Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/0Ey6NEhScqZOnks8ou7AGwlSmk4.roa
File:                     0Ey6NEhScqZOnks8ou7AGwlSmk4.roa (raw, json)
Hash identifier:          ffD2kUXVLw7IGBkCCFuPD75GJirtolS5sqVwc9asVy4=
Subject key identifier:   D0:4C:BA:34:48:52:72:A6:4E:9E:4B:3C:A2:EE:C0:1B:09:52:9A:4E
Certificate issuer:       /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial:       0185739009B88A6B65B6BC638D6BCC63C697
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/0Ey6NEhScqZOnks8ou7AGwlSmk4.roa
Signing time:             Mon 02 Jan 2023 17:38:17 +0000
ROA not before:           Mon 02 Jan 2023 17:38:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210718
IP address blocks:        193.31.28.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:90:09:b8:8a:6b:65:b6:bc:63:8d:6b:cc:63:c6:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
        Validity
            Not Before: Jan  2 17:38:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d04cba34485272a64e9e4b3ca2eec01b09529a4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ee:2c:fe:32:67:35:1c:32:18:d4:e6:af:19:
                    e8:ef:3d:df:ae:99:a8:7c:eb:0e:05:0a:5a:63:bc:
                    d9:20:81:27:2d:f7:ff:94:4d:4c:cd:e9:ae:8b:de:
                    0a:8a:83:4f:ba:b4:58:59:b6:b0:eb:d2:14:d2:00:
                    3e:82:70:06:d3:a5:b3:6f:9f:d1:1a:58:78:34:b6:
                    5b:77:e0:03:16:e6:e9:77:3e:c5:75:f5:88:ee:26:
                    58:d6:4c:0b:55:ee:b9:c8:90:83:93:f6:c8:f9:ac:
                    db:2e:38:94:fe:25:63:74:3e:d0:9a:6a:d8:8f:a4:
                    23:89:30:ca:c7:e0:c7:47:8a:9d:c2:42:15:ce:96:
                    6c:b5:89:af:c0:95:f3:39:34:39:51:cb:75:75:a7:
                    90:b4:0a:4b:cb:5e:22:ec:e2:cd:c4:50:cd:25:c7:
                    53:67:d7:b9:fb:d6:f8:c9:fa:a5:e2:36:73:b7:8b:
                    af:4e:bd:d1:2c:b8:ee:57:c7:56:32:ec:38:52:40:
                    29:44:31:e5:5d:1d:d4:6b:db:e2:0e:ec:ae:24:45:
                    bb:b2:7d:3d:b4:a9:c1:cd:0b:6b:21:15:82:70:b8:
                    c1:87:03:d5:ba:f0:be:4f:00:b2:ca:49:18:a2:53:
                    53:3d:6a:2f:34:cf:01:56:8d:6f:c9:9d:03:17:2e:
                    2c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:4C:BA:34:48:52:72:A6:4E:9E:4B:3C:A2:EE:C0:1B:09:52:9A:4E
            X509v3 Authority Key Identifier:
                keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/0Ey6NEhScqZOnks8ou7AGwlSmk4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.31.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:58:66:23:93:18:63:e9:7c:d6:d3:46:8b:1d:d6:b0:d5:9c:
         91:9a:b5:ef:d4:69:46:db:22:3e:bd:62:0f:34:b2:4e:43:6f:
         49:99:22:57:8d:f2:98:cb:1e:d7:7b:70:90:bd:52:3b:84:76:
         99:99:27:53:4b:61:c6:c2:bb:cd:46:86:d7:7f:61:01:03:e6:
         db:e6:eb:1f:a5:d4:bf:23:83:0a:f3:28:4e:dc:0d:0b:09:49:
         c3:a6:b6:ba:0b:a8:24:18:e5:be:cc:62:28:c6:62:b7:f2:c9:
         63:cd:7a:b8:a3:cf:69:2b:a7:3b:a5:c7:a4:63:b7:ef:fc:41:
         e0:07:25:11:a6:8a:38:8f:e2:1a:42:e6:96:55:41:76:68:2e:
         b2:13:65:74:a5:67:6e:63:ae:a4:dd:19:c4:f0:fd:ea:7a:fe:
         d2:7a:2e:f6:4c:8b:ff:8d:07:eb:3b:5d:97:15:53:d1:6a:50:
         aa:53:aa:5f:af:a3:df:f4:79:d0:24:0e:74:bd:da:d5:0a:a9:
         b1:f0:90:bd:45:d1:01:0f:39:58:dc:f4:b6:b0:14:8a:97:d9:
         54:6e:41:64:d6:2b:43:27:68:42:a4:f2:f3:cc:01:2d:84:09:
         45:56:5b:df:5f:9d:3b:39:44:59:81:0e:4e:73:95:97:a8:f3:
         13:7f:85:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:26 2023 by rpki-client on console-ams.rpki-client.org