Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/3AXRBQk8Yn3Y_jJMypvdRZzYhWw.roa
File:                     3AXRBQk8Yn3Y_jJMypvdRZzYhWw.roa (raw, json)
Hash identifier:          YhCy3gMAATk0ch6lIRs+y2xCnbzVT49FqN/ui4ZpB8M=
Subject key identifier:   DC:05:D1:05:09:3C:62:7D:D8:FE:32:4C:CA:9B:DD:45:9C:D8:85:6C
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       018571D7CE363E776DC00C10999DAA658437
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/3AXRBQk8Yn3Y_jJMypvdRZzYhWw.roa
Signing time:             Mon 02 Jan 2023 09:37:26 +0000
ROA not before:           Mon 02 Jan 2023 09:37:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     17819
IP address blocks:        212.69.18.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d7:ce:36:3e:77:6d:c0:0c:10:99:9d:aa:65:84:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Jan  2 09:37:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=dc05d105093c627dd8fe324cca9bdd459cd8856c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ed:97:71:79:39:5a:87:6d:88:d1:07:dc:19:
                    ea:f7:36:4b:ac:43:01:23:56:5b:b9:8d:6f:23:40:
                    9a:28:61:a4:54:da:a8:12:b3:f4:8f:15:d6:3b:49:
                    c5:2f:7b:88:ad:77:7e:7b:7a:4f:f8:26:12:79:15:
                    11:f9:76:66:53:ba:ef:d4:b4:e5:58:11:58:4d:61:
                    a4:6c:f1:72:56:1d:c3:f9:8b:bd:6a:f5:cf:94:0e:
                    a7:10:cc:9c:43:01:d7:66:45:6a:70:b7:f2:ad:68:
                    ea:df:0c:a0:7a:f1:2a:f1:dc:87:b8:a2:ce:4c:52:
                    41:2a:2e:b2:9a:98:92:7a:60:d3:ba:99:83:0b:3c:
                    23:10:23:9d:04:23:9e:11:ef:ff:9a:6f:2b:86:4c:
                    bd:28:ac:38:5f:a7:1c:7f:da:20:eb:4d:9d:e7:e3:
                    80:12:b5:21:22:6c:a3:e8:f2:25:7e:00:ba:99:ee:
                    db:d0:18:14:69:82:be:26:1a:00:41:0e:0a:98:b0:
                    91:6b:66:b2:2b:f0:07:a4:51:b9:4d:8d:03:96:37:
                    8a:97:b6:8e:85:f9:28:73:45:ca:4d:63:cd:e6:5b:
                    d4:a7:15:94:f4:17:1d:b6:48:fd:bb:bc:40:47:7c:
                    57:e3:3a:12:ca:f5:c3:9b:b4:94:5b:a3:07:5b:b4:
                    41:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:05:D1:05:09:3C:62:7D:D8:FE:32:4C:CA:9B:DD:45:9C:D8:85:6C
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/3AXRBQk8Yn3Y_jJMypvdRZzYhWw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.69.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:1f:ad:e7:93:8b:19:0f:1b:2a:8c:cd:a9:4f:4c:94:d2:81:
         7d:f6:1a:5e:ea:a4:95:bc:5d:57:25:b6:13:fe:40:03:b2:9c:
         c2:8f:f2:83:e5:bb:87:20:db:55:4e:50:ff:e6:af:d2:4b:1c:
         2d:d0:f0:81:04:5f:1f:8a:e2:ec:50:dd:49:84:b9:87:bd:37:
         c5:97:02:8e:ac:18:18:26:58:f8:1f:57:20:43:00:10:f7:a4:
         37:1d:5c:35:8a:85:0e:60:ea:a1:27:c7:e6:c0:30:4c:ce:f0:
         89:8c:73:99:4a:70:fe:a8:a4:69:31:0c:c7:6a:73:8b:fa:33:
         66:e2:98:ba:8e:55:28:c5:6a:f3:1a:80:69:11:17:ac:e1:9d:
         34:33:f2:d4:6a:03:8a:c4:c9:de:8a:cd:88:12:55:ae:9c:3b:
         00:2f:01:99:95:5c:24:57:87:02:6f:a1:78:0d:1b:7d:ee:9d:
         a0:91:56:56:60:16:8d:85:9f:a4:51:27:7f:a0:c0:f5:bc:f2:
         a2:47:af:ed:e9:f4:a6:f9:01:dc:5f:84:0f:8b:bf:ce:21:22:
         e4:6d:c1:9d:10:2f:82:86:a2:63:3d:b1:83:8e:e5:ca:a4:57:
         98:f4:f2:18:a6:f6:1f:52:e6:8d:93:e0:74:24:a1:d9:06:50:
         ba:4b:7e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:31 2023 by rpki-client on console-fra.rpki-client.org