Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Eqv09sF_rTwPJ_jyqPa5qx-RHmg.roa
File:                     Eqv09sF_rTwPJ_jyqPa5qx-RHmg.roa (raw, json)
Hash identifier:          6Cm8tW7TabSCSDagaUyvwuOguAew5czewqecitwgpMg=
Subject key identifier:   12:AB:F4:F6:C1:7F:AD:3C:0F:27:F8:F2:A8:F6:B9:AB:1F:91:1E:68
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       0186161612BC431F62BA816A72437C294889
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Eqv09sF_rTwPJ_jyqPa5qx-RHmg.roa
Signing time:             Fri 03 Feb 2023 07:03:10 +0000
ROA not before:           Fri 03 Feb 2023 07:03:10 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213200
IP address blocks:        85.209.132.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:16:16:12:bc:43:1f:62:ba:81:6a:72:43:7c:29:48:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Feb  3 07:03:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=12abf4f6c17fad3c0f27f8f2a8f6b9ab1f911e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2c:21:b3:02:7c:a2:c5:1f:b5:8b:26:af:50:
                    ff:15:f6:48:4d:64:ac:67:f8:8c:67:d5:f7:ea:dc:
                    90:27:bb:f7:f6:fb:ab:b2:ce:49:1e:47:a1:12:99:
                    ab:6f:b8:c1:43:af:d1:03:70:73:10:b5:87:47:78:
                    f0:a6:f4:17:a7:8c:71:7d:f4:8e:53:ff:0b:9b:05:
                    8b:68:6d:3d:44:68:24:31:b2:1b:12:81:a7:27:d8:
                    24:82:ff:d1:c5:99:7c:d5:b4:ed:2f:55:9b:6a:af:
                    9c:4c:81:b9:03:ce:40:a5:98:92:7e:d7:85:0a:c1:
                    b3:5a:15:84:a6:40:6a:36:a6:e9:e9:92:47:e1:53:
                    2f:55:a2:0f:57:c9:5f:a8:7b:5f:76:9d:5b:62:b2:
                    63:fc:b4:e8:2c:0f:1e:67:d9:ca:10:e2:02:20:b5:
                    6f:bc:27:85:f2:67:64:5d:c5:16:ae:a7:4f:2e:b0:
                    2d:42:28:ff:79:29:f6:d7:17:76:5f:6e:02:df:aa:
                    12:af:30:75:07:2a:0b:7b:ef:67:9a:d2:fb:ab:7c:
                    a4:b3:65:e6:86:92:f2:c8:06:4b:70:23:a0:0c:a8:
                    ad:90:73:78:92:aa:72:38:19:e0:0a:bc:db:92:8c:
                    a1:fd:7c:38:5c:d5:62:5d:b3:b1:e2:28:85:1d:7a:
                    3b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:AB:F4:F6:C1:7F:AD:3C:0F:27:F8:F2:A8:F6:B9:AB:1F:91:1E:68
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Eqv09sF_rTwPJ_jyqPa5qx-RHmg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.209.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:de:cb:84:37:73:c2:1b:7a:8b:88:5b:e9:2a:97:37:f6:05:
         44:d4:7e:b0:e5:ee:f1:2f:b5:68:6c:73:e2:f4:7d:00:2e:06:
         71:fc:63:10:fa:22:32:c6:fe:4a:16:3f:da:6c:39:db:9e:36:
         09:da:14:d1:06:cb:c8:6c:fd:c4:3d:6a:ba:72:b5:fa:e1:08:
         45:b2:d5:88:35:fc:58:c1:38:29:17:fd:f8:a1:cc:b9:9b:06:
         59:5d:35:4e:66:47:c5:70:40:2d:40:c5:3e:45:3f:1b:95:b7:
         78:41:20:e0:b3:10:79:5d:13:d7:45:31:36:bc:40:90:7d:d7:
         d1:1b:31:ff:2f:de:78:c2:d6:2c:a8:e1:bf:22:12:17:4f:75:
         ed:f8:8b:8a:08:f8:be:03:a2:ec:13:dd:5c:81:9d:d4:2f:01:
         d7:dc:7e:0b:2d:59:03:bf:c9:2c:38:14:75:10:b4:d9:2c:77:
         35:21:cb:39:84:27:84:ec:af:ae:5e:17:73:97:bd:ad:8a:9f:
         ff:2d:3e:3f:f9:84:c8:d9:3e:29:ab:76:1d:00:41:24:4b:a0:
         8c:f9:a4:f0:a9:b3:37:ca:46:16:de:d6:20:85:dd:58:a4:55:
         88:74:e7:d6:7e:b7:c8:8d:8f:1e:70:05:d2:cf:45:a9:d4:e9:
         dc:40:9a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:34 2023 by rpki-client on console-ams.rpki-client.org