Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Y3D3aOZ_L5k78_qZ-eUae1_5ZuA.roa
File:                     Y3D3aOZ_L5k78_qZ-eUae1_5ZuA.roa (raw, json)
Hash identifier:          FsVfcZtrDfvrQ6qgkn3etNNsLJbF8sd77XsMbJCDOmY=
Subject key identifier:   63:70:F7:68:E6:7F:2F:99:3B:F3:FA:99:F9:E5:1A:7B:5F:F9:66:E0
Certificate issuer:       /CN=466bf8762fe42f0a13da7d21ca96c4301500ebcc
Certificate serial:       018BCD4BA10C77992E19C9BD19EA6A0FB3E1
Authority key identifier: 46:6B:F8:76:2F:E4:2F:0A:13:DA:7D:21:CA:96:C4:30:15:00:EB:CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rmv4di_kLwoT2n0hypbEMBUA68w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Y3D3aOZ_L5k78_qZ-eUae1_5ZuA.roa
Signing time:             Tue 14 Nov 2023 10:06:07 +0000
ROA not before:           Tue 14 Nov 2023 10:06:07 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44092
IP address blocks:        93.114.131.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:cd:4b:a1:0c:77:99:2e:19:c9:bd:19:ea:6a:0f:b3:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=466bf8762fe42f0a13da7d21ca96c4301500ebcc
        Validity
            Not Before: Nov 14 10:06:07 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6370f768e67f2f993bf3fa99f9e51a7b5ff966e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e9:26:d3:a4:a9:81:46:7d:03:08:1c:0b:9f:
                    ea:87:b7:74:d4:3d:bb:1d:9c:1d:87:03:16:ae:da:
                    89:04:e7:30:07:17:01:8a:89:78:dd:82:95:82:bf:
                    ea:d4:a4:bf:71:27:b2:6c:57:36:ad:58:74:e1:24:
                    e1:a4:08:e5:b0:7b:01:3c:ba:37:bd:2b:d8:0d:2f:
                    e3:1b:68:d7:1a:cd:46:5d:05:60:76:e3:2c:e2:31:
                    6c:ea:89:c5:b7:fb:eb:51:0f:55:31:6a:83:51:34:
                    0e:c6:2f:de:e0:8a:b9:65:cc:36:f6:ed:8a:d4:55:
                    86:37:0f:17:6a:f2:3b:d9:06:84:61:33:d7:b2:8a:
                    a5:d8:16:bc:6f:1f:49:09:c5:5f:c6:c7:7e:f3:c8:
                    0d:35:76:7a:85:d2:f6:ca:c4:a3:35:c1:d1:13:ab:
                    c2:1c:bd:49:b4:0b:32:6f:44:96:2d:51:2a:15:17:
                    66:13:94:b3:8a:b9:41:12:7a:d6:dd:d8:91:20:c9:
                    6b:62:36:8b:83:56:8d:f3:be:ec:fd:18:6a:4d:4e:
                    d5:e2:cf:36:62:00:6b:f5:15:50:37:cc:b4:20:c7:
                    47:27:8c:5e:43:7c:30:9c:b9:70:1a:0b:a7:02:f6:
                    db:6e:f9:48:2a:b9:da:a2:a2:d9:2e:91:17:f2:49:
                    a0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:70:F7:68:E6:7F:2F:99:3B:F3:FA:99:F9:E5:1A:7B:5F:F9:66:E0
            X509v3 Authority Key Identifier:
                keyid:46:6B:F8:76:2F:E4:2F:0A:13:DA:7D:21:CA:96:C4:30:15:00:EB:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rmv4di_kLwoT2n0hypbEMBUA68w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Y3D3aOZ_L5k78_qZ-eUae1_5ZuA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/71779b-5830-4c87-9e79-e5c459c91a48/1/Rmv4di_kLwoT2n0hypbEMBUA68w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.114.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:ad:bf:3e:c4:d8:a0:9d:90:df:9d:12:03:a8:6c:31:5b:dc:
         07:a2:58:c4:9d:83:19:6c:7a:d6:50:c9:27:7d:53:56:95:0f:
         dc:e5:61:44:f1:ac:2a:6a:98:72:de:f8:be:43:9f:65:64:02:
         d9:81:4a:37:55:e8:39:77:a6:1f:66:0a:48:8a:c3:70:76:4e:
         4b:b6:dd:d7:6c:bb:b5:66:32:64:7f:49:15:75:82:99:4f:6a:
         5e:82:0c:31:6c:ba:9e:74:79:ee:5f:ad:9e:82:53:73:78:d5:
         8a:84:59:c7:03:bc:80:1f:dd:3d:1f:94:96:c2:68:c5:14:55:
         24:d0:b2:58:5c:af:26:95:66:ee:af:65:68:46:1d:0a:1c:2b:
         73:0d:71:9c:93:0d:47:24:0a:d5:2a:e7:a9:57:9e:ac:e0:c5:
         7b:e8:de:e3:cf:35:f8:93:c5:08:19:53:7a:14:c8:5a:b9:31:
         22:05:12:ff:0c:f7:af:db:28:ec:47:8b:56:2a:03:bf:c9:ae:
         fe:22:12:72:ef:fa:99:56:11:cf:5a:80:46:c3:84:c6:4c:ad:
         4b:9c:50:87:6e:79:3d:80:94:96:a0:9a:81:2f:26:2d:b7:d8:
         3e:48:75:e1:c0:44:f7:10:90:12:a9:4a:df:b7:b9:50:2b:fa:
         32:27:b8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:47 2023 by rpki-client on console.sobornost.net