Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-o0bIwz97uGF9tbn7pcKK7prOR8.roa
File:                     1-o0bIwz97uGF9tbn7pcKK7prOR8.roa (raw, json)
Hash identifier:          lcO8SJoPyAgwJcZ75djHr71q83ja2N1sNnZh/EYp0bQ=
Subject key identifier:   FA:8D:1B:23:0C:FD:EE:E1:85:F6:D6:E7:EE:97:0A:2B:BA:6B:39:1F
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       01865A7842E8C18284DED5D73443896239EB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-o0bIwz97uGF9tbn7pcKK7prOR8.roa
Signing time:             Thu 16 Feb 2023 13:44:36 +0000
ROA not before:           Thu 16 Feb 2023 13:44:36 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199847
IP address blocks:        194.180.51.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:5a:78:42:e8:c1:82:84:de:d5:d7:34:43:89:62:39:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Feb 16 13:44:36 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fa8d1b230cfdeee185f6d6e7ee970a2bba6b391f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c8:85:55:44:cb:4f:68:66:f5:ff:5e:ea:90:
                    28:a9:a2:fe:27:32:bf:b0:cb:58:3b:6f:f6:c4:bb:
                    22:d6:a4:96:77:fc:f5:3a:50:c4:9f:ec:57:3f:b1:
                    11:d0:92:9e:36:a6:6b:90:7d:56:ee:50:60:36:b5:
                    74:47:7d:76:cf:ff:59:0f:8f:31:75:30:99:40:55:
                    4d:65:3f:cb:1f:46:14:34:4c:c0:91:ad:6c:41:5f:
                    99:61:b3:22:e7:7e:86:a4:99:5b:81:51:39:2b:6e:
                    70:d3:55:3d:d6:19:cb:06:6b:59:24:0c:ae:96:10:
                    b7:4c:8b:e0:25:b8:a8:2a:7c:b6:23:29:af:92:5d:
                    3f:3c:99:9a:a8:a2:18:37:1e:7b:57:16:1a:1a:80:
                    4f:ca:cb:0a:43:93:92:1d:8d:91:5e:8c:95:33:c4:
                    09:f4:7b:48:ef:4a:a3:2a:c6:c7:c7:88:3f:fc:68:
                    e4:bd:ad:61:3b:a5:63:a1:fa:c6:00:30:7b:1b:23:
                    f2:6c:2b:e5:33:82:8e:46:bf:94:a2:91:dd:fc:b6:
                    c1:16:99:07:6a:c4:08:75:26:e5:02:ec:a5:63:03:
                    6e:84:26:e2:31:54:32:3a:f8:8a:b2:aa:85:94:ff:
                    0b:31:7f:cb:bf:96:e7:34:69:d5:6a:bb:7c:65:10:
                    0f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:8D:1B:23:0C:FD:EE:E1:85:F6:D6:E7:EE:97:0A:2B:BA:6B:39:1F
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-o0bIwz97uGF9tbn7pcKK7prOR8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.180.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:1c:68:62:35:47:05:17:17:5a:26:aa:81:f2:54:e1:db:70:
         d9:3a:9d:97:3a:19:3e:44:e7:e8:70:58:69:32:78:02:09:0d:
         cb:46:82:13:ae:b8:c9:c9:3e:64:67:d9:e7:db:f0:92:7d:d0:
         db:91:b2:1a:e8:41:75:ac:29:1e:18:d0:6a:c7:2f:1c:ef:67:
         8a:19:83:a0:53:76:e3:ae:fc:ae:c7:dc:8e:ee:45:0c:6a:72:
         ea:f8:9b:81:a9:6e:74:27:91:2f:49:07:b5:4b:26:c3:80:21:
         52:69:e5:e6:9d:f7:23:02:73:48:3d:c9:0f:a7:f4:cd:b7:b9:
         dc:88:f0:0e:1f:be:f3:80:19:3a:94:b8:42:e3:ce:1b:3e:a1:
         3e:f1:86:8c:c8:c2:2a:9d:44:42:61:23:95:8c:9d:93:87:c8:
         c5:73:3e:4e:d3:65:ec:b4:88:83:e4:21:80:67:f0:f3:b0:09:
         ba:84:53:4d:3f:a7:d4:8e:b3:1f:2c:1d:ed:8e:98:f2:5e:12:
         e4:b3:20:29:4b:4a:b3:31:37:69:c8:9b:2b:c4:a9:53:17:92:
         21:a6:03:f1:b8:a7:f4:ec:19:b4:d6:d0:14:fc:2e:dc:03:e6:
         40:bc:5f:1c:46:e9:82:52:33:7b:7e:d0:8a:6c:9f:6c:d0:1a:
         ad:7f:d5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:30 2023 by rpki-client on console-ams.rpki-client.org