Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/keSI97vFY-6Z1LYGBK50sW5MREM.roa
File:                     keSI97vFY-6Z1LYGBK50sW5MREM.roa (raw, json)
Hash identifier:          Owzme60S7ZMyzfK6DJiyQ5MBxWvGs/Jljf1I5ERRjIw=
Subject key identifier:   91:E4:88:F7:BB:C5:63:EE:99:D4:B6:06:04:AE:74:B1:6E:4C:44:43
Certificate issuer:       /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial:       018631E099209A642DA4D68848DE407F39E0
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/keSI97vFY-6Z1LYGBK50sW5MREM.roa
Signing time:             Wed 08 Feb 2023 16:34:08 +0000
ROA not before:           Wed 08 Feb 2023 16:34:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2914
IP address blocks:        193.30.101.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:31:e0:99:20:9a:64:2d:a4:d6:88:48:de:40:7f:39:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
        Validity
            Not Before: Feb  8 16:34:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=91e488f7bbc563ee99d4b60604ae74b16e4c4443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:37:8e:bf:d0:19:2b:2f:79:a1:92:54:b3:bb:
                    78:cb:fe:86:a4:40:5a:04:a9:c6:44:42:f4:9f:16:
                    29:35:bf:1d:ff:4b:f5:eb:9a:55:ff:36:1a:f8:51:
                    22:b2:ec:d9:8a:8d:af:06:e6:94:23:59:d3:db:67:
                    0c:de:64:81:fe:62:64:47:9a:7f:24:93:3d:f9:62:
                    87:f9:67:db:64:5b:f3:0f:7e:b2:03:ca:2a:0e:0b:
                    0a:63:5e:bb:47:00:b2:2f:a2:e5:eb:b3:8b:6f:3b:
                    0d:2d:58:13:70:2c:83:7c:c9:c5:f6:2d:ed:3c:31:
                    a5:1c:de:ef:e8:fa:70:8f:23:8b:e3:f2:0f:ea:9a:
                    73:99:c1:dd:1a:50:91:8d:e9:a0:01:4b:a4:53:64:
                    8a:8e:2d:75:cf:40:1b:f6:3d:1b:73:35:b9:a2:25:
                    8d:15:2a:d6:f9:02:da:5b:cb:8d:12:8f:63:56:e9:
                    a6:43:f6:fa:cb:ff:ac:97:5d:95:84:54:5b:02:2a:
                    8a:a1:71:e3:46:98:e4:54:34:6f:4c:2b:aa:8b:3a:
                    97:86:7e:7b:82:86:6e:d5:18:89:8b:3e:2e:84:1f:
                    b0:1a:a8:b0:92:ed:3d:44:fd:49:8f:0f:ec:6a:fb:
                    38:84:97:d5:c5:b4:76:ff:0b:05:2d:4e:2c:f8:5e:
                    07:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:E4:88:F7:BB:C5:63:EE:99:D4:B6:06:04:AE:74:B1:6E:4C:44:43
            X509v3 Authority Key Identifier:
                keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/keSI97vFY-6Z1LYGBK50sW5MREM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.30.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:47:c7:f8:c0:9e:a6:bf:44:7a:b3:18:4c:91:53:b6:59:f1:
         bf:e7:93:2c:02:da:3a:dd:d0:54:ba:a9:b6:87:52:dd:60:01:
         8f:4a:9c:ea:a7:ca:68:5b:5d:7e:6b:a5:2b:23:2c:0f:dd:5d:
         50:a9:cb:a2:84:1f:52:dd:6a:e6:91:20:fc:68:00:30:5b:3c:
         ac:5c:47:91:8b:2c:a2:b4:88:05:cc:10:20:ec:0c:a4:d9:dd:
         e2:8b:90:fe:e3:dc:c6:4a:4e:5e:7e:5d:00:41:9d:6d:b6:0b:
         63:88:ca:72:1e:c6:82:a2:0e:3a:06:cb:4b:f4:91:6e:a2:e8:
         20:d6:02:70:54:4c:aa:04:cd:2f:3f:d2:ef:60:e0:40:cc:bb:
         f0:7b:2d:09:4a:37:f4:ca:a6:4a:6d:38:c2:38:08:5f:14:1d:
         e6:b9:cb:54:bf:dc:fa:b0:8e:aa:d7:ed:df:d9:b0:97:dd:bd:
         c4:4e:3b:f9:a4:a0:95:9c:22:22:47:14:a2:be:15:11:1d:24:
         cc:ef:6d:73:7c:71:39:56:3b:47:4c:b8:d1:aa:1f:4b:74:f0:
         4a:17:75:28:16:94:e9:b0:25:2f:8a:98:3c:2e:b9:c8:e9:0d:
         e6:83:ad:58:9d:f8:4c:97:25:33:3d:35:e4:50:99:ba:96:fe:
         7b:a9:32:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:48 2023 by rpki-client on console-ams.rpki-client.org