Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/9113c7-fc3b-47c0-bca6-fe39a2553a5e/1/N49IhQJQzca0GkaUDE_j5ahSNBg.roa
File:                     N49IhQJQzca0GkaUDE_j5ahSNBg.roa (raw, json)
Hash identifier:          HUgznhBRlIl9ldleDFsatm2reneRwJqtS1jcXf/9RPM=
Subject key identifier:   37:8F:48:85:02:50:CD:C6:B4:1A:46:94:0C:4F:E3:E5:A8:52:34:18
Certificate issuer:       /CN=eead7e8a2349f402a87bfb32ab6e9946f8c4c3f0
Certificate serial:       0185708CC70CA7BC252D59A34DA7361CF005
Authority key identifier: EE:AD:7E:8A:23:49:F4:02:A8:7B:FB:32:AB:6E:99:46:F8:C4:C3:F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7q1-iiNJ9AKoe_syq26ZRvjEw_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/9113c7-fc3b-47c0-bca6-fe39a2553a5e/1/N49IhQJQzca0GkaUDE_j5ahSNBg.roa
Signing time:             Mon 02 Jan 2023 03:35:52 +0000
ROA not before:           Mon 02 Jan 2023 03:35:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206610
IP address blocks:        194.147.93.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:8c:c7:0c:a7:bc:25:2d:59:a3:4d:a7:36:1c:f0:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eead7e8a2349f402a87bfb32ab6e9946f8c4c3f0
        Validity
            Not Before: Jan  2 03:35:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=378f48850250cdc6b41a46940c4fe3e5a8523418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2c:39:9c:18:16:e4:4e:7b:79:a9:3c:19:1a:
                    fd:6f:cf:33:b7:62:4e:cb:97:af:5b:f1:7d:a3:73:
                    ab:c3:c7:7d:b6:6d:6c:03:0b:4e:b7:12:e0:55:ea:
                    4a:d7:b7:30:a8:11:b1:8e:5f:bc:0b:3e:b1:57:3c:
                    c6:63:18:99:5c:8e:4e:99:57:a8:60:a4:58:7c:67:
                    19:02:39:fd:e4:19:5a:3e:f7:a2:7a:30:25:05:01:
                    81:7f:36:91:dc:6c:a7:2c:13:a2:be:aa:bd:ae:95:
                    00:33:74:ba:57:f3:25:97:af:71:81:0e:e7:0f:19:
                    25:1c:73:b8:09:1f:c4:c8:8e:15:b3:6d:8d:1e:85:
                    96:9a:0b:a1:9f:5e:b5:38:13:cb:43:2e:fb:5c:59:
                    b1:35:db:ef:3e:87:c5:9e:17:28:5c:e6:28:75:08:
                    57:e0:70:d2:bb:d4:6b:e3:76:d7:f2:4d:59:4a:3a:
                    7b:32:80:aa:88:96:f1:9a:2c:97:8d:07:76:ee:06:
                    60:9d:8e:a2:ec:13:d7:3f:19:22:f8:f4:f7:3a:f5:
                    76:f5:6e:a7:2e:8a:ed:37:46:b8:bd:8a:c7:f8:83:
                    32:50:f1:0f:22:e7:be:1a:89:9e:54:b9:78:de:6c:
                    f4:c6:db:d6:24:06:66:8e:d8:5d:92:06:61:47:5e:
                    6c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:8F:48:85:02:50:CD:C6:B4:1A:46:94:0C:4F:E3:E5:A8:52:34:18
            X509v3 Authority Key Identifier:
                keyid:EE:AD:7E:8A:23:49:F4:02:A8:7B:FB:32:AB:6E:99:46:F8:C4:C3:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7q1-iiNJ9AKoe_syq26ZRvjEw_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/9113c7-fc3b-47c0-bca6-fe39a2553a5e/1/N49IhQJQzca0GkaUDE_j5ahSNBg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/9113c7-fc3b-47c0-bca6-fe39a2553a5e/1/7q1-iiNJ9AKoe_syq26ZRvjEw_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.147.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:a8:ca:a9:dd:85:ae:ad:cd:fc:f2:29:73:b9:5b:cf:f1:32:
         fa:4b:ae:54:05:d5:06:31:15:17:92:11:28:4e:df:4b:f8:0d:
         a0:32:7c:0a:c0:e2:d3:d4:98:7f:76:9a:00:9e:47:c2:40:92:
         55:c5:d9:ba:82:ac:16:6d:51:f5:19:84:f4:80:33:d1:e9:4a:
         eb:d5:17:6f:47:94:56:d1:50:cd:5c:44:4c:5a:0e:fe:2b:60:
         87:31:05:8b:7f:af:e1:07:4e:e1:c3:05:4b:c9:a5:90:31:48:
         06:e1:2c:ef:55:4a:8a:d3:6e:37:ec:d6:88:bb:00:b2:8c:8e:
         f8:77:3c:bf:1e:7e:c9:d2:3d:f9:c0:0c:e5:0b:48:61:7d:12:
         0f:30:44:6a:56:11:61:77:fd:17:f7:af:68:03:c9:38:80:32:
         9e:f8:30:5e:7c:e1:aa:05:e3:1a:f9:13:0f:fb:e2:0c:52:40:
         d1:9d:19:91:43:31:95:8f:73:e5:71:2a:8f:e3:08:18:f8:ab:
         57:55:ee:f4:2f:b3:eb:90:b9:2f:10:31:ff:77:11:a9:01:e3:
         3a:f5:6a:77:76:a9:58:5e:90:04:9f:9e:cf:91:09:16:39:85:
         1e:f5:8b:b6:7d:c2:cf:4c:7b:fb:08:9a:f1:f2:e1:03:d4:a5:
         9c:74:31:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:06 2024 by rpki-client on console-fra.rpki-client.org