Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/Rpm8d6_hax-FF9nv9Inv4b5mr0U.roa
File:                     Rpm8d6_hax-FF9nv9Inv4b5mr0U.roa (raw, json)
Hash identifier:          T/6jV1+bW6z2++937P20iGo4ows3zR7SI6WzN6OYXIk=
Subject key identifier:   46:99:BC:77:AF:E1:6B:1F:85:17:D9:EF:F4:89:EF:E1:BE:66:AF:45
Certificate issuer:       /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial:       018A1ECA2B364BAE342927EE96E37E1A3C4F
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/Rpm8d6_hax-FF9nv9Inv4b5mr0U.roa
Signing time:             Tue 22 Aug 2023 19:48:00 +0000
ROA not before:           Tue 22 Aug 2023 19:48:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212815
IP address blocks:        193.38.250.0/24 maxlen: 24
                          185.255.112.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:1e:ca:2b:36:4b:ae:34:29:27:ee:96:e3:7e:1a:3c:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
        Validity
            Not Before: Aug 22 19:48:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4699bc77afe16b1f8517d9eff489efe1be66af45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:00:5c:f3:9c:24:67:7f:64:35:38:93:07:d4:
                    3c:32:76:93:dc:d5:b2:18:ee:73:f4:00:66:41:17:
                    94:11:f2:29:32:2d:ca:2b:7b:2b:63:d4:ee:f2:67:
                    52:3a:fd:f8:6a:1c:88:ff:85:71:fc:d9:2f:50:88:
                    45:24:65:74:ff:00:96:d6:d1:43:7c:9a:b6:ea:de:
                    58:a9:5e:22:c4:f9:e2:81:4d:9a:31:ae:5d:0b:4b:
                    f4:e5:f6:22:e3:51:71:8e:1c:64:27:1e:a6:b8:ce:
                    db:cb:84:8a:78:3d:cd:12:73:f8:6e:38:dd:ba:1f:
                    66:c5:22:b8:a8:af:9a:aa:f6:91:29:2b:9f:7f:bd:
                    27:c8:8f:30:a4:b1:ab:8c:0c:66:da:e7:63:9e:de:
                    58:56:24:05:d3:b3:b3:9e:3e:a3:99:d7:2a:c0:da:
                    e8:c6:7f:69:c6:d2:65:ce:76:e3:4c:3e:0f:b6:f0:
                    db:ee:63:61:5d:b8:fd:b0:40:b4:25:ec:cd:e0:79:
                    01:ae:39:1e:b9:4b:6a:4f:8d:c5:54:cd:13:5e:31:
                    5f:9c:0c:0d:54:22:b7:84:1e:08:92:52:4e:0f:2d:
                    90:f1:1a:4c:b3:2e:45:7a:8c:0b:40:6e:67:a7:38:
                    8e:38:b9:33:3e:80:6a:9a:a0:e3:0a:45:b1:5d:c7:
                    23:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:99:BC:77:AF:E1:6B:1F:85:17:D9:EF:F4:89:EF:E1:BE:66:AF:45
            X509v3 Authority Key Identifier:
                keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/Rpm8d6_hax-FF9nv9Inv4b5mr0U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.255.112.0/24
                  193.38.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:41:2a:af:ee:d3:65:31:71:2b:e6:22:81:28:8f:69:d1:7f:
         de:c4:0e:87:4e:3f:65:31:16:f4:7d:7b:06:9f:1a:61:02:e9:
         90:d4:e5:df:b0:b8:cc:e5:81:95:34:cb:50:52:86:82:ee:55:
         0d:be:31:25:10:4f:66:b5:26:c5:dc:6b:3a:3c:2a:c3:b6:aa:
         b9:16:41:59:ca:dc:c0:f3:3a:d4:98:f2:3e:a5:f3:d6:73:a9:
         e6:db:8e:e4:dc:f1:3f:22:73:1b:e5:9d:11:ea:e0:66:cf:63:
         b9:5a:2f:75:08:3c:eb:3c:45:be:0b:83:e2:67:61:ad:ca:3f:
         15:37:78:38:b3:60:9c:92:f2:36:48:98:fa:89:09:39:59:55:
         5b:34:e3:31:bd:88:66:c0:04:0a:8d:e4:bb:83:2e:5e:9f:6f:
         98:4d:92:62:a9:73:9e:45:89:9e:73:39:71:65:0b:f8:7d:18:
         28:17:1c:fd:4a:ff:40:36:03:23:6a:0f:da:d6:9b:95:45:97:
         b9:75:a1:fc:43:16:a8:60:d7:cd:27:7b:2b:96:68:de:6a:84:
         f4:47:25:0e:8a:4e:e0:6f:ae:d5:6d:30:36:dc:8f:7c:09:34:
         ef:fa:dc:2a:55:71:4e:49:a6:f8:c1:fe:74:9d:96:6d:df:09:
         9f:83:12:e8
-----BEGIN CERTIFICATE-----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Generated at Fri Sep 29 23:14:34 2023 by rpki-client on console-fra.rpki-client.org