Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/Ro1If2R0sH1p3lY_z8CiuD1QXag.roa
File:                     Ro1If2R0sH1p3lY_z8CiuD1QXag.roa (raw, json)
Hash identifier:          fPKiR6brCykxgqiH/GmWUhJnWBn9SiW1WCBNmaH4gaI=
Subject key identifier:   46:8D:48:7F:64:74:B0:7D:69:DE:56:3F:CF:C0:A2:B8:3D:50:5D:A8
Certificate issuer:       /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Certificate serial:       01856F1D83DDF9F83AB12F383799AB11714E
Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/Ro1If2R0sH1p3lY_z8CiuD1QXag.roa
Signing time:             Sun 01 Jan 2023 20:54:43 +0000
ROA not before:           Sun 01 Jan 2023 20:54:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212238
IP address blocks:        2a0a:a200:3cf::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:1d:83:dd:f9:f8:3a:b1:2f:38:37:99:ab:11:71:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
        Validity
            Not Before: Jan  1 20:54:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=468d487f6474b07d69de563fcfc0a2b83d505da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:af:6d:c2:67:5a:c1:d5:04:f8:4f:3e:e8:49:
                    3f:7e:ce:ae:9a:fe:4e:c9:03:3b:04:e2:e8:39:13:
                    fc:c3:3c:f1:ac:e8:fe:e9:0d:6d:75:64:81:1a:f0:
                    cf:a3:70:ff:aa:a8:2d:cf:e7:e4:2c:53:df:0b:9e:
                    29:eb:da:83:b8:35:9e:bc:32:1d:e7:9f:29:1f:08:
                    61:a9:e9:fb:5e:bc:b7:5f:ae:3e:9a:b8:7e:0e:a5:
                    09:ff:7f:9b:17:81:1e:88:59:07:f8:28:e4:c8:63:
                    cd:42:cc:d1:2a:fa:09:35:24:28:ba:81:46:2c:c6:
                    b7:d1:3a:92:93:e9:6b:b5:79:b9:31:09:dc:6b:0e:
                    1c:45:a2:7b:b4:6f:f7:6b:9d:18:8c:c5:d8:6a:66:
                    b3:65:de:51:b6:ce:58:80:ef:a6:69:f9:09:3a:10:
                    09:ba:66:28:39:b7:f8:39:f5:7c:88:b2:39:e4:d3:
                    44:f0:f5:e8:41:6e:df:94:17:3a:90:95:0b:d9:72:
                    ff:41:01:40:5e:e4:2f:a1:6c:7a:61:df:8f:66:a6:
                    cb:01:24:32:cd:f4:56:22:f5:57:dd:4e:21:9c:7f:
                    fd:35:c8:fd:f3:80:06:eb:3a:fb:fe:0e:f2:4a:0b:
                    aa:8a:1c:35:db:4d:51:32:26:b5:e9:3e:b8:c0:a5:
                    de:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8D:48:7F:64:74:B0:7D:69:DE:56:3F:CF:C0:A2:B8:3D:50:5D:A8
            X509v3 Authority Key Identifier:
                keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/Ro1If2R0sH1p3lY_z8CiuD1QXag.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:a200:3cf::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:48:50:1b:7b:96:e1:af:05:ef:76:ea:75:97:ec:ee:98:d6:
         74:cf:f2:de:dc:e6:c9:e2:9c:2b:b6:e6:b7:ee:59:ec:da:51:
         ac:ab:20:7e:73:10:03:52:0c:8a:18:1b:84:63:eb:2d:b0:ad:
         41:6a:f5:7c:d0:89:da:b0:33:52:e5:80:d5:09:33:97:3b:a7:
         c3:9e:78:e3:cf:af:ac:19:1a:33:75:72:5d:e6:27:0c:d7:92:
         c4:68:3a:66:f7:f8:53:a8:22:fe:ad:c0:16:7f:5e:d8:37:e0:
         03:c0:b0:15:1c:6c:83:b6:96:98:65:2c:e7:95:6b:c4:68:e9:
         21:3f:55:44:7b:cc:88:f5:d4:b5:3d:f9:9f:6b:81:14:49:af:
         7d:d7:4c:46:71:31:de:c6:16:09:66:9e:8a:a6:e0:8c:6a:87:
         66:90:39:60:0e:47:2a:c8:85:7c:b9:69:90:99:d4:0f:46:4f:
         18:db:76:47:19:57:93:48:dc:e5:31:99:d5:5c:7d:49:cf:02:
         1d:0b:71:0d:7e:1a:c1:99:e1:b1:26:10:76:cb:8c:dc:2d:1f:
         64:8b:f0:85:cb:37:25:78:b7:16:08:02:e5:eb:c0:67:9f:ab:
         7b:c6:43:a9:25:6e:fd:39:a5:55:9a:fa:2c:7a:64:38:ab:ff:
         6a:e6:25:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:15 2023 by rpki-client on console-ams.rpki-client.org