Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YjP6qzuE206OqFlG16DDl2TTFKM.roa
File:                     YjP6qzuE206OqFlG16DDl2TTFKM.roa (raw, json)
Hash identifier:          rtRYDv2V9+cxdfCEXnP8zSxKTjVDLj+R9XILOAlFP5U=
Subject key identifier:   62:33:FA:AB:3B:84:DB:4E:8E:A8:59:46:D7:A0:C3:97:64:D3:14:A3
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       01870982E94B2EAAB9B07982E721ECC28E76
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YjP6qzuE206OqFlG16DDl2TTFKM.roa
Signing time:             Wed 22 Mar 2023 13:29:47 +0000
ROA not before:           Wed 22 Mar 2023 13:29:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     8767
IP address blocks:        45.8.93.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:09:82:e9:4b:2e:aa:b9:b0:79:82:e7:21:ec:c2:8e:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Mar 22 13:29:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6233faab3b84db4e8ea85946d7a0c39764d314a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b6:9f:e3:d2:7e:10:9f:0e:fd:35:1f:c4:d1:
                    32:22:a9:7b:a1:99:87:8b:f6:56:84:3b:0e:74:ef:
                    d6:0a:aa:82:93:be:a2:ef:fd:74:fb:07:2d:7d:6d:
                    07:7f:90:3d:e3:98:ed:64:3e:75:3f:44:89:9c:0f:
                    56:0e:3f:f4:48:e4:3f:ae:5c:f5:3d:7f:48:40:c8:
                    5d:b4:47:3c:be:0a:5a:4b:fc:88:5b:d6:42:c6:9d:
                    ab:23:c2:0a:e6:27:57:6f:ce:94:74:4f:61:da:0d:
                    a8:98:48:a0:3a:4c:77:7b:95:88:69:12:c0:3c:10:
                    a4:86:04:d2:e6:2c:3b:81:bd:ed:a3:83:9d:23:f0:
                    05:dc:c5:c7:e1:95:96:d2:5f:dc:2e:9f:21:c1:85:
                    be:f9:ad:09:ee:7f:fd:af:ae:d2:91:fd:7b:ce:29:
                    47:c2:aa:1b:c0:7b:e6:56:ce:41:3c:4b:d4:9d:1e:
                    af:5c:1b:c9:8e:6f:3d:01:ff:b3:21:8f:d2:96:3b:
                    d9:e4:8e:21:93:e1:86:1e:cf:1e:54:49:02:8f:e1:
                    1f:90:fe:55:bf:6a:3b:62:ab:31:4c:01:e2:27:b5:
                    69:7d:9f:3d:aa:30:be:35:3e:d0:db:9d:e2:14:c3:
                    2f:ca:b4:b9:f9:42:b2:e7:1d:6d:9d:82:89:e9:c5:
                    fa:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:33:FA:AB:3B:84:DB:4E:8E:A8:59:46:D7:A0:C3:97:64:D3:14:A3
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YjP6qzuE206OqFlG16DDl2TTFKM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:03:54:b1:82:a1:17:21:93:3e:b8:89:d2:b0:f5:a1:d3:e8:
         fb:b7:f0:0e:05:d7:96:d7:13:a8:35:d3:fa:74:d8:63:54:f3:
         ec:d5:3e:59:87:35:b2:76:80:ed:8c:f1:be:e7:16:b3:f3:1d:
         70:c6:91:fc:65:80:9b:16:d9:9b:de:00:8b:b2:64:78:d7:6a:
         68:0b:31:cc:42:74:f8:11:7c:d8:af:b7:12:ff:c9:a1:c7:bc:
         ed:80:3c:77:c9:f0:eb:9d:61:23:36:23:42:78:01:70:39:44:
         d7:33:74:ef:22:58:a0:aa:ee:c0:5c:47:14:d8:37:81:ac:50:
         1b:13:6c:0f:8b:b1:68:f6:62:68:75:68:31:7a:d4:10:31:be:
         b4:8e:27:ee:a5:92:e9:b9:89:af:9f:57:d3:a8:77:33:21:24:
         fc:78:70:07:84:0a:8c:a9:5e:b0:b2:61:50:8d:cb:20:48:ea:
         1e:14:7b:0c:9a:d9:bd:c4:06:18:7c:9d:91:04:68:1f:ba:5e:
         da:a9:07:3b:89:38:99:d4:8f:25:35:00:ea:f9:c6:20:d8:79:
         e3:58:2f:53:d3:2b:c5:c6:38:2e:62:39:77:9d:05:49:47:1e:
         12:0d:d1:0a:1d:74:fb:ed:60:f5:9b:04:33:be:1a:38:22:f4:
         ef:cb:48:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYcJgulLLqq5sHmC5yHswo52MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwMzIyMTMyOTQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjMzZmFhYjNiODRkYjRlOGVhODU5NDZkN2EwYzM5NzY0ZDMxNGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7af49J+EJ8O/TUfxNEyIql7oZmH
i/ZWhDsOdO/WCqqCk76i7/10+wctfW0Hf5A945jtZD51P0SJnA9WDj/0SOQ/rlz1
PX9IQMhdtEc8vgpaS/yIW9ZCxp2rI8IK5idXb86UdE9h2g2omEigOkx3e5WIaRLA
PBCkhgTS5iw7gb3to4OdI/AF3MXH4ZWW0l/cLp8hwYW++a0J7n/9r67Skf17zilH
wqobwHvmVs5BPEvUnR6vXBvJjm89Af+zIY/SljvZ5I4hk+GGHs8eVEkCj+EfkP5V
v2o7YqsxTAHiJ7VpfZ89qjC+NT7Q253iFMMvyrS5+UKy5x1tnYKJ6cX6qQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGIz+qs7hNtOjqhZRtegw5dk0xSjMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvWWpQNnF6dUUyMDZPcUZsRzE2RERsMlRURktNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQhdMA0G
CSqGSIb3DQEBCwUAA4IBAQAxA1SxgqEXIZM+uInSsPWh0+j7t/AOBdeW1xOoNdP6
dNhjVPPs1T5ZhzWydoDtjPG+5xaz8x1wxpH8ZYCbFtmb3gCLsmR412poCzHMQnT4
EXzYr7cS/8mhx7ztgDx3yfDrnWEjNiNCeAFwOUTXM3TvIligqu7AXEcU2DeBrFAb
E2wPi7Fo9mJodWgxetQQMb60jifupZLpuYmvn1fTqHczIST8eHAHhAqMqV6wsmFQ
jcsgSOoeFHsMmtm9xAYYfJ2RBGgful7aqQc7iTiZ1I8lNQDq+cYg2HnjWC9T0yvF
xjguYjl3nQVJRx4SDdEKHXT77WD1mwQzvho4IvTvy0iq
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:38 2023 by rpki-client on console-ams.rpki-client.org