Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/bd4f30-d24b-4e5e-9e1b-70a9ca27af66/1/dlPLWICHb-_TlJFKb8UgyDMpSE4.roa
File:                     dlPLWICHb-_TlJFKb8UgyDMpSE4.roa (raw, json)
Hash identifier:          tskMhsAdcZXPhLbTzgeR8yvmbXyYfv7l1KlBx9W57YA=
Subject key identifier:   76:53:CB:58:80:87:6F:EF:D3:94:91:4A:6F:C5:20:C8:33:29:48:4E
Certificate issuer:       /CN=b3bbc59e67f70508ff1e81a6b535a6ad5261ec89
Certificate serial:       018C7D2F1300A51343A8A1AF1A5D714A8F4A
Authority key identifier: B3:BB:C5:9E:67:F7:05:08:FF:1E:81:A6:B5:35:A6:AD:52:61:EC:89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7vFnmf3BQj_HoGmtTWmrVJh7Ik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/bd4f30-d24b-4e5e-9e1b-70a9ca27af66/1/dlPLWICHb-_TlJFKb8UgyDMpSE4.roa
Signing time:             Mon 18 Dec 2023 13:48:06 +0000
ROA not before:           Mon 18 Dec 2023 13:48:06 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212335
IP address blocks:        178.212.140.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:7d:2f:13:00:a5:13:43:a8:a1:af:1a:5d:71:4a:8f:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3bbc59e67f70508ff1e81a6b535a6ad5261ec89
        Validity
            Not Before: Dec 18 13:48:06 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7653cb5880876fefd394914a6fc520c83329484e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2d:e4:05:1e:03:9e:82:98:8d:c9:9c:ff:84:
                    58:35:9d:da:e1:2a:d0:6a:06:76:cb:0b:9f:20:99:
                    e1:42:ab:9b:a9:09:29:a2:d5:c3:6e:41:a6:4b:51:
                    35:fd:d8:5e:ab:11:f3:bd:be:dc:6e:52:f3:62:84:
                    46:ac:38:92:0c:21:27:7c:13:d1:0d:7d:b7:66:f2:
                    1b:96:61:1b:9a:53:c0:65:fb:c9:94:74:91:4f:dc:
                    19:f3:ec:08:03:6b:45:4a:98:26:27:6d:da:59:4c:
                    65:ea:c5:12:4a:bf:64:47:77:1e:76:68:43:8f:a0:
                    c4:10:bc:af:9f:5d:9d:3d:fc:7a:2c:09:8a:be:37:
                    49:1f:67:be:a0:ee:b0:d3:04:5a:80:50:84:f7:af:
                    2d:96:e2:d8:62:d5:3e:bb:7a:45:84:4d:a2:f6:b4:
                    96:cb:7d:1f:6a:f3:a4:be:8f:ac:9f:f0:ee:e6:c9:
                    0d:7e:df:d6:b5:86:ed:72:e7:67:0d:4a:56:8f:30:
                    1e:a7:a5:3a:1e:4a:4b:bd:81:8d:d0:dc:91:4e:59:
                    f8:0a:3b:84:f4:81:b6:a6:f2:fa:b4:19:07:e7:25:
                    5e:1a:96:b2:ea:0b:a9:67:0c:7a:5a:ce:14:1f:a7:
                    29:74:24:d6:74:94:b5:63:8b:5b:0d:ef:77:ce:22:
                    72:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:53:CB:58:80:87:6F:EF:D3:94:91:4A:6F:C5:20:C8:33:29:48:4E
            X509v3 Authority Key Identifier:
                keyid:B3:BB:C5:9E:67:F7:05:08:FF:1E:81:A6:B5:35:A6:AD:52:61:EC:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7vFnmf3BQj_HoGmtTWmrVJh7Ik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd4f30-d24b-4e5e-9e1b-70a9ca27af66/1/dlPLWICHb-_TlJFKb8UgyDMpSE4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd4f30-d24b-4e5e-9e1b-70a9ca27af66/1/s7vFnmf3BQj_HoGmtTWmrVJh7Ik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.212.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:61:18:3f:2a:e5:7a:90:9a:16:66:b0:c3:de:fe:f2:57:f8:
         75:5f:7e:8e:61:69:94:3b:36:fc:fd:4b:9f:05:fc:46:d8:5b:
         c2:f9:bf:3c:45:40:53:49:1f:c2:c0:48:a1:82:33:dc:78:a7:
         85:2a:fb:c6:b2:ed:bf:ec:86:22:10:53:64:51:47:ea:0a:db:
         80:c4:3a:bd:ed:f9:93:bd:d9:93:f4:d7:42:2a:6a:43:ea:77:
         67:4c:7c:b3:17:99:25:24:0d:68:76:2c:47:39:5a:88:24:07:
         fe:2e:74:37:92:6f:66:0d:a1:f3:7d:04:0a:49:58:46:13:3b:
         55:2c:bc:1c:8c:00:82:95:14:02:65:8b:a3:8e:01:bc:3a:cb:
         cc:81:78:62:a4:fa:01:38:1e:8f:8a:d5:99:31:e4:11:0c:3f:
         6e:d1:29:5b:22:b9:30:8c:0c:2c:0b:39:2a:5a:c3:2a:0b:0a:
         aa:42:70:c9:1f:79:8a:7f:c8:c8:66:11:db:58:44:51:78:26:
         63:15:eb:39:ea:7c:f1:7b:96:d9:6e:d7:8c:a1:2b:ee:79:bf:
         94:01:b6:b4:7b:13:02:68:bd:1b:9b:d5:40:c7:8e:2d:09:c5:
         4f:cb:8c:53:87:87:d0:27:9d:72:1c:72:a4:51:f1:a4:18:b2:
         61:36:04:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 18:00:56 2024 by rpki-client on console.sobornost.net