Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/eY9AUaGMTEZTRwLTKSXxF6MQiGA.roa
File:                     eY9AUaGMTEZTRwLTKSXxF6MQiGA.roa (raw, json)
Hash identifier:          DVYinGp5lZkEHExwp+SYhNW+R2yeYJHBl0SWd0QRiX8=
Subject key identifier:   79:8F:40:51:A1:8C:4C:46:53:47:02:D3:29:25:F1:17:A3:10:88:60
Certificate issuer:       /CN=fbcd0233808570e31ffb2fcde1b877071cbc6603
Certificate serial:       018774A8BE560B0B0D8D8CBE0D4CE5637A88
Authority key identifier: FB:CD:02:33:80:85:70:E3:1F:FB:2F:CD:E1:B8:77:07:1C:BC:66:03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/eY9AUaGMTEZTRwLTKSXxF6MQiGA.roa
Signing time:             Wed 12 Apr 2023 08:50:28 +0000
ROA not before:           Wed 12 Apr 2023 08:50:28 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207203
IP address blocks:        193.228.80.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:74:a8:be:56:0b:0b:0d:8d:8c:be:0d:4c:e5:63:7a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbcd0233808570e31ffb2fcde1b877071cbc6603
        Validity
            Not Before: Apr 12 08:50:28 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=798f4051a18c4c46534702d32925f117a3108860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3b:c7:d1:7b:22:ad:65:76:27:7b:57:ac:9b:
                    bc:cb:1b:33:a6:12:41:f6:96:b3:e2:44:a2:01:b5:
                    26:f4:08:a8:20:3f:92:c3:96:4f:4f:a1:98:d2:fe:
                    f9:04:f1:2d:59:4b:e4:25:16:75:8e:44:6f:b7:9b:
                    4e:4b:89:cf:8c:67:f5:e5:fb:2b:53:a6:2f:df:9a:
                    82:7b:65:59:03:0e:9b:30:92:a6:9e:fa:54:d8:20:
                    d5:c2:02:e7:ae:9a:83:11:24:f2:43:b3:61:ca:42:
                    6d:4e:83:73:88:54:c9:b7:f4:bf:44:5c:20:a8:fc:
                    55:ef:b3:1b:27:1e:2a:f8:b3:ce:96:42:15:80:d8:
                    14:08:c6:36:87:24:26:da:6f:9d:76:34:83:de:9c:
                    62:e3:e7:01:65:cc:28:11:2d:57:a8:d4:64:13:ee:
                    11:43:54:3e:c6:96:62:87:64:7c:e5:5f:6d:af:dc:
                    d1:e5:58:ee:81:ee:a2:a0:e9:60:84:15:f6:90:28:
                    f3:5d:d5:05:0c:a5:cf:94:50:25:0f:a3:c9:01:4f:
                    27:8e:7c:6f:c3:42:74:02:d7:e9:27:45:91:64:64:
                    fa:6a:b6:22:5b:e2:ec:19:8f:5d:ec:f4:98:45:87:
                    fa:b2:27:e0:d0:90:0d:24:05:b4:ae:c2:4d:57:7f:
                    00:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8F:40:51:A1:8C:4C:46:53:47:02:D3:29:25:F1:17:A3:10:88:60
            X509v3 Authority Key Identifier:
                keyid:FB:CD:02:33:80:85:70:E3:1F:FB:2F:CD:E1:B8:77:07:1C:BC:66:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/eY9AUaGMTEZTRwLTKSXxF6MQiGA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3b5110-5167-48e0-8597-61d7333f8570/1/1-80CM4CFcOMf-y_N4bh3Bxy8ZgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.228.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:97:24:03:66:34:81:3d:8e:ce:0c:bd:79:ff:8d:dd:70:3e:
         81:4e:2f:b7:e1:45:68:e1:f4:d2:d6:b1:bc:0b:ae:a6:06:60:
         95:e2:b6:e9:56:ce:87:26:c2:f8:d5:61:30:0b:93:3f:3d:bb:
         d6:56:f8:95:17:22:68:da:f5:31:39:7f:92:ac:2c:8e:6b:61:
         7e:3d:38:9a:9c:46:b3:36:e1:0a:66:22:48:71:ea:61:aa:11:
         73:19:de:4b:db:19:1c:4c:ce:2b:ff:7b:f9:be:c0:74:68:54:
         44:f0:15:45:be:73:62:b8:f7:f0:7d:db:e6:7e:2d:d9:2b:79:
         6d:6e:1a:0a:72:2a:4b:53:33:7d:5f:4e:99:39:4c:a0:9c:ed:
         81:4c:e3:8d:a7:7f:bb:36:7f:95:83:8e:1b:29:a6:2e:f8:4d:
         d2:85:bd:10:47:9f:a3:97:cf:41:ed:6c:25:f5:cf:3f:18:06:
         cd:04:f4:75:d1:48:90:a3:fc:bb:ec:46:4b:29:e1:f9:6c:2f:
         8d:74:b9:a9:ac:ad:14:1b:d2:c1:83:5f:2f:d3:25:3d:79:0d:
         e3:64:16:7c:63:32:e0:8e:ae:47:04:84:72:8e:96:d8:66:24:
         df:cc:08:14:71:ad:e6:96:d9:20:e3:fa:1a:17:b0:9e:94:6d:
         50:b8:24:b1
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYd0qL5WCwsNjYy+DUzlY3qIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiY2QwMjMzODA4NTcwZTMxZmZiMmZjZGUxYjg3NzA3MWNi
YzY2MDMwHhcNMjMwNDEyMDg1MDI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OThmNDA1MWExOGM0YzQ2NTM0NzAyZDMyOTI1ZjExN2EzMTA4ODYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzvH0XsirWV2J3tXrJu8yxszphJB
9paz4kSiAbUm9AioID+Sw5ZPT6GY0v75BPEtWUvkJRZ1jkRvt5tOS4nPjGf15fsr
U6Yv35qCe2VZAw6bMJKmnvpU2CDVwgLnrpqDESTyQ7NhykJtToNziFTJt/S/RFwg
qPxV77MbJx4q+LPOlkIVgNgUCMY2hyQm2m+ddjSD3pxi4+cBZcwoES1XqNRkE+4R
Q1Q+xpZih2R85V9tr9zR5Vjuge6ioOlghBX2kCjzXdUFDKXPlFAlD6PJAU8njnxv
w0J0AtfpJ0WRZGT6arYiW+LsGY9d7PSYRYf6sifg0JANJAW0rsJNV38AWwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFHmPQFGhjExGU0cC0ykl8RejEIhgMB8GA1UdIwQY
MBaAFPvNAjOAhXDjH/svzeG4dwccvGYDMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS04MENNNENGY09NZi15X040YmgzQnh5OFpnTS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmQvM2I1MTEwLTUxNjctNDhlMC04NTk3
LTYxZDczMzNmODU3MC8xL2VZOUFVYUdNVEVaVFJ3TFRLU1h4RjZNUWlHQS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMmQvM2I1MTEwLTUxNjctNDhlMC04NTk3LTYxZDczMzNmODU3
MC8xLzEtODBDTTRDRmNPTWYteV9ONGJoM0J4eThaZ00uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBALB5FAw
DQYJKoZIhvcNAQELBQADggEBAJqXJANmNIE9js4MvXn/jd1wPoFOL7fhRWjh9NLW
sbwLrqYGYJXitulWzocmwvjVYTALkz89u9ZW+JUXImja9TE5f5KsLI5rYX49OJqc
RrM24QpmIkhx6mGqEXMZ3kvbGRxMziv/e/m+wHRoVETwFUW+c2K49/B92+Z+Ldkr
eW1uGgpyKktTM31fTpk5TKCc7YFM442nf7s2f5WDjhsppi74TdKFvRBHn6OXz0Ht
bCX1zz8YBs0E9HXRSJCj/LvsRksp4flsL410uamsrRQb0sGDXy/TJT15DeNkFnxj
MuCOrkcEhHKOlthmJN/MCBRxreaW2SDj+hoXsJ6UbVC4JLE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:54 2023 by rpki-client on console-fra.rpki-client.org