Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/eLKi_omp7MuFHZ5o74dmu0ljhNk.roa
File:                     eLKi_omp7MuFHZ5o74dmu0ljhNk.roa (raw, json)
Hash identifier:          BdwWcp6tFHh5Z1fszcr6py6XaNPHBrT46wnCFN7Lrs4=
Subject key identifier:   78:B2:A2:FE:89:A9:EC:CB:85:1D:9E:68:EF:87:66:BB:49:63:84:D9
Certificate issuer:       /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial:       0186BD12A4D6F7506846D84CA05FBF532CCD
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/eLKi_omp7MuFHZ5o74dmu0ljhNk.roa
Signing time:             Tue 07 Mar 2023 17:16:00 +0000
ROA not before:           Tue 07 Mar 2023 17:16:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        85.202.161.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:bd:12:a4:d6:f7:50:68:46:d8:4c:a0:5f:bf:53:2c:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
        Validity
            Not Before: Mar  7 17:16:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=78b2a2fe89a9eccb851d9e68ef8766bb496384d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:32:9d:49:70:57:0c:18:76:b2:a1:a1:45:f0:
                    fb:28:c7:34:9f:7d:26:56:dc:a7:61:0f:ce:12:b7:
                    70:21:8f:d7:65:8f:4f:84:6b:15:91:a0:70:a6:43:
                    6a:81:ba:a0:ee:33:12:d9:a3:53:77:a1:64:9d:69:
                    58:30:d4:7e:be:78:85:5d:8a:c5:63:db:64:6c:94:
                    23:02:c3:d1:52:2c:5b:cf:2b:64:cb:ed:20:a7:a9:
                    07:e8:f7:dd:fa:52:bc:55:b8:7d:29:b8:dd:e9:30:
                    71:9c:92:6f:3e:44:80:71:d6:09:4f:39:22:a3:9a:
                    99:ba:26:fa:b7:96:33:be:52:00:66:c7:43:9b:73:
                    80:ca:da:d4:a0:6e:d0:76:01:a3:f8:9b:7e:97:d0:
                    65:1d:77:97:dc:c4:3d:c0:13:cd:0d:8d:80:ff:a9:
                    15:8e:a0:e7:26:fa:49:1e:58:42:c6:a0:2a:7a:e2:
                    04:4f:91:99:a7:6e:26:ed:55:fd:45:6d:23:95:69:
                    57:d3:ea:60:7c:c9:f5:0c:28:33:9b:5c:5b:38:8a:
                    c5:3d:c6:7e:bf:fa:b9:4d:3c:88:40:33:45:4c:65:
                    a1:04:e0:a4:94:f4:b8:01:92:26:95:f5:77:35:2f:
                    0e:6a:10:3f:c8:11:a2:38:d2:7e:6e:1e:88:9e:b0:
                    9c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B2:A2:FE:89:A9:EC:CB:85:1D:9E:68:EF:87:66:BB:49:63:84:D9
            X509v3 Authority Key Identifier:
                keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/eLKi_omp7MuFHZ5o74dmu0ljhNk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.202.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:14:3c:32:b6:8c:67:55:c4:3f:ff:39:7c:72:6b:5f:cb:b3:
         4d:ab:11:a5:9c:a9:10:db:8e:92:9a:ad:2f:98:c7:b5:7d:e6:
         03:21:31:af:b3:fa:44:3e:b3:fc:05:4a:9a:0c:19:f2:b6:49:
         59:36:66:e4:ef:cd:7e:57:ef:d3:2f:0b:64:46:b8:79:da:64:
         aa:57:ee:d0:a5:26:1d:67:c9:6e:49:e6:6d:74:53:57:5a:0d:
         38:6a:56:9a:7f:00:e5:46:13:3b:35:cd:59:b8:f3:0a:1e:bf:
         a3:5e:04:d7:27:05:30:b3:ee:39:15:56:6d:67:93:f0:be:5f:
         9a:70:9f:68:d5:31:20:99:2c:2b:b1:9f:5a:8e:22:d0:48:1b:
         e1:e9:63:d7:e5:b0:b1:ca:03:91:9e:31:20:aa:9a:50:31:fc:
         af:c5:84:19:c4:0a:77:12:96:45:f4:e0:20:17:78:de:db:31:
         fb:97:ab:b9:ae:e1:40:55:69:f2:3a:4a:7d:46:69:9d:2f:15:
         ed:a7:45:b9:23:bc:2b:b2:22:d9:40:98:7a:fa:47:c2:e3:ed:
         c9:91:4b:cc:03:c0:7d:10:78:af:5f:75:7e:c6:62:21:5e:f6:
         91:df:d7:3d:6a:8c:35:18:06:d7:08:1e:ee:a6:43:c0:b0:70:
         6e:44:6f:14
-----BEGIN CERTIFICATE-----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Generated at Wed Sep 6 22:19:12 2023 by rpki-client on console-fra.rpki-client.org