Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/dTDJJnDEgvFXnq8TQwe4RguVNT0.roa
File:                     dTDJJnDEgvFXnq8TQwe4RguVNT0.roa (raw, json)
Hash identifier:          /2TW0LlACXny5Kq09x2SlLUxByEhqOjbA8346v1jONs=
Subject key identifier:   75:30:C9:26:70:C4:82:F1:57:9E:AF:13:43:07:B8:46:0B:95:35:3D
Certificate issuer:       /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial:       018570F0A2BC61F61C8E3F13B40AE7A71D10
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/dTDJJnDEgvFXnq8TQwe4RguVNT0.roa
Signing time:             Mon 02 Jan 2023 05:24:56 +0000
ROA not before:           Mon 02 Jan 2023 05:24:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     20454
IP address blocks:        92.119.183.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:f0:a2:bc:61:f6:1c:8e:3f:13:b4:0a:e7:a7:1d:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
        Validity
            Not Before: Jan  2 05:24:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7530c92670c482f1579eaf134307b8460b95353d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a8:48:1d:09:68:a0:81:4a:2a:95:24:00:2d:
                    20:5f:fe:e3:e1:7f:d1:8e:f8:99:12:c2:d6:41:2e:
                    40:f7:5b:19:a4:3e:a6:26:51:dd:f7:98:45:4f:d8:
                    a5:b9:7f:7d:f8:39:28:6d:76:81:f4:c9:b9:91:0a:
                    1e:39:c4:07:67:3c:da:6a:34:98:d1:c5:03:44:bc:
                    89:6e:88:77:2f:ab:c2:a0:82:40:d3:34:91:f2:38:
                    a9:cd:c8:7a:29:61:8b:00:fa:41:3a:77:cf:95:c6:
                    a3:fa:6b:8a:a0:4b:9e:47:a0:d9:9a:69:8a:73:ca:
                    7b:08:2c:dd:6a:50:a7:cf:fa:a9:42:d2:62:a7:f5:
                    ad:50:ec:3e:be:5d:b2:38:d8:5e:65:63:ed:7a:62:
                    45:9a:d0:60:b9:ea:71:e6:f2:fd:d9:48:39:50:34:
                    a4:ce:8d:c3:bc:42:42:d1:88:e3:2e:0e:7b:56:4a:
                    48:56:81:a7:1a:1f:57:17:3c:34:06:aa:19:46:94:
                    3b:5f:1f:e3:5c:55:13:cf:1e:69:5e:07:4a:e2:ff:
                    03:63:7a:ca:38:c3:24:6f:04:99:b0:5d:bf:64:18:
                    0d:a8:be:3c:0e:16:af:c3:33:5b:aa:a5:66:29:d2:
                    70:b8:39:54:95:9f:15:2c:9e:f6:be:cd:c0:d0:88:
                    ec:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:30:C9:26:70:C4:82:F1:57:9E:AF:13:43:07:B8:46:0B:95:35:3D
            X509v3 Authority Key Identifier:
                keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/dTDJJnDEgvFXnq8TQwe4RguVNT0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.119.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:36:e0:e3:6a:4e:95:67:3a:8e:0c:48:e1:3e:b0:3f:a3:55:
         bc:ad:a4:e5:a7:26:f9:ca:87:2a:fd:fc:6c:4d:50:24:3b:91:
         26:28:a0:8e:9a:2f:8c:93:59:f2:91:cc:18:8a:99:f0:e4:0d:
         50:46:e1:1e:a8:bf:8c:84:c7:cf:ba:f2:5a:05:72:e6:73:59:
         2c:5a:33:f2:e8:42:98:c2:e9:fe:36:75:59:0d:9c:02:e1:d3:
         b7:32:5c:5c:d4:52:d7:cc:32:53:fd:84:75:d2:1f:d1:29:f6:
         95:a3:e3:5a:65:89:a5:e6:38:0d:3f:67:bc:77:65:2e:93:aa:
         71:13:6f:ad:0e:59:d3:ec:6a:9b:67:6f:59:ee:c3:ab:ec:84:
         44:73:01:aa:a0:9d:db:ad:e0:09:77:b2:9c:01:bf:62:d4:14:
         f6:d0:23:5b:eb:ee:c0:f8:44:5d:7d:6e:de:61:59:6a:82:4d:
         07:3c:15:a2:dc:57:81:c9:e0:3d:84:12:90:27:76:e3:9d:c2:
         24:d5:5b:ab:89:84:64:c4:39:44:21:5b:7c:84:48:85:b7:95:
         a3:45:2c:96:dc:a1:e6:73:fd:af:fe:d9:2d:36:dd:1f:78:1c:
         b7:b6:a3:d0:41:06:e3:dd:83:04:27:91:05:c6:d9:60:5d:3b:
         c1:49:c6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:06 2023 by rpki-client on console-ams.rpki-client.org