Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/_cOpqdXJGIaJ8-JF55LW0bRUT5Y.roa
File:                     _cOpqdXJGIaJ8-JF55LW0bRUT5Y.roa (raw, json)
Hash identifier:          GjklOiut9tXRvvaJu9iBZP0fPchNws+cMJmRmcpXt7g=
Subject key identifier:   FD:C3:A9:A9:D5:C9:18:86:89:F3:E2:45:E7:92:D6:D1:B4:54:4F:96
Certificate issuer:       /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial:       018570DE4EA6DE3A7ED9207D92FAA86458A2
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/_cOpqdXJGIaJ8-JF55LW0bRUT5Y.roa
Signing time:             Mon 02 Jan 2023 05:04:55 +0000
ROA not before:           Mon 02 Jan 2023 05:04:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212166
IP address blocks:        193.30.101.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:de:4e:a6:de:3a:7e:d9:20:7d:92:fa:a8:64:58:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
        Validity
            Not Before: Jan  2 05:04:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fdc3a9a9d5c9188689f3e245e792d6d1b4544f96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:55:79:c8:fa:35:f0:da:7b:3f:5a:d6:42:42:
                    46:8c:b0:8e:88:4b:92:a4:15:8c:cd:d6:99:8d:da:
                    49:76:35:3c:d9:db:b0:46:a7:04:59:b7:76:d7:4f:
                    eb:eb:5b:38:13:e5:28:5a:88:f3:e9:8e:81:87:9c:
                    1c:df:e7:a1:ed:34:e5:40:fd:2d:43:fd:ba:38:02:
                    56:da:12:5a:55:e5:1b:0c:4c:bb:d6:db:e1:e0:bb:
                    9b:00:90:20:f5:d0:2d:a0:bb:f7:07:e7:ca:ba:46:
                    4d:ab:e6:61:96:4f:33:b1:e0:d0:b9:3b:7f:e1:69:
                    cc:62:12:9d:53:3b:54:23:f1:bf:bd:de:7f:b0:e2:
                    41:49:bc:5e:97:6d:5e:2d:fc:a0:1b:7b:c3:a4:87:
                    6c:c7:c3:d5:fb:ce:e2:f5:de:5e:74:15:20:be:42:
                    fb:9e:3e:df:7d:d8:df:0c:32:f9:5b:21:1f:3c:9a:
                    00:ef:c4:a8:14:de:28:e7:93:39:17:11:3a:fd:2d:
                    72:cf:02:cc:76:f0:31:50:44:26:ae:9f:6e:a9:2e:
                    17:e4:99:7d:30:15:4c:d8:cc:c8:86:7a:80:da:09:
                    b7:e9:24:eb:a4:ad:dd:52:3b:b5:ec:5e:25:3b:ba:
                    cc:78:e3:96:6e:59:26:7c:e0:3f:e6:9c:dd:aa:0f:
                    e2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C3:A9:A9:D5:C9:18:86:89:F3:E2:45:E7:92:D6:D1:B4:54:4F:96
            X509v3 Authority Key Identifier:
                keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/_cOpqdXJGIaJ8-JF55LW0bRUT5Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.30.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:3e:37:67:e6:08:73:90:af:f3:9e:5c:dc:87:74:21:ef:60:
         b2:2f:3e:7f:ed:3e:7f:1a:e5:be:3e:fa:f2:4f:f4:c7:fe:d1:
         ee:2f:2a:1b:01:19:88:c0:15:22:90:a1:ec:cd:a3:a7:6e:ff:
         4a:d4:e4:16:9a:e0:2c:ab:d1:0b:56:35:aa:ca:3a:86:95:91:
         40:41:72:ec:08:61:6e:8e:b9:93:67:00:f1:a7:ef:ee:e6:8e:
         ec:70:93:dc:85:ea:41:ff:6e:d7:db:73:67:ad:ae:4d:82:aa:
         e3:5c:6c:91:81:8b:a8:53:de:ff:b4:b9:6e:6d:92:02:52:31:
         e5:d4:4b:05:3a:9b:d1:08:69:72:4a:9c:89:6f:d4:be:a6:ce:
         27:36:9a:bc:32:10:4d:6b:b8:c9:4c:7f:96:09:e1:a0:d6:07:
         b9:cc:8d:05:5c:99:8c:a5:99:fb:1b:d0:7a:48:87:86:34:19:
         a4:52:71:b8:33:a3:bd:ae:67:48:1b:12:79:50:24:82:c6:6e:
         c8:ea:3a:33:34:ac:52:0d:c2:58:9c:58:d6:85:39:9a:f6:93:
         b3:19:14:75:fe:aa:6c:56:f5:ce:f5:c4:90:d8:d1:d9:19:ed:
         2e:9d:5d:78:6c:b6:b4:e4:92:4c:da:7d:76:27:14:28:d9:1a:
         6d:52:55:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:48 2023 by rpki-client on console-ams.rpki-client.org