Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/MyTq3FiVTUAprFjO4PQI9Zzh_iI.roa
File:                     MyTq3FiVTUAprFjO4PQI9Zzh_iI.roa (raw, json)
Hash identifier:          4zUUgKEm0krMfznJWwf+78yoqi//P+F3U2fsSHy28k4=
Subject key identifier:   33:24:EA:DC:58:95:4D:40:29:AC:58:CE:E0:F4:08:F5:9C:E1:FE:22
Certificate issuer:       /CN=712c99cc338f692da8f81b716bad79d1c9d7c820
Certificate serial:       0185711514EB23E00954CE2A7447EA3BD716
Authority key identifier: 71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/MyTq3FiVTUAprFjO4PQI9Zzh_iI.roa
Signing time:             Mon 02 Jan 2023 06:04:45 +0000
ROA not before:           Mon 02 Jan 2023 06:04:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201333
IP address blocks:        212.54.240.0/20 maxlen: 23
                          212.54.232.0/21 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:15:14:eb:23:e0:09:54:ce:2a:74:47:ea:3b:d7:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=712c99cc338f692da8f81b716bad79d1c9d7c820
        Validity
            Not Before: Jan  2 06:04:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3324eadc58954d4029ac58cee0f408f59ce1fe22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:df:4b:c0:1e:ef:3b:c0:82:34:f5:f8:20:38:
                    ac:fa:05:88:24:b6:6f:56:aa:be:9d:d9:df:0d:68:
                    2a:2d:3d:08:44:12:82:f5:ac:34:25:15:14:9c:f9:
                    28:cb:6c:01:76:8d:f2:57:f3:2c:b3:08:9f:96:ee:
                    c0:52:2c:50:49:94:9e:45:d3:45:d8:1e:20:b2:72:
                    2f:b3:d5:07:a2:f0:99:c2:62:c7:d4:13:5f:27:4f:
                    9f:b6:ff:0a:67:b8:06:bd:f1:a0:79:39:5f:ae:9f:
                    96:7d:05:08:f8:03:a9:3c:84:2c:45:71:6b:50:5b:
                    64:07:e5:7a:75:50:37:cb:61:f5:3c:2b:52:19:36:
                    6a:36:c3:a8:14:95:e0:a7:c4:77:2d:6e:ae:a4:2a:
                    c1:4e:fa:51:5b:66:9c:a6:8c:5b:2f:99:b8:c3:de:
                    32:06:16:2f:37:2a:ff:27:4b:4f:13:1e:48:08:11:
                    38:f0:15:5b:18:ad:33:a4:87:a5:17:a7:68:50:50:
                    1e:83:40:b6:0a:98:9e:02:64:ce:48:08:60:bc:c6:
                    e8:9d:33:a0:49:65:16:39:ce:45:8b:b0:11:f1:98:
                    21:22:0c:93:e0:57:3a:29:1f:d2:1c:a9:e8:42:cf:
                    3d:96:58:75:95:13:f1:d4:2a:d4:26:e9:33:f6:ce:
                    16:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:24:EA:DC:58:95:4D:40:29:AC:58:CE:E0:F4:08:F5:9C:E1:FE:22
            X509v3 Authority Key Identifier:
                keyid:71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/MyTq3FiVTUAprFjO4PQI9Zzh_iI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.54.232.0-212.54.255.255

    Signature Algorithm: sha256WithRSAEncryption
         59:21:c1:34:28:01:89:80:b5:af:43:d6:ef:8c:ed:a6:83:1c:
         32:81:60:b2:61:b8:1a:24:8b:d9:51:a7:ce:fa:91:a2:7f:c7:
         fb:cb:11:f1:c5:4a:9b:e8:95:16:58:5b:8f:a6:3e:32:19:cd:
         36:df:c5:0e:7d:be:5c:91:d2:20:d7:46:9c:56:1f:58:a8:9d:
         e7:31:03:08:af:77:4d:4d:5a:d1:8f:39:33:db:7e:27:3a:b3:
         e6:45:c4:f3:fc:fe:af:16:12:1f:fe:12:3f:22:06:a4:2a:06:
         6c:07:83:b7:25:93:f8:75:35:6a:03:5c:68:c0:19:8c:d7:30:
         2f:0d:c5:35:4f:9b:59:cb:96:87:8c:8d:a5:ca:7c:b5:e1:94:
         1d:cf:ba:d6:2b:20:76:09:32:13:1b:c9:e7:84:7a:d0:39:48:
         51:8c:a3:c3:53:80:32:4a:88:fc:67:c5:25:2b:02:27:6a:56:
         c1:51:d4:6d:1f:6e:16:5f:1f:5c:3a:7b:b2:81:31:ce:84:2d:
         74:ec:96:4a:ba:a8:b8:a7:24:39:0c:33:db:75:41:81:92:5a:
         8e:85:2b:e4:e6:a6:8b:67:1e:dc:5d:c3:f6:a1:ed:e3:74:9d:
         40:af:da:a7:7f:52:2f:f7:ec:d9:06:58:ab:cf:20:3d:18:b0:
         0a:73:60:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:13 2023 by rpki-client on console.sobornost.net