Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_jZzMH5Z38iXfPjpT94-GTGlTMY.roa
File:                     _jZzMH5Z38iXfPjpT94-GTGlTMY.roa (raw, json)
Hash identifier:          fviOL+tER0UamG6JHiqGkQ/19FrLRTf9+Ee2noa8RbM=
Subject key identifier:   FE:36:73:30:7E:59:DF:C8:97:7C:F8:E9:4F:DE:3E:19:31:A5:4C:C6
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       01856D81F0789FC2B294706F2D2A472897F2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_jZzMH5Z38iXfPjpT94-GTGlTMY.roa
Signing time:             Sun 01 Jan 2023 13:25:10 +0000
ROA not before:           Sun 01 Jan 2023 13:25:10 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49421
IP address blocks:        2a00:1728:2a::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:81:f0:78:9f:c2:b2:94:70:6f:2d:2a:47:28:97:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Jan  1 13:25:10 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fe3673307e59dfc8977cf8e94fde3e1931a54cc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:71:1f:64:5f:b6:4d:89:a0:f1:f1:4a:9b:18:
                    9f:c2:e7:9b:b6:ea:88:74:8f:0c:38:8e:08:37:a2:
                    e6:57:7c:f6:12:68:65:22:8b:3d:18:22:32:64:77:
                    aa:2b:24:0b:7f:22:ae:fe:4a:88:5d:e3:cd:b5:d7:
                    1e:8d:35:df:f1:f7:ba:ca:c5:8f:98:e0:d8:cf:b3:
                    ed:78:2f:51:7b:93:8e:c1:6d:39:15:82:d9:e5:9e:
                    51:e8:38:cf:25:5e:58:be:ff:d3:92:bd:5b:ef:84:
                    7e:ef:c9:b4:1c:30:0d:d8:56:f6:1d:22:99:43:cc:
                    ae:87:6a:6f:9f:a7:8b:4c:94:02:55:cf:71:87:43:
                    95:ad:a3:05:7f:69:39:31:e5:84:1d:28:e3:70:c7:
                    0b:42:5c:5b:30:d8:9f:b3:4e:dc:2e:93:1d:f2:96:
                    cf:1b:ae:f8:4f:5a:04:97:7b:72:78:b4:ae:d2:76:
                    7b:77:0a:ed:4d:4b:7b:e0:de:c9:42:c7:13:23:5c:
                    1f:89:67:99:a2:15:c4:94:d6:56:f5:f3:85:22:8f:
                    49:d4:c4:93:6a:ec:61:36:54:9f:d1:8d:dd:30:66:
                    af:09:ed:93:b0:cf:20:e7:62:e3:4d:df:30:15:9d:
                    cd:0c:66:cd:5a:cc:f6:14:15:e5:92:5f:4a:f9:e3:
                    c7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:36:73:30:7E:59:DF:C8:97:7C:F8:E9:4F:DE:3E:19:31:A5:4C:C6
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_jZzMH5Z38iXfPjpT94-GTGlTMY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a00:1728:2a::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:05:c6:57:51:f1:3d:3d:d2:2d:fc:85:b9:47:01:7f:52:40:
         85:57:e6:4f:ca:50:92:e9:16:d7:3f:0c:9f:94:af:5c:7d:99:
         f4:fe:c2:9d:9d:79:0d:e3:2b:74:54:d4:15:95:5f:96:16:26:
         2c:d5:af:f4:19:38:24:05:8a:5f:40:e5:f2:81:26:d5:97:f0:
         a5:6b:da:d7:d1:a2:83:97:45:9f:a1:03:e1:f5:5d:67:a4:b0:
         a2:11:1d:94:5b:a4:a2:b7:e9:76:9d:73:94:4f:1b:24:65:32:
         93:6d:6f:0f:0b:2c:75:dd:06:d8:42:2a:9e:80:91:e4:80:28:
         4f:df:bc:c2:33:5c:4d:e5:30:1b:95:52:b6:cd:ac:c6:84:c9:
         bb:58:dc:08:36:6b:4f:d9:48:35:cf:02:67:49:14:a2:27:0a:
         f5:38:2e:d2:d7:88:64:c6:6a:c3:8e:81:ce:3b:66:cf:73:55:
         56:54:50:7c:58:07:0b:30:fd:28:e9:72:ad:24:39:bd:d1:5a:
         73:ac:1f:0a:8b:67:c3:cf:fe:81:61:9f:19:e7:e7:80:20:1f:
         3f:56:1e:31:ba:c5:8d:51:b1:a7:86:f7:e4:39:9b:bd:55:9a:
         c1:a5:dc:9d:8d:ff:92:7d:3b:8f:b5:41:26:b4:c8:a5:75:92:
         16:2c:0b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:18:48 2024 by rpki-client on console-fra.rpki-client.org