Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/wISyMiReQnkm3sQYhc4dpqeaOGA.roa
File:                     wISyMiReQnkm3sQYhc4dpqeaOGA.roa (raw, json)
Hash identifier:          H+iXyNJBe46ZHZtd6j3In1wuzyqRMqmxxvTs/P7bVhU=
Subject key identifier:   C0:84:B2:32:24:5E:42:79:26:DE:C4:18:85:CE:1D:A6:A7:9A:38:60
Certificate issuer:       /CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Certificate serial:       01857042803639E0F846E94D426EFC57D480
Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/wISyMiReQnkm3sQYhc4dpqeaOGA.roa
Signing time:             Mon 02 Jan 2023 02:14:44 +0000
ROA not before:           Mon 02 Jan 2023 02:14:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212238
IP address blocks:        185.54.229.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:42:80:36:39:e0:f8:46:e9:4d:42:6e:fc:57:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85
        Validity
            Not Before: Jan  2 02:14:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c084b232245e427926dec41885ce1da6a79a3860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:40:73:5a:0e:d6:cb:e7:aa:f4:32:a0:fb:71:
                    fb:0d:ec:3f:39:39:f1:0d:bd:6c:ee:33:23:6e:9e:
                    1b:25:b7:27:92:e7:2e:c0:99:9b:6a:f0:77:b3:e4:
                    a8:c5:fb:72:0b:d9:82:7e:7b:37:29:76:32:12:24:
                    ad:1c:76:4d:50:5d:00:c9:77:a5:99:c0:93:15:3f:
                    4d:a7:17:2d:c5:6e:13:48:77:ba:c7:6f:95:ea:f1:
                    6d:cc:12:f3:4f:cc:c7:9f:04:3c:e0:a5:04:a9:19:
                    b7:ac:61:cc:8f:d1:f8:15:31:94:db:d3:51:dd:d0:
                    df:85:ee:b9:7c:bc:bb:ab:91:f8:d3:e6:08:91:2e:
                    6a:1b:8b:97:3a:96:49:b5:2f:35:f2:d5:8b:15:8c:
                    71:eb:92:66:fe:c3:a1:94:02:3e:03:a4:6d:e3:00:
                    4c:13:69:9d:26:fa:2b:b8:be:e1:fb:35:78:d3:1c:
                    32:e5:67:37:d8:fa:e7:b1:21:8a:f7:3f:f6:36:c4:
                    4e:57:49:34:b6:22:23:75:a7:c6:63:f8:de:7a:6e:
                    a5:00:22:d3:31:e3:7b:5e:35:14:82:e4:cc:7e:72:
                    56:5a:b0:78:50:50:82:d9:df:f8:73:74:c6:5e:c9:
                    02:7f:2e:3b:df:21:f0:1d:f7:33:99:bf:26:43:8d:
                    21:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:84:B2:32:24:5E:42:79:26:DE:C4:18:85:CE:1D:A6:A7:9A:38:60
            X509v3 Authority Key Identifier:
                keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/wISyMiReQnkm3sQYhc4dpqeaOGA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.54.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:70:79:e4:62:bd:5c:2c:b5:96:c0:cc:54:93:e8:1a:49:62:
         fc:e8:48:0e:9e:12:59:ac:98:4e:46:32:e7:1c:49:9c:16:25:
         e2:3d:02:4c:07:d1:3e:94:ce:eb:74:a5:c0:03:21:1b:a7:a7:
         87:63:a2:f1:bb:8f:4a:d8:04:65:bc:46:e1:7d:74:49:c8:ea:
         a4:c5:6d:44:aa:0b:f3:b7:b3:ef:a9:35:8a:04:ef:82:3b:1b:
         15:07:49:93:f6:e1:0c:9f:83:67:bb:e4:0d:20:37:8d:e9:ab:
         fa:46:f7:28:87:fe:0e:27:eb:97:57:a2:26:69:8b:db:00:67:
         d1:71:d3:a1:b4:ac:ab:fe:6b:63:03:9a:0a:c3:15:e8:5b:b6:
         13:ae:1b:02:66:39:32:74:9d:b0:49:b7:0f:a3:34:ef:a4:d0:
         d1:c3:de:ea:5c:93:b3:c9:4e:08:95:56:59:43:2a:11:c9:30:
         c0:f1:7f:39:ad:1d:39:67:f2:d8:40:98:06:4c:04:e3:98:ee:
         da:c3:f2:d2:b3:17:16:a0:c9:ec:30:d3:df:74:ea:86:c9:d4:
         04:44:4f:58:e4:b4:d8:c2:11:65:25:10:2b:05:ce:f5:38:8e:
         b2:21:f8:f0:d2:2a:63:4f:97:8c:ac:87:6d:d2:46:2c:99:45:
         ad:aa:d0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:17 2023 by rpki-client on console-fra.rpki-client.org