Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8S9NB5b6-e4yGo0xpO56TI2GPlQ.roa
File:                     8S9NB5b6-e4yGo0xpO56TI2GPlQ.roa (raw, json)
Hash identifier:          ftWR5hGfV/iTmBo0HhDd9yUMmccriJfB9LpF/jcZ4hg=
Subject key identifier:   F1:2F:4D:07:96:FA:F9:EE:32:1A:8D:31:A4:EE:7A:4C:8D:86:3E:54
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       0185C442F1FEC3455B5058A48FCAB3423BDC
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8S9NB5b6-e4yGo0xpO56TI2GPlQ.roa
Signing time:             Wed 18 Jan 2023 09:43:19 +0000
ROA not before:           Wed 18 Jan 2023 09:43:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     20473
IP address blocks:        195.178.111.0/24 maxlen: 24
                          195.178.110.0/24 maxlen: 24
                          193.37.47.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:c4:42:f1:fe:c3:45:5b:50:58:a4:8f:ca:b3:42:3b:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Jan 18 09:43:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f12f4d0796faf9ee321a8d31a4ee7a4c8d863e54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:ff:64:c5:35:e1:96:79:2d:51:5b:a0:d3:d9:
                    c5:27:4e:04:0c:6b:f7:e3:19:93:d3:76:f2:69:d6:
                    27:f8:7b:7d:dd:79:af:76:69:f1:b3:b4:23:85:63:
                    5d:e0:12:e4:6d:a8:b1:3c:6e:08:7a:a8:a0:17:52:
                    e9:ab:e3:c9:d0:88:8e:b9:6e:95:c4:75:a3:c2:16:
                    26:df:fc:37:51:6b:17:43:74:ad:21:4f:07:66:b9:
                    8c:72:7f:f0:e8:16:36:4b:85:17:4f:f3:42:02:4e:
                    da:79:1a:ea:d5:63:ff:49:bc:55:25:f7:85:78:1b:
                    d1:00:68:6a:f2:f2:16:93:e7:08:f3:ab:bb:70:b5:
                    62:fd:59:9f:8e:88:3e:58:fb:d6:e7:3b:bb:44:07:
                    ac:cc:27:a8:43:16:4f:86:4a:78:60:80:15:fd:08:
                    15:39:53:51:d7:ae:1e:2f:f5:3c:48:6c:9a:a9:4f:
                    8e:3d:21:d1:7d:45:4f:15:48:df:fd:73:2d:61:bd:
                    ee:6d:42:76:4a:c9:b6:b5:8c:9f:ab:85:55:22:2b:
                    16:19:51:c9:75:c6:06:dc:22:74:15:9d:e8:93:43:
                    90:6c:5e:d4:6d:d5:ed:27:1b:17:58:6f:d6:64:c6:
                    57:3e:81:d3:ec:71:fe:41:6f:01:8f:1c:16:e4:27:
                    77:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:2F:4D:07:96:FA:F9:EE:32:1A:8D:31:A4:EE:7A:4C:8D:86:3E:54
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8S9NB5b6-e4yGo0xpO56TI2GPlQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.37.47.0/24
                  195.178.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:03:67:4f:13:de:e6:f1:2a:aa:19:72:a6:62:b3:32:d9:63:
         d8:54:38:ba:8e:7c:3c:fd:b8:53:71:10:45:28:a0:ef:5e:d0:
         61:d5:dc:93:3c:79:d5:49:a9:41:c4:3a:4a:0d:5e:f0:03:bd:
         dc:51:1a:99:d7:0c:e5:b6:42:18:15:4a:57:af:8b:3d:99:7c:
         1b:24:53:47:61:4b:99:8f:78:21:2a:2e:9b:dd:93:df:45:c9:
         6d:24:7b:2f:cd:88:86:0a:f7:4b:b5:93:a3:fa:4f:0c:15:52:
         eb:c4:6a:71:ae:72:d9:36:24:75:ed:34:17:93:d0:98:90:47:
         7e:58:33:38:bc:6a:33:a2:c0:a7:d0:dc:d7:c8:10:42:73:49:
         ad:e6:1f:0a:4d:ed:1b:ee:af:ad:6e:52:9f:70:37:01:45:44:
         75:53:5e:15:3f:45:37:28:fd:1c:36:4a:ed:a8:a9:dd:a9:5f:
         32:2f:ec:99:80:13:74:44:1e:f5:36:00:35:33:71:a5:1c:cf:
         95:b5:33:3a:71:50:74:16:61:15:80:2e:bc:a8:07:d3:c2:53:
         43:03:15:a7:d9:dc:04:d1:6b:77:f2:60:d3:b4:c0:99:16:43:
         37:50:63:43:bc:c1:7d:06:69:e1:58:a2:bb:a0:0f:36:24:6d:
         8c:f7:9b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 31 15:47:13 2023 by rpki-client on console-fra.rpki-client.org