Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/FuSisCdGFsB9uiF9HQ_PczyDbag.roa
File:                     FuSisCdGFsB9uiF9HQ_PczyDbag.roa (raw, json)
Hash identifier:          AGgKPilIFdBeM2bjZ/9znt2k79GgllZjN1xvKwgIkVE=
Subject key identifier:   16:E4:A2:B0:27:46:16:C0:7D:BA:21:7D:1D:0F:CF:73:3C:83:6D:A8
Certificate issuer:       /CN=8b82433ffe94bf3536fec327543d396158202072
Certificate serial:       018A8419125F12C63CBBBAC80225343DCEDC
Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/FuSisCdGFsB9uiF9HQ_PczyDbag.roa
Signing time:             Mon 11 Sep 2023 11:55:50 +0000
ROA not before:           Mon 11 Sep 2023 11:55:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57314
IP address blocks:        94.141.116.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:84:19:12:5f:12:c6:3c:bb:ba:c8:02:25:34:3d:ce:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b82433ffe94bf3536fec327543d396158202072
        Validity
            Not Before: Sep 11 11:55:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=16e4a2b0274616c07dba217d1d0fcf733c836da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ec:ae:95:82:c8:d4:97:d5:29:53:97:e6:5e:
                    9d:23:48:6e:89:a4:01:ce:c2:cb:6e:80:a8:c2:bb:
                    d3:e6:f1:d3:18:60:f4:3b:33:b2:51:69:7d:83:1b:
                    5c:6e:ef:9a:23:3d:a6:0f:10:cd:6b:94:d5:50:2e:
                    54:bc:7f:40:aa:f8:51:90:69:cc:2e:01:14:a7:6e:
                    94:3f:e4:a6:24:59:6f:6e:8c:10:98:7b:61:fd:c3:
                    f7:77:cb:b9:b4:6c:65:e8:8e:8c:e8:6e:31:ef:ca:
                    44:88:97:f0:1c:18:6f:20:e7:a6:ce:ed:91:2e:af:
                    d4:22:c4:7f:1b:66:17:7a:5b:a7:d2:cd:70:bf:ac:
                    51:c5:40:47:f7:84:38:bc:cf:30:f9:fe:88:cc:e1:
                    c4:f6:fa:2f:81:ee:4b:73:18:f8:80:11:1c:04:5a:
                    a7:fe:f0:74:31:52:dc:39:0d:95:8e:28:6c:1c:98:
                    d7:7c:fa:86:3a:d2:1f:35:2b:f1:b2:7b:28:ae:1f:
                    9b:01:fb:de:b4:80:e0:39:f8:c0:e7:40:56:08:f2:
                    3e:69:71:58:a5:6e:95:ae:7d:37:84:08:ef:83:7f:
                    06:50:4d:81:bb:8d:25:f7:d3:7e:26:dc:ad:3a:b0:
                    75:63:ce:16:d3:4a:7a:b0:1c:85:1a:00:94:f3:a5:
                    33:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E4:A2:B0:27:46:16:C0:7D:BA:21:7D:1D:0F:CF:73:3C:83:6D:A8
            X509v3 Authority Key Identifier:
                keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/FuSisCdGFsB9uiF9HQ_PczyDbag.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.141.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d0:84:3f:dd:f2:12:72:33:8d:20:6b:56:80:a9:88:22:df:d3:
         23:4d:57:61:1c:68:d3:3a:ed:4e:ee:39:5a:56:ba:01:3f:58:
         c3:e6:b0:a7:33:69:ed:55:b7:5a:6e:85:c5:c5:f3:ec:d0:9b:
         db:b6:a1:18:d0:68:e7:26:b5:b1:67:29:26:1e:ac:13:24:78:
         7d:b6:50:0a:3f:dd:6a:34:89:87:a4:dc:b1:fa:5c:68:12:62:
         22:1e:da:1a:39:e5:05:b3:3c:1a:d9:e4:3c:cd:bf:4d:c1:05:
         37:95:af:87:d0:98:8a:67:da:03:7c:11:d1:3b:47:ac:a8:16:
         b5:4f:9e:e4:0a:af:48:d6:79:8e:14:41:07:e9:b0:f6:54:e7:
         ad:27:f8:1a:fb:59:9c:0b:16:f7:ed:85:9f:eb:08:72:d7:64:
         9b:8d:d6:b7:59:38:b7:f8:28:65:3e:49:8b:81:18:3c:f7:89:
         b7:9e:bd:df:4a:08:5c:be:79:36:b3:74:1b:aa:5e:be:ba:39:
         8f:08:a7:f2:e5:1d:27:1d:bf:85:76:66:44:03:3b:63:b9:2c:
         9c:ed:40:78:84:c1:4a:e1:b4:77:fc:a7:5d:41:2c:f6:9b:10:
         71:dc:21:ee:fb:32:5b:16:92:7f:38:22:24:48:6b:18:52:58:
         8e:7b:20:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:27 2023 by rpki-client on console.sobornost.net