Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iaw8AtqdSbH5kiPS5fAF8lJkvvo.roa
File:                     iaw8AtqdSbH5kiPS5fAF8lJkvvo.roa (raw, json)
Hash identifier:          Vt5HgZXqt/DP0XYR70/8JqjIwwO7pBCd61Sl3k2qox0=
Subject key identifier:   89:AC:3C:02:DA:9D:49:B1:F9:92:23:D2:E5:F0:05:F2:52:64:BE:FA
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       01860134E15D1CBD69C58DDB592A07F30A39
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iaw8AtqdSbH5kiPS5fAF8lJkvvo.roa
Signing time:             Mon 30 Jan 2023 05:44:48 +0000
ROA not before:           Mon 30 Jan 2023 05:44:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61138
IP address blocks:        194.87.119.0/24 maxlen: 24
                          193.124.33.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:01:34:e1:5d:1c:bd:69:c5:8d:db:59:2a:07:f3:0a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Jan 30 05:44:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=89ac3c02da9d49b1f99223d2e5f005f25264befa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:80:8e:31:f8:c6:96:62:cb:e6:0c:07:c5:d7:
                    ca:c2:65:31:5b:58:ba:f9:07:51:f5:ff:41:27:8f:
                    7a:33:c2:ce:f9:52:ca:fd:0e:ac:3c:cc:e8:bb:f0:
                    8f:42:1e:97:3c:97:b7:20:f2:da:9e:f8:92:80:f2:
                    b2:7e:65:d7:e9:40:06:46:b4:37:68:27:93:79:12:
                    db:77:36:c0:e9:1d:c6:ea:13:2e:db:7a:32:b1:e5:
                    f3:e4:80:0a:93:24:d9:a5:5e:f8:30:fd:6b:e2:94:
                    e1:2d:6e:80:8c:07:99:35:68:ae:41:79:d7:18:eb:
                    f7:23:1c:b3:c9:a2:47:91:70:6c:5e:f6:9b:11:99:
                    e1:b1:d8:8b:9e:b5:c6:f0:2a:94:ad:16:1c:78:cf:
                    9c:93:76:4f:7d:41:7b:8b:c4:16:e9:ee:e9:d2:23:
                    61:ae:6c:60:76:f6:08:8c:5a:c1:59:63:a4:bf:9d:
                    02:3e:fc:b5:ca:ab:31:e8:01:31:68:38:3b:e7:d2:
                    28:03:06:41:50:09:79:4b:67:fa:c1:63:9a:e9:19:
                    a0:0b:43:f3:19:6a:ad:50:bc:25:56:80:5f:27:22:
                    4b:8d:b9:2b:ed:cb:b9:ce:95:0b:77:c6:f0:46:8a:
                    26:2d:ef:e4:b0:6b:dc:ac:0c:53:8e:34:71:b3:eb:
                    e9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:AC:3C:02:DA:9D:49:B1:F9:92:23:D2:E5:F0:05:F2:52:64:BE:FA
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iaw8AtqdSbH5kiPS5fAF8lJkvvo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.124.33.0/24
                  194.87.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:a0:80:09:c6:59:81:22:56:5e:ef:ff:f8:ed:fc:00:e3:13:
         8f:21:0f:35:a2:8f:bd:5d:ca:5c:23:f6:ee:3b:c4:e5:17:01:
         f6:02:db:85:68:f4:ad:eb:30:5c:c7:ad:94:1b:fe:7e:fa:dd:
         61:b4:ac:8e:7c:95:e2:37:fb:5f:aa:12:4e:14:c1:2f:81:db:
         c8:ca:09:35:26:11:23:14:a7:b2:46:e3:7c:bf:d5:77:bf:ac:
         8f:18:fa:4b:f9:18:cd:d8:8f:13:06:72:aa:51:b3:13:4b:46:
         30:55:b3:85:36:fd:96:f6:3e:f6:5e:be:2a:71:bc:2a:5f:83:
         6e:45:17:57:f2:06:f9:5a:8d:96:84:35:a5:e7:cf:b3:bf:58:
         00:22:8f:42:ce:e9:08:18:ee:40:bb:28:28:f0:cc:4e:e6:54:
         d5:26:c6:00:f6:42:11:22:d8:8c:b8:62:77:24:41:c8:bc:bb:
         8a:14:cb:b8:2c:21:8a:67:1e:f0:82:7f:8b:f0:ab:7a:a5:e8:
         77:99:7b:e2:54:f2:a2:18:87:87:14:2b:22:ab:61:a3:5e:b9:
         a5:a4:87:dd:c9:71:48:22:9d:7d:8a:76:32:7e:f2:80:6f:f5:
         e1:ce:1c:b2:1a:a5:1b:26:59:9d:d3:b5:e2:69:f9:21:3d:65:
         ce:7a:fa:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:04 2023 by rpki-client on console-ams.rpki-client.org