Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LmE4xiAtrwI6j5h0YJISFRK9VJw.roa
File:                     LmE4xiAtrwI6j5h0YJISFRK9VJw.roa (raw, json)
Hash identifier:          YcMZkysiUF84s9vJyHd3V1tLJjZ6rcaOXwzahCYT+B8=
Subject key identifier:   2E:61:38:C6:20:2D:AF:02:3A:8F:98:74:60:92:12:15:12:BD:54:9C
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       018A736FB228436B0AECE71A097C8718D1E4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LmE4xiAtrwI6j5h0YJISFRK9VJw.roa
Signing time:             Fri 08 Sep 2023 06:16:54 +0000
ROA not before:           Fri 08 Sep 2023 06:16:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     47674
IP address blocks:        194.59.31.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:73:6f:b2:28:43:6b:0a:ec:e7:1a:09:7c:87:18:d1:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Sep  8 06:16:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2e6138c6202daf023a8f98746092121512bd549c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:30:2f:2f:c2:3c:cd:36:30:da:a9:35:8b:78:
                    39:03:c0:e7:9d:98:3f:7e:e9:56:07:9c:86:8b:f1:
                    5d:d8:f2:6b:ae:30:51:39:45:c1:bf:d9:98:02:9d:
                    a0:a0:c7:61:22:bb:20:25:03:4e:d2:c2:83:e8:81:
                    d6:6a:dd:97:54:3d:cf:bf:53:de:99:84:91:c6:5f:
                    eb:be:af:28:67:2f:97:3b:f6:e9:75:cf:58:1b:b3:
                    85:95:be:ca:4f:25:44:a6:34:78:82:b1:80:4d:4f:
                    f7:be:58:52:4d:5e:f4:44:f5:6d:0b:98:09:c0:55:
                    6d:07:84:90:bf:89:09:99:e4:42:07:0a:eb:4d:07:
                    76:8c:8e:ac:56:89:74:7c:76:ba:82:28:64:a5:c8:
                    17:1e:e1:ee:51:2b:e7:09:26:57:93:8a:b8:8e:3c:
                    59:4d:ea:53:19:25:66:17:a3:ee:65:79:ba:25:57:
                    22:ec:2a:4d:e1:0a:f3:cc:c5:19:a2:6d:3e:1d:a0:
                    a2:d9:99:0a:91:93:e7:ee:07:05:5f:df:b4:fd:c6:
                    a4:67:d6:f9:f4:1c:55:63:bd:29:ea:c5:da:8f:74:
                    ec:e3:ba:e7:6a:48:41:80:05:d7:86:c1:94:67:f9:
                    05:78:87:14:75:9f:a6:45:aa:3b:22:26:a0:c5:bb:
                    ce:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:61:38:C6:20:2D:AF:02:3A:8F:98:74:60:92:12:15:12:BD:54:9C
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/LmE4xiAtrwI6j5h0YJISFRK9VJw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.59.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:2e:4e:a9:70:f4:2c:bd:51:09:bc:cf:5c:21:8c:f7:43:78:
         78:f7:84:33:4a:9c:4c:aa:fa:c2:ed:55:77:32:a8:c2:61:9f:
         83:7f:8a:f6:1e:cb:7c:93:63:4a:a8:d8:0d:d1:fd:36:ec:73:
         5f:e5:a2:46:81:d4:6a:ce:88:5f:f4:87:2c:1e:f6:7d:ee:16:
         43:fa:c8:d2:1e:7b:ca:7f:c5:f8:f1:a3:a4:41:03:49:0e:da:
         03:7c:8b:9f:64:5b:c3:09:ed:47:f9:a8:4b:41:25:ea:7f:d5:
         2e:06:ea:b3:a1:fe:df:55:e1:39:ab:f9:d2:e7:95:c2:a4:8e:
         1c:c7:ea:8c:c5:2a:e8:6c:5f:8e:2f:aa:55:70:83:3d:6a:8b:
         6b:e9:9e:0f:1f:8e:dc:8b:a1:83:e3:f1:f2:f7:50:91:36:d5:
         f6:c1:e3:ce:b3:34:87:e4:f6:61:ec:e5:7f:29:13:8f:12:74:
         83:9a:f4:d7:f5:75:97:6c:57:1d:57:ec:51:67:fb:a0:4b:dc:
         b8:2b:a7:89:25:1c:60:d4:00:22:a4:41:f9:07:89:0b:41:8b:
         a8:86:8f:8f:c5:ca:d5:ca:03:20:70:cf:32:7e:37:9a:db:32:
         c9:2c:7e:55:47:e4:33:1f:30:97:2c:85:d1:2d:7f:2b:a1:5a:
         c8:93:06:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 26 19:59:21 2023 by rpki-client on console-fra.rpki-client.org