Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/y7Hyezm6ZZo7eg-WsqRWl8qVPek.roa
File:                     y7Hyezm6ZZo7eg-WsqRWl8qVPek.roa (raw, json)
Hash identifier:          /pRC2TMVUY9tpb+RLxR+Y93qUEq4rEnlrFtyesNOXd0=
Subject key identifier:   CB:B1:F2:7B:39:BA:65:9A:3B:7A:0F:96:B2:A4:56:97:CA:95:3D:E9
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       0189DE5859475E53F4FE61CD038BA30CCE25
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/y7Hyezm6ZZo7eg-WsqRWl8qVPek.roa
Signing time:             Thu 10 Aug 2023 07:27:59 +0000
ROA not before:           Thu 10 Aug 2023 07:27:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49217
IP address blocks:        80.76.48.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:de:58:59:47:5e:53:f4:fe:61:cd:03:8b:a3:0c:ce:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Aug 10 07:27:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cbb1f27b39ba659a3b7a0f96b2a45697ca953de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:88:04:e3:05:ce:6a:33:b8:24:9f:a2:d2:67:
                    15:f1:51:52:41:6a:df:89:91:9e:b2:5b:bc:fd:9e:
                    4f:4b:11:f2:8b:14:46:f5:b7:65:79:b5:de:aa:bb:
                    99:b2:76:3f:f4:b3:7e:24:27:f9:f4:2e:55:b4:1a:
                    8b:c6:8a:f8:60:52:f9:b5:be:d2:6c:03:ed:c6:ef:
                    12:72:fb:13:3d:b9:ee:3e:bc:bd:98:a8:31:73:cb:
                    ae:52:a3:d4:3c:8f:89:49:76:d9:09:d0:f4:8c:16:
                    db:62:38:f1:57:00:58:a3:b8:bf:26:f7:b7:58:d8:
                    97:5d:fc:d4:88:b6:6a:66:9b:be:7f:ac:f3:89:bc:
                    3f:50:2f:e1:51:47:99:97:fc:2a:d5:f0:e6:8b:18:
                    86:63:ea:6d:49:50:87:92:ac:42:13:11:e5:a8:06:
                    f3:17:03:e1:dc:19:16:f1:1a:fc:0c:85:b5:fe:72:
                    b0:f1:ba:4f:75:1d:2a:27:9d:05:36:71:e8:d4:d0:
                    b8:3d:7b:3e:ac:b2:60:2a:a5:47:f1:60:d9:e9:ae:
                    b1:98:a6:9e:85:33:60:6f:f8:ca:54:04:5c:f4:5d:
                    7e:b6:f9:5e:83:8c:df:7d:2e:7a:3e:b8:d9:b3:87:
                    a6:c4:7f:4f:82:f0:db:49:41:e3:14:cc:aa:1c:27:
                    27:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B1:F2:7B:39:BA:65:9A:3B:7A:0F:96:B2:A4:56:97:CA:95:3D:E9
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/y7Hyezm6ZZo7eg-WsqRWl8qVPek.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.76.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:81:a5:79:e7:9c:73:32:d4:92:1f:e6:64:44:0d:9c:be:ff:
         69:3b:50:3d:8d:f6:c9:0e:0a:6f:2e:e6:2e:3d:61:b3:da:2e:
         b7:81:87:63:79:9e:10:43:bd:86:e3:97:ee:1a:b9:cd:49:67:
         e7:5c:0b:6a:0f:df:98:af:15:ff:90:31:47:11:66:19:d2:c1:
         02:b2:fd:db:1e:e6:ad:4c:df:1e:3b:d9:17:1b:9c:46:06:fa:
         ea:c6:ab:34:93:cf:97:7d:85:62:27:57:89:09:fe:e2:2f:12:
         21:41:59:fb:11:0d:8a:4b:9c:79:1d:ce:98:7f:39:e1:a4:06:
         e4:32:97:46:2f:ef:61:5f:f1:eb:dc:b3:cd:62:f8:43:58:2b:
         50:18:8e:6e:24:b9:11:38:88:28:d8:ee:8d:69:5b:46:40:82:
         c5:3c:b2:19:36:0f:ce:a6:6c:31:f5:6b:d4:9c:55:6c:5c:bc:
         83:56:42:e6:89:7f:7b:8a:d1:05:ca:37:cb:3e:2a:51:6f:d2:
         54:c3:46:81:c9:84:6c:36:ff:fd:f5:29:4e:6f:8b:dc:7e:48:
         67:83:bb:62:7d:bd:0f:ce:58:67:06:6a:73:32:61:0c:20:55:
         1b:22:27:16:71:00:93:cb:2c:e5:e0:d0:ee:e0:60:a2:f0:6d:
         18:0a:c4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 8 09:43:41 2023 by rpki-client on console-ams.rpki-client.org