         fa:e1:7d:26:cf:cd:3e:71:f9:b0:93:d7:ad:79:d3:25:85:cc:
         2a:38:2b:c5:47:03:22:1e:26:45:ae:fd:38:05:58:5d:d3:c7:
         1a:28:bc:69:4f:a8:99:44:27:42:94:8d:93:bd:10:a9:d3:2f:
         26:2c:89:9f:8b:4b:3c:ab:1e:b9:53:d3:9e:aa:65:2e:5f:e6:
         60:b3:27:3c:31:2c:5e:01:b3:56:a5:b1:42:20:12:fc:a0:ed:
         1e:7f:21:80:dc:ed:8e:a0:7d:79:92:2f:3d:b7:58:05:25:46:
         7c:09:df:96:11:d3:26:c6:e0:7c:00:63:a7:d6:14:53:96:74:
         b9:e5:2d:41:b4:56:bd:7b:c3:58:b9:cc:e5:e9:61:2b:79:8d:
         9d:da:0f:50:b3:ce:8d:6f:5e:07:61:51:0b:85:1c:62:fa:0b:
         58:d9:d4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:31:01 2024 by rpki-client on console.sobornost.net