Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/pPw5hoyg-_DTgzLMSa35b77ss4A.roa
File:                     pPw5hoyg-_DTgzLMSa35b77ss4A.roa (raw, json)
Hash identifier:          SGKTGOXCIUsnlHrT41vtpvAcib369mY05wOUDDT3sks=
Subject key identifier:   A4:FC:39:86:8C:A0:FB:F0:D3:83:32:CC:49:AD:F9:6F:BE:EC:B3:80
Certificate issuer:       /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial:       01865EA54F1707BE73D1B0871EBA5319A741
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/pPw5hoyg-_DTgzLMSa35b77ss4A.roa
Signing time:             Fri 17 Feb 2023 09:12:17 +0000
ROA not before:           Fri 17 Feb 2023 09:12:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     24875
IP address blocks:        93.114.99.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:5e:a5:4f:17:07:be:73:d1:b0:87:1e:ba:53:19:a7:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
        Validity
            Not Before: Feb 17 09:12:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a4fc39868ca0fbf0d38332cc49adf96fbeecb380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:04:4b:5d:fa:e1:c6:ce:f5:69:9c:24:5b:62:
                    34:c2:4f:48:3b:2e:f1:93:49:0b:1e:e9:3f:d8:dc:
                    9d:6a:6a:5c:43:2f:c7:40:60:dd:bb:5c:f7:a8:b5:
                    2e:07:58:47:6c:73:39:3c:56:f6:17:1a:69:e3:ca:
                    79:f6:a0:a5:10:85:3a:1e:3c:4e:3a:1e:e2:92:f0:
                    65:af:cd:b6:e7:66:41:68:86:ef:5a:bf:66:0a:2c:
                    52:c4:f4:e7:ea:bd:28:f5:4f:3c:17:33:a0:51:bc:
                    49:10:ae:06:75:03:04:5e:b4:6f:56:cf:b5:98:e6:
                    f8:4e:3e:f6:e0:ae:72:f9:5f:8d:1f:da:91:08:6c:
                    e3:f2:07:67:33:43:c2:d5:09:13:d4:55:c7:32:b8:
                    34:2a:ee:52:21:9f:11:23:fd:41:47:2f:91:64:b3:
                    d5:7c:e9:af:1d:71:c2:b3:c0:29:85:f1:be:17:a7:
                    97:26:b7:0a:76:d5:68:25:84:bc:bd:7e:08:43:ef:
                    9b:44:55:3d:a5:bf:19:24:f2:49:17:15:98:0f:c2:
                    63:93:de:b9:44:dd:3e:66:1d:72:bf:3f:11:34:69:
                    81:4a:3f:5f:d6:1b:36:5a:9c:f2:2e:55:41:dd:25:
                    28:7b:67:59:fb:46:a9:ee:c6:bc:8a:ea:19:6e:3e:
                    e5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:FC:39:86:8C:A0:FB:F0:D3:83:32:CC:49:AD:F9:6F:BE:EC:B3:80
            X509v3 Authority Key Identifier:
                keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/pPw5hoyg-_DTgzLMSa35b77ss4A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.114.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:1e:6c:6b:a4:2f:e2:f1:15:72:09:71:f7:fc:51:ce:40:e7:
         74:4b:a8:f7:c4:e8:1a:ca:5f:07:58:b9:87:04:75:5a:8c:4f:
         42:74:f0:b4:4b:80:d6:a0:10:48:ac:46:6a:a9:f5:8c:4b:55:
         4e:99:4c:20:43:df:f9:67:1e:1c:f8:25:81:47:fe:70:98:89:
         fd:f1:37:7e:df:01:96:2a:2a:0f:53:9d:e0:4a:37:a8:95:ce:
         44:c5:4d:40:9f:9f:78:14:53:d1:14:b7:58:dd:be:2e:3f:5a:
         91:60:d1:1e:1f:2d:20:20:ad:6e:c1:0e:4f:9e:a4:b0:21:79:
         f8:07:e6:31:7b:bf:43:3a:44:87:97:c5:63:de:68:f9:d0:7e:
         9a:3d:77:56:9e:3b:25:00:b8:52:4d:3c:93:f2:fd:d8:5c:c0:
         91:2a:4e:49:fb:2c:a0:15:c3:3f:63:dc:b7:11:97:a5:7a:61:
         8a:ba:1c:81:a9:95:d4:0b:4f:83:ae:b7:02:ba:60:ab:46:c1:
         da:55:76:dd:02:79:d9:6d:cc:5a:23:b3:89:a6:94:20:27:f8:
         f8:69:d2:9a:f2:44:37:44:45:f1:4c:43:a4:b0:3a:c0:58:e0:
         ea:af:38:ac:64:8c:4f:09:a8:49:56:df:94:29:2d:a6:cc:c3:
         dc:03:25:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:08 2023 by rpki-client on console-fra.rpki-client.org