Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/exlOVAqN_HW-rL7HPwpCoVTsvRg.roa
File:                     exlOVAqN_HW-rL7HPwpCoVTsvRg.roa (raw, json)
Hash identifier:          8WhM6qy8aF6I5+mWAh1YeNubB2H1WlfFiAJ5BjON2H4=
Subject key identifier:   7B:19:4E:54:0A:8D:FC:75:BE:AC:BE:C7:3F:0A:42:A1:54:EC:BD:18
Certificate issuer:       /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial:       01860C93CD09DB11C5B06C56C09698FE5DC0
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/exlOVAqN_HW-rL7HPwpCoVTsvRg.roa
Signing time:             Wed 01 Feb 2023 10:44:18 +0000
ROA not before:           Wed 01 Feb 2023 10:44:18 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213332
IP address blocks:        193.233.163.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:0c:93:cd:09:db:11:c5:b0:6c:56:c0:96:98:fe:5d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
        Validity
            Not Before: Feb  1 10:44:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7b194e540a8dfc75beacbec73f0a42a154ecbd18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:12:bd:f6:76:04:c9:26:45:3d:b5:1c:e1:e8:
                    11:56:88:05:60:b1:99:d2:fe:41:d0:dc:27:6f:98:
                    6c:c1:71:53:bf:70:f8:f9:43:77:5e:67:44:bf:19:
                    6f:c0:dc:d7:a2:76:52:89:dc:b4:6d:54:e1:08:00:
                    e0:9c:79:9e:32:cf:d3:9f:cc:e9:0e:69:65:13:ad:
                    ab:e0:88:03:10:36:14:d5:4d:b1:5f:84:61:a0:39:
                    b5:90:0c:6c:69:bb:34:ff:8c:e4:67:ff:ff:09:0a:
                    ba:8e:f0:20:c8:ff:3d:6e:76:0f:26:60:09:8d:02:
                    ca:8d:8a:be:71:86:d6:56:89:51:da:65:4b:bf:cd:
                    ad:da:97:c5:01:c0:68:d8:77:c9:27:1d:6c:4f:0b:
                    58:2f:57:60:b0:c3:5e:4b:7e:53:d4:5a:ff:7b:d7:
                    8a:6b:45:52:8d:fe:c7:41:41:34:c7:9f:aa:34:fe:
                    cc:eb:eb:17:66:c2:bf:3d:7e:ef:11:8f:1c:20:eb:
                    41:7d:fd:72:aa:cd:90:57:32:92:f0:9c:16:9f:a9:
                    f2:4c:4c:f9:51:f8:04:e2:57:f7:c4:a4:33:62:69:
                    6b:a0:66:9c:80:d4:ae:88:f7:5c:87:b9:39:06:ea:
                    5e:fc:ce:3c:4e:17:c2:c5:bb:8a:5c:1d:18:8c:68:
                    b3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:19:4E:54:0A:8D:FC:75:BE:AC:BE:C7:3F:0A:42:A1:54:EC:BD:18
            X509v3 Authority Key Identifier:
                keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/exlOVAqN_HW-rL7HPwpCoVTsvRg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.233.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:f6:17:60:bb:d2:a9:06:68:94:f9:1f:bf:6a:12:1a:0a:d2:
         bd:75:ea:d2:16:b9:a3:5c:f9:0b:dd:57:48:57:ee:47:16:d6:
         d9:bf:e1:c0:84:4d:f8:64:47:49:cf:6e:51:f1:98:77:49:3c:
         0c:6c:5a:8c:72:8a:0b:78:4f:76:83:8a:00:83:93:28:a2:ea:
         43:34:c3:96:e2:b5:d8:b3:21:81:f9:41:ae:55:0b:a6:d9:a6:
         d3:5e:5b:81:e4:0c:70:9d:af:ec:83:11:01:43:2f:9d:53:fc:
         2e:42:f9:b3:6a:09:a7:4d:6d:ee:ca:df:c4:c6:84:07:b2:94:
         3b:5c:3d:b2:31:6b:7f:06:24:f5:d6:85:3b:1c:64:34:1b:b9:
         86:34:3d:a8:b7:0f:96:73:52:d9:04:b7:a1:b1:75:4a:2b:46:
         f0:b8:27:f9:e2:56:f2:b2:cc:7a:c7:5f:a6:34:34:36:eb:57:
         8f:c8:9f:a3:35:e6:c1:d5:28:8c:86:1c:10:43:b1:e6:5e:1b:
         ba:53:27:aa:20:1a:30:2e:63:2b:f5:06:5f:1a:3d:8c:a6:3e:
         80:0c:64:8e:f5:1b:6d:39:71:71:9f:b5:67:5e:34:ea:9a:eb:
         1b:e7:a2:9b:63:bf:98:6e:41:bb:eb:8f:95:ce:c8:a0:b8:36:
         10:7c:f6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:31 2023 by rpki-client on console-ams.rpki-client.org