Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d15599-d7b5-4391-b2c5-ea49312aa1cf/1/faAXN5KS9h6aMxO-zNo61eyNtUc.roa
File:                     faAXN5KS9h6aMxO-zNo61eyNtUc.roa (raw, json)
Hash identifier:          m2KaL2Qhn86kA+Sfi3FEo/8x+VU+/WIrZFwYkf2MeJc=
Subject key identifier:   7D:A0:17:37:92:92:F6:1E:9A:33:13:BE:CC:DA:3A:D5:EC:8D:B5:47
Certificate issuer:       /CN=f6d0bc1f351f85d1254dd94787c98d04e0f7166b
Certificate serial:       0185715E4F7D559D7D9D249E81B139A99665
Authority key identifier: F6:D0:BC:1F:35:1F:85:D1:25:4D:D9:47:87:C9:8D:04:E0:F7:16:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9tC8HzUfhdElTdlHh8mNBOD3Fms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d15599-d7b5-4391-b2c5-ea49312aa1cf/1/faAXN5KS9h6aMxO-zNo61eyNtUc.roa
Signing time:             Mon 02 Jan 2023 07:24:44 +0000
ROA not before:           Mon 02 Jan 2023 07:24:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212238
IP address blocks:        79.110.228.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:5e:4f:7d:55:9d:7d:9d:24:9e:81:b1:39:a9:96:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6d0bc1f351f85d1254dd94787c98d04e0f7166b
        Validity
            Not Before: Jan  2 07:24:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7da017379292f61e9a3313beccda3ad5ec8db547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ea:a0:60:d6:80:34:46:76:28:bc:65:8c:dc:
                    f0:36:9c:b1:45:c6:57:9a:38:a1:2e:6c:1e:60:69:
                    29:27:05:21:4c:b5:fa:89:b3:95:fe:52:c6:03:40:
                    79:09:e1:17:a6:07:50:e4:c9:7b:26:53:26:e5:cb:
                    1e:4b:29:89:cc:a1:67:d6:42:0e:ee:2c:a5:8c:1d:
                    1f:45:7e:76:fc:bf:20:f4:ca:89:d3:9d:90:1b:0d:
                    e2:17:7a:96:e4:14:e7:dc:e0:16:12:58:a7:95:c4:
                    c1:85:4b:b1:84:63:cb:ca:96:8b:0c:83:ae:f8:d4:
                    98:61:35:af:9f:f4:0d:96:d5:c9:77:00:62:cf:05:
                    44:5a:1f:4a:58:a1:13:91:4a:12:95:83:ed:84:ba:
                    a7:54:4f:fb:9c:0f:cb:f4:ab:1b:94:57:f1:41:65:
                    c3:f2:7a:1f:16:d6:c2:0e:9d:e6:48:c7:85:18:3b:
                    31:a5:27:a0:fa:7c:bd:43:ef:1b:79:c9:48:d7:d3:
                    82:15:dd:c8:9b:54:e2:ad:69:58:e1:91:02:82:40:
                    83:b8:08:5e:74:02:08:df:61:0a:df:3a:50:0b:95:
                    ea:8e:f2:17:02:d2:3d:f6:10:53:a9:b8:61:6b:d8:
                    c3:8d:2a:fc:0e:e7:a8:db:3d:f2:8e:a3:70:3b:d5:
                    8b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:A0:17:37:92:92:F6:1E:9A:33:13:BE:CC:DA:3A:D5:EC:8D:B5:47
            X509v3 Authority Key Identifier:
                keyid:F6:D0:BC:1F:35:1F:85:D1:25:4D:D9:47:87:C9:8D:04:E0:F7:16:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9tC8HzUfhdElTdlHh8mNBOD3Fms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d15599-d7b5-4391-b2c5-ea49312aa1cf/1/faAXN5KS9h6aMxO-zNo61eyNtUc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d15599-d7b5-4391-b2c5-ea49312aa1cf/1/9tC8HzUfhdElTdlHh8mNBOD3Fms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.110.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:dc:44:d2:ed:d2:b5:16:7b:18:7b:67:49:15:94:81:95:65:
         e7:1d:76:3b:d7:f2:e0:2c:1c:f0:7e:9d:e0:4a:bc:94:d6:d7:
         17:e0:a2:6c:3e:70:86:89:c3:1a:f8:37:5a:f9:92:b8:02:da:
         0d:61:f0:e9:2c:45:6c:6c:a7:83:b2:bd:50:f6:55:f6:e8:cd:
         32:a7:35:ab:73:b1:e1:70:e1:be:49:1f:51:75:95:5c:c3:d1:
         9b:4c:7e:63:ca:38:0d:6b:30:f5:7c:8d:86:43:ac:6d:f2:03:
         d2:36:32:c3:0b:a9:fd:64:fc:17:1f:fa:3e:5e:e2:11:bd:9b:
         e4:71:c5:40:8a:dc:16:0a:34:e7:74:13:64:8c:71:f6:10:8e:
         e0:aa:22:64:2f:15:7f:2d:d6:de:a3:d7:7b:2e:86:68:72:50:
         40:ed:23:72:58:f6:2e:73:d9:1e:5d:91:d5:2a:fe:ed:7e:c7:
         32:b4:5f:5d:28:a5:d0:3f:84:d6:20:75:66:84:5a:0d:1e:45:
         e4:7b:aa:e7:cf:63:b0:48:51:a6:1f:4d:cf:3d:78:68:41:c2:
         90:be:0f:30:08:2a:e2:41:e7:17:47:77:9a:db:ff:c7:56:66:
         3e:15:89:37:25:db:c9:40:22:96:e6:a7:30:01:ee:47:f9:00:
         af:97:48:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:46 2023 by rpki-client on console-ams.rpki-client.org