Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/9__y0rsuWMUlFtmYnPrFQCClyDs.roa
File:                     9__y0rsuWMUlFtmYnPrFQCClyDs.roa (raw, json)
Hash identifier:          y7Tu/wGQWkpKki6C36Wjy3hMKiY6a0nnOFtsRglP9R8=
Subject key identifier:   F7:FF:F2:D2:BB:2E:58:C5:25:16:D9:98:9C:FA:C5:40:20:A5:C8:3B
Certificate issuer:       /CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
Certificate serial:       01856CCAF3C86B9F911AC4BFFC9C041B8E42
Authority key identifier: 49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/9__y0rsuWMUlFtmYnPrFQCClyDs.roa
Signing time:             Sun 01 Jan 2023 10:05:18 +0000
ROA not before:           Sun 01 Jan 2023 10:05:18 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     20473
IP address blocks:        185.83.113.0/24 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:ca:f3:c8:6b:9f:91:1a:c4:bf:fc:9c:04:1b:8e:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
        Validity
            Not Before: Jan  1 10:05:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f7fff2d2bb2e58c52516d9989cfac54020a5c83b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:af:e3:bf:5c:32:dd:b6:4f:0c:a5:7d:1a:9e:
                    9d:6a:9c:a3:5b:fd:ca:e5:cd:0e:52:9c:79:1c:1d:
                    29:84:fc:57:c2:19:26:d4:03:41:6f:4a:a1:aa:c9:
                    b6:0c:c0:3e:41:4f:9a:02:3c:1d:1d:6a:33:da:97:
                    e6:71:c4:86:e7:12:6e:e2:14:de:41:7a:73:bc:52:
                    11:4b:bd:d8:61:bc:01:d1:f7:c4:09:91:24:f4:62:
                    f4:c6:ab:1e:3c:6d:aa:93:d9:23:3c:71:7d:56:05:
                    2f:71:31:8d:62:e5:9a:ed:5b:7d:38:e5:02:c4:a2:
                    65:0b:cc:de:39:9a:dc:94:f8:63:29:be:39:71:aa:
                    dd:6e:94:88:cc:b5:2e:23:36:52:75:a6:60:82:67:
                    37:04:90:4c:5d:7b:6d:95:84:81:d0:fd:64:ba:74:
                    55:ac:0b:12:56:22:13:ae:66:8a:92:d5:20:ee:01:
                    ce:e0:cb:c4:6c:3c:da:51:f8:6f:94:aa:40:fd:fc:
                    0b:63:78:ff:f4:1a:4c:0f:21:88:af:2d:60:8a:c7:
                    ca:6c:12:62:03:97:d2:6e:be:a0:92:6e:55:20:0b:
                    45:a2:52:36:3b:67:5e:1e:b7:0c:cd:59:68:65:7d:
                    34:e5:a3:a8:58:ef:e4:72:85:e3:e3:48:be:6c:b5:
                    cb:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:FF:F2:D2:BB:2E:58:C5:25:16:D9:98:9C:FA:C5:40:20:A5:C8:3B
            X509v3 Authority Key Identifier:
                keyid:49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/9__y0rsuWMUlFtmYnPrFQCClyDs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.83.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:c9:23:4e:aa:4c:7f:d0:f7:fc:3f:90:14:38:7d:ec:fb:97:
         dc:5f:bf:f0:97:f0:38:25:a2:29:3f:61:81:0a:52:b4:dc:83:
         77:5b:06:c9:c5:71:ba:71:0d:17:d1:93:fc:63:7c:a3:ac:0c:
         d1:cf:ce:0e:eb:fe:ab:11:7e:32:bf:8a:dd:57:fb:23:5c:16:
         1e:8d:77:0e:91:05:5a:07:ef:b0:85:2d:98:69:1a:a3:86:ad:
         12:27:42:1c:d8:40:1d:ad:1f:5c:c0:20:b4:7b:ff:12:a9:46:
         26:57:3a:a9:f5:17:76:69:5f:70:3f:a3:c2:a7:a9:0f:cd:d0:
         7c:d4:e2:4f:40:81:b6:a5:a1:8c:2d:55:a8:71:76:b5:5e:19:
         36:fa:cc:e8:f9:18:68:e4:a4:1e:6a:e2:5f:2d:48:89:d2:7f:
         83:2f:b0:11:e4:12:39:14:8f:bc:f5:f9:dd:40:0b:b6:d1:5f:
         b3:7a:00:c2:a1:91:7b:0d:74:cb:f2:59:4d:76:35:99:52:c7:
         e5:10:6b:7a:ae:3e:de:f9:1a:dd:4d:ec:8a:d1:2e:36:c2:ea:
         9e:dd:cc:a7:bc:8d:ba:d7:d7:57:fa:da:f4:7b:d8:e9:99:a3:
         eb:30:2f:c5:65:14:a2:6f:bc:cd:82:50:d7:90:fd:d0:a2:fe:
         b8:2d:cb:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:07 2024 by rpki-client on console-fra.rpki-client.org