Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Q5yZN9VqH8pHb8LQllrgvGnbaeA.roa
File:                     Q5yZN9VqH8pHb8LQllrgvGnbaeA.roa (raw, json)
Hash identifier:          livyflpUCnYot3lzgUpDqXubJcamEJL2kLaK4H0K/iU=
Subject key identifier:   43:9C:99:37:D5:6A:1F:CA:47:6F:C2:D0:96:5A:E0:BC:69:DB:69:E0
Certificate issuer:       /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial:       01856F825D00B6D35EFF4A421E6E5A291B11
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Q5yZN9VqH8pHb8LQllrgvGnbaeA.roa
Signing time:             Sun 01 Jan 2023 22:44:52 +0000
ROA not before:           Sun 01 Jan 2023 22:44:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208911
IP address blocks:        185.230.15.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:82:5d:00:b6:d3:5e:ff:4a:42:1e:6e:5a:29:1b:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
        Validity
            Not Before: Jan  1 22:44:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=439c9937d56a1fca476fc2d0965ae0bc69db69e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:bc:41:67:10:74:72:59:16:e6:94:5f:01:4d:
                    33:51:17:fc:df:98:0e:d9:62:52:9a:28:f6:e1:2c:
                    84:4b:6b:93:0a:5f:90:23:9d:a8:4d:3b:c8:18:28:
                    0d:06:cd:9c:f4:cb:e6:b1:ae:3d:d9:a1:87:8e:65:
                    46:ea:af:af:4b:b2:97:cc:07:95:06:be:5c:cd:a6:
                    a4:46:93:be:31:69:d0:ed:fd:84:9f:bc:b7:af:29:
                    e2:13:16:93:d1:82:45:96:3a:e5:07:da:d0:af:93:
                    7b:28:3b:e6:4a:80:b8:c6:58:ad:88:ed:70:1c:24:
                    b3:cc:4f:82:19:d5:d3:9f:50:29:6a:40:3b:fe:1e:
                    85:00:9b:f0:48:81:49:cf:a8:f6:ec:53:e3:55:37:
                    3e:40:fe:d7:9d:d1:12:a4:83:1f:ce:8e:e7:2f:78:
                    3e:8c:c9:6b:09:1f:20:b2:c9:16:6e:23:98:ea:f4:
                    fa:d3:58:a7:f6:b3:b9:2a:88:71:bc:84:29:b3:99:
                    b4:c5:a8:59:7b:a3:49:27:e9:63:a7:65:d0:23:22:
                    0c:6d:32:54:38:64:e8:fb:22:b8:cb:ec:94:e3:bb:
                    32:74:1c:d4:90:ad:94:90:79:6d:25:1d:df:a4:67:
                    df:7f:c7:bf:cb:c7:85:85:a6:51:06:b4:e6:83:fd:
                    e2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:9C:99:37:D5:6A:1F:CA:47:6F:C2:D0:96:5A:E0:BC:69:DB:69:E0
            X509v3 Authority Key Identifier:
                keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/Q5yZN9VqH8pHb8LQllrgvGnbaeA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.230.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:ca:b1:6b:e2:d2:55:24:81:96:0c:39:b0:c4:f7:5c:f5:aa:
         17:67:7e:84:1d:fa:c6:4b:37:d5:eb:86:6d:3f:b9:7e:ea:15:
         c2:74:a6:32:c5:b3:dd:49:6d:23:a0:2b:eb:a3:00:99:93:c3:
         ff:fd:4f:fd:03:37:90:79:d3:eb:a8:bf:45:18:cd:a0:9a:0b:
         4b:b2:6d:f1:e3:1f:e0:a0:5d:7a:3b:31:92:c3:b1:90:60:ac:
         61:56:65:d9:76:9c:18:91:dc:b4:56:c7:61:e5:8b:c4:34:0f:
         dd:71:2a:c4:18:46:fd:4e:12:e4:54:92:e9:5e:e2:06:b2:e4:
         33:7d:a6:87:85:86:88:73:90:a5:a7:97:ce:c9:2a:fa:99:4f:
         d4:cd:5a:58:1b:b7:b9:96:3f:ff:9a:b0:c0:39:7c:a3:9d:03:
         fa:8d:42:c7:97:77:da:d5:59:f4:3d:63:86:6d:20:38:ba:21:
         ba:8b:1a:9f:8f:f7:3f:35:e6:4c:df:4e:4d:29:e0:8e:45:32:
         83:85:f6:b9:fa:51:04:be:46:8f:f6:8f:16:4a:5b:34:b3:9e:
         14:31:98:d8:e6:95:50:e4:11:17:ed:d5:30:5f:ec:54:7d:9b:
         1a:a6:68:e6:20:93:cf:64:48:f8:95:a7:05:e8:5e:9b:81:6c:
         26:76:a0:e1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvgl0AttNe/0pCHm5aKRsRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjMwMTAxMjI0NDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzljOTkzN2Q1NmExZmNhNDc2ZmMyZDA5NjVhZTBiYzY5ZGI2OWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7xBZxB0clkW5pRfAU0zURf835gO
2WJSmij24SyES2uTCl+QI52oTTvIGCgNBs2c9Mvmsa492aGHjmVG6q+vS7KXzAeV
Br5czaakRpO+MWnQ7f2En7y3ryniExaT0YJFljrlB9rQr5N7KDvmSoC4xlitiO1w
HCSzzE+CGdXTn1ApakA7/h6FAJvwSIFJz6j27FPjVTc+QP7XndESpIMfzo7nL3g+
jMlrCR8gsskWbiOY6vT601in9rO5KohxvIQps5m0xahZe6NJJ+ljp2XQIyIMbTJU
OGTo+yK4y+yU47sydBzUkK2UkHltJR3fpGfff8e/y8eFhaZRBrTmg/3igQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEOcmTfVah/KR2/C0JZa4Lxp22ngMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvUTV5Wk45VnFIOHBIYjhMUWxscmd2R25iYWVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueYPMA0G
CSqGSIb3DQEBCwUAA4IBAQCTyrFr4tJVJIGWDDmwxPdc9aoXZ36EHfrGSzfV64Zt
P7l+6hXCdKYyxbPdSW0joCvrowCZk8P//U/9AzeQedPrqL9FGM2gmgtLsm3x4x/g
oF16OzGSw7GQYKxhVmXZdpwYkdy0Vsdh5YvENA/dcSrEGEb9ThLkVJLpXuIGsuQz
faaHhYaIc5Clp5fOySr6mU/UzVpYG7e5lj//mrDAOXyjnQP6jULHl3fa1Vn0PWOG
bSA4uiG6ixqfj/c/NeZM305NKeCORTKDhfa5+lEEvkaP9o8WSls0s54UMZjY5pVQ
5BEX7dUwX+xUfZsapmjmIJPPZEj4lacF6F6bgWwmdqDh
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:23 2023 by rpki-client on console-fra.rpki-client.org