Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eDjaHooiKwSMsQ0ItZ6tCl0E1vM.roa
File:                     eDjaHooiKwSMsQ0ItZ6tCl0E1vM.roa (raw, json)
Hash identifier:          2KD9cRnGv63R4GXejdBlcAqGL500cPYPzRFBa5t1Mes=
Subject key identifier:   78:38:DA:1E:8A:22:2B:04:8C:B1:0D:08:B5:9E:AD:0A:5D:04:D6:F3
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       0185A0E2EE65A53D5FBB9E97BF91EE31ECB9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eDjaHooiKwSMsQ0ItZ6tCl0E1vM.roa
Signing time:             Wed 11 Jan 2023 12:51:44 +0000
ROA not before:           Wed 11 Jan 2023 12:51:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43607
IP address blocks:        45.8.93.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:a0:e2:ee:65:a5:3d:5f:bb:9e:97:bf:91:ee:31:ec:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Jan 11 12:51:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7838da1e8a222b048cb10d08b59ead0a5d04d6f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:de:58:da:c8:88:14:3b:5e:25:2f:b5:7d:ce:
                    c0:27:81:8c:ca:c3:fd:97:ee:1d:f4:e8:f9:7e:07:
                    cd:cf:65:b7:38:55:23:d2:c8:5d:ef:4c:b1:5e:09:
                    d4:c4:51:14:99:14:2f:1c:1f:5f:58:f5:17:21:c4:
                    9f:18:cd:04:42:c2:90:cc:bd:cf:ee:0a:8e:cf:5f:
                    d8:dd:07:a0:ef:2c:e7:d6:2b:cf:fd:20:ef:8f:41:
                    dd:c9:83:8a:d3:16:ad:c0:fe:b0:84:ea:98:4a:05:
                    05:20:d4:df:9c:33:4b:a5:07:43:bc:c7:41:04:89:
                    02:3c:ec:15:14:2e:01:bf:06:a1:7f:9c:43:f9:57:
                    a4:54:5a:82:d0:4a:fc:53:d1:43:d3:d3:75:37:96:
                    4c:53:a0:e5:59:12:ea:15:e5:71:9d:ae:f4:71:44:
                    ed:76:45:1c:69:91:cd:83:fa:82:7b:32:5c:76:ea:
                    e0:66:87:b3:46:64:a7:a6:fc:b2:35:47:3e:4e:5f:
                    a7:ad:4b:ea:5d:c7:e8:0e:d2:28:cf:e9:8c:fe:85:
                    73:fd:25:68:71:7c:88:d7:7b:87:33:b5:f3:85:12:
                    1c:df:97:8f:aa:75:c2:7c:ee:8c:42:ed:32:5b:13:
                    3d:f5:c9:c7:ff:62:07:57:e0:18:ef:aa:f4:f4:e7:
                    f2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:38:DA:1E:8A:22:2B:04:8C:B1:0D:08:B5:9E:AD:0A:5D:04:D6:F3
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/eDjaHooiKwSMsQ0ItZ6tCl0E1vM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.8.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:f3:68:4a:e5:8a:61:28:23:07:18:45:1a:57:82:3b:b0:6c:
         85:52:7b:f0:88:2f:f9:5d:ef:63:74:37:ed:16:53:da:30:a8:
         4a:8e:18:9d:e6:8a:ac:5e:31:69:aa:78:7a:55:c5:79:75:40:
         4e:05:43:ba:26:8d:d6:8c:b4:9c:85:6f:79:3d:42:5c:39:ae:
         2b:58:22:e0:31:59:89:90:18:df:79:06:bf:48:2c:51:8c:4d:
         c5:9a:51:d7:c8:69:68:c0:4e:82:8b:a4:e3:d2:e9:36:3c:82:
         c6:78:fc:44:0c:5b:1c:d8:df:1a:46:2c:62:de:2a:ee:12:4a:
         ce:e9:8f:33:9c:3b:75:e0:59:52:36:56:20:34:88:9e:52:f6:
         42:dd:13:3d:7c:46:db:a2:b2:5b:0e:19:e9:54:c5:90:b2:32:
         5d:e5:ed:8b:54:48:b2:5e:29:c5:cd:97:26:3c:94:00:d4:6b:
         26:26:3c:5c:ab:35:a8:e0:dd:5a:61:52:02:09:60:bd:85:aa:
         09:09:5f:f5:97:e5:28:2f:3e:08:0e:58:28:94:ba:aa:8d:b3:
         fc:58:f0:d3:90:5d:ee:15:ca:33:bd:61:05:3a:56:7f:a5:fa:
         91:1d:1c:79:5e:6e:db:1b:6a:78:31:3e:1e:a2:c1:c0:a5:7f:
         79:0f:2d:fb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWg4u5lpT1fu56Xv5HuMey5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwMTExMTI1MTQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODM4ZGExZThhMjIyYjA0OGNiMTBkMDhiNTllYWQwYTVkMDRkNmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx95Y2siIFDteJS+1fc7AJ4GMysP9
l+4d9Oj5fgfNz2W3OFUj0shd70yxXgnUxFEUmRQvHB9fWPUXIcSfGM0EQsKQzL3P
7gqOz1/Y3Qeg7yzn1ivP/SDvj0HdyYOK0xatwP6whOqYSgUFINTfnDNLpQdDvMdB
BIkCPOwVFC4Bvwahf5xD+VekVFqC0Er8U9FD09N1N5ZMU6DlWRLqFeVxna70cUTt
dkUcaZHNg/qCezJcdurgZoezRmSnpvyyNUc+Tl+nrUvqXcfoDtIoz+mM/oVz/SVo
cXyI13uHM7XzhRIc35ePqnXCfO6MQu0yWxM99cnH/2IHV+AY76r09OfyrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHg42h6KIisEjLENCLWerQpdBNbzMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvZURqYUhvb2lLd1NNc1EwSXRaNnRDbDBFMXZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQhdMA0G
CSqGSIb3DQEBCwUAA4IBAQAr82hK5YphKCMHGEUaV4I7sGyFUnvwiC/5Xe9jdDft
FlPaMKhKjhid5oqsXjFpqnh6VcV5dUBOBUO6Jo3WjLSchW95PUJcOa4rWCLgMVmJ
kBjfeQa/SCxRjE3FmlHXyGlowE6Ci6Tj0uk2PILGePxEDFsc2N8aRixi3iruEkrO
6Y8znDt14FlSNlYgNIieUvZC3RM9fEbborJbDhnpVMWQsjJd5e2LVEiyXinFzZcm
PJQA1GsmJjxcqzWo4N1aYVICCWC9haoJCV/1l+UoLz4IDlgolLqqjbP8WPDTkF3u
FcozvWEFOlZ/pfqRHRx5Xm7bG2p4MT4eosHApX95Dy37
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:40 2023 by rpki-client on console-ams.rpki-client.org