Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/f3llYhjj0UY6n0C2SHLJR6x-Qfk.roa
File:                     f3llYhjj0UY6n0C2SHLJR6x-Qfk.roa (raw, json)
Hash identifier:          qlpdXyHONl0t5cBo4b8HY+SOFl7qXZWoVO+4vXUwQV4=
Subject key identifier:   7F:79:65:62:18:E3:D1:46:3A:9F:40:B6:48:72:C9:47:AC:7E:41:F9
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       018587D42EFD0410742D3C501558DF4B1C24
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/f3llYhjj0UY6n0C2SHLJR6x-Qfk.roa
Signing time:             Fri 06 Jan 2023 16:05:07 +0000
ROA not before:           Fri 06 Jan 2023 16:05:07 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     20473
IP address blocks:        195.178.110.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:87:d4:2e:fd:04:10:74:2d:3c:50:15:58:df:4b:1c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Jan  6 16:05:07 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7f79656218e3d1463a9f40b64872c947ac7e41f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:29:42:21:eb:4e:51:00:e6:ce:c7:6c:e2:94:
                    3c:92:bf:23:5a:99:5b:4a:59:da:a5:e2:5a:61:09:
                    3d:f5:cc:8f:cb:c3:04:15:af:bd:16:c9:74:ae:e2:
                    ea:0c:bd:d4:8f:d8:c9:21:bc:9d:46:c5:af:5c:ca:
                    49:8b:52:07:14:a1:48:ec:12:85:c5:50:7f:d3:73:
                    14:0a:26:a4:9f:75:7b:0f:a6:1f:97:ae:0a:68:88:
                    92:cf:80:54:32:48:4f:c1:92:3a:c4:cb:d5:25:38:
                    8e:b2:f0:45:70:06:13:d9:97:19:c4:eb:02:ab:0d:
                    04:12:d5:67:a8:c2:ee:8b:38:c2:ef:ec:da:dc:ef:
                    c2:2f:9c:c3:93:8a:fc:14:4a:cb:22:da:3e:0b:ae:
                    1b:4a:a9:f2:77:16:6c:2b:c6:07:0d:72:82:43:b5:
                    09:ca:17:20:ab:3d:a3:bd:da:47:65:3e:7a:ea:5d:
                    38:86:e9:cd:7e:f5:5b:93:54:23:f7:13:f1:34:4c:
                    56:b7:6a:ab:b4:0d:6c:39:05:93:1c:e9:1e:d3:16:
                    64:61:96:d7:f7:aa:d9:0d:f0:05:d5:ab:f0:74:7c:
                    bf:c0:90:63:89:59:e9:43:17:4a:66:9c:9b:86:a6:
                    40:b5:cf:72:32:1a:fd:78:b2:56:bf:bd:85:08:5a:
                    2a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:79:65:62:18:E3:D1:46:3A:9F:40:B6:48:72:C9:47:AC:7E:41:F9
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/f3llYhjj0UY6n0C2SHLJR6x-Qfk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.178.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:b5:d2:fd:90:14:64:d3:31:bc:23:ed:86:fc:ac:4e:f1:e0:
         c3:e3:41:17:c6:81:88:43:8e:6d:f1:58:02:73:65:9a:98:b8:
         9c:fa:5e:44:a2:55:30:13:d4:e2:0c:a6:ba:9a:c8:71:11:a0:
         76:ff:13:4c:5b:01:29:d5:d5:43:5d:b9:06:d9:32:93:7a:58:
         d9:3b:60:33:0f:15:9a:bf:cb:eb:b3:66:1c:85:30:96:6a:24:
         8b:de:68:62:65:68:df:9c:bb:ce:5c:4c:b3:cb:ad:1f:38:c7:
         44:a0:4e:e7:c5:89:fd:99:76:69:53:24:d5:b4:93:5d:e8:48:
         2d:d8:95:dd:c3:42:e9:78:3d:43:43:58:eb:d6:41:e7:02:72:
         29:b8:90:c7:15:03:6d:e4:88:98:3f:18:ab:47:a4:72:e3:13:
         ff:cf:db:05:d5:c9:d5:2e:e5:9d:85:03:b2:de:6b:78:38:68:
         53:73:c0:18:ec:f4:90:68:47:9f:4f:13:d9:44:d6:0e:4f:21:
         69:64:48:06:29:b6:d5:49:21:ad:1f:31:b1:1c:c6:65:28:83:
         6c:b6:0b:28:ad:0a:72:7d:b2:99:85:c5:4e:1e:bf:4f:07:eb:
         03:55:8d:50:0a:91:15:6f:57:f3:65:d0:c4:98:c7:30:2c:08:
         78:85:6f:7f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWH1C79BBB0LTxQFVjfSxwkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwMTA2MTYwNTA3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Zjc5NjU2MjE4ZTNkMTQ2M2E5ZjQwYjY0ODcyYzk0N2FjN2U0MWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsClCIetOUQDmzsds4pQ8kr8jWplb
SlnapeJaYQk99cyPy8MEFa+9Fsl0ruLqDL3Uj9jJIbydRsWvXMpJi1IHFKFI7BKF
xVB/03MUCiakn3V7D6Yfl64KaIiSz4BUMkhPwZI6xMvVJTiOsvBFcAYT2ZcZxOsC
qw0EEtVnqMLuizjC7+za3O/CL5zDk4r8FErLIto+C64bSqnydxZsK8YHDXKCQ7UJ
yhcgqz2jvdpHZT566l04hunNfvVbk1Qj9xPxNExWt2qrtA1sOQWTHOke0xZkYZbX
96rZDfAF1avwdHy/wJBjiVnpQxdKZpybhqZAtc9yMhr9eLJWv72FCFoqCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH95ZWIY49FGOp9AtkhyyUesfkH5MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvZjNsbFloamowVVk2bjBDMlNITEpSNngtUWZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7JuMA0G
CSqGSIb3DQEBCwUAA4IBAQAitdL9kBRk0zG8I+2G/KxO8eDD40EXxoGIQ45t8VgC
c2WamLic+l5EolUwE9TiDKa6mshxEaB2/xNMWwEp1dVDXbkG2TKTeljZO2AzDxWa
v8vrs2YchTCWaiSL3mhiZWjfnLvOXEyzy60fOMdEoE7nxYn9mXZpUyTVtJNd6Egt
2JXdw0LpeD1DQ1jr1kHnAnIpuJDHFQNt5IiYPxirR6Ry4xP/z9sF1cnVLuWdhQOy
3mt4OGhTc8AY7PSQaEefTxPZRNYOTyFpZEgGKbbVSSGtHzGxHMZlKINstgsorQpy
fbKZhcVOHr9PB+sDVY1QCpEVb1fzZdDEmMcwLAh4hW9/
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:40 2023 by rpki-client on console-ams.rpki-client.org