Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/766970-1ba3-490b-a6c9-51083d8630b2/1/EPwx1OALrvUE3_Qd80cUwjsop4A.roa
File:                     EPwx1OALrvUE3_Qd80cUwjsop4A.roa (raw, json)
Hash identifier:          LYqXtfA186Q1/WElUFEz4X4JZ0BFNFRA9UMw2a4z4xY=
Subject key identifier:   10:FC:31:D4:E0:0B:AE:F5:04:DF:F4:1D:F3:47:14:C2:3B:28:A7:80
Certificate issuer:       /CN=33adf9eef1dedc7b35e0da464bfd77a49a5691ee
Certificate serial:       01857102CFA08AF342C34DECA893A0615D20
Authority key identifier: 33:AD:F9:EE:F1:DE:DC:7B:35:E0:DA:46:4B:FD:77:A4:9A:56:91:EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M6357vHe3Hs14NpGS_13pJpWke4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/766970-1ba3-490b-a6c9-51083d8630b2/1/EPwx1OALrvUE3_Qd80cUwjsop4A.roa
Signing time:             Mon 02 Jan 2023 05:44:47 +0000
ROA not before:           Mon 02 Jan 2023 05:44:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        193.3.181.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:02:cf:a0:8a:f3:42:c3:4d:ec:a8:93:a0:61:5d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33adf9eef1dedc7b35e0da464bfd77a49a5691ee
        Validity
            Not Before: Jan  2 05:44:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=10fc31d4e00baef504dff41df34714c23b28a780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:55:43:95:4e:3a:64:68:69:7c:e4:44:15:55:
                    8b:1b:f4:95:2f:b4:20:1a:e3:a4:22:bd:ed:e7:5c:
                    d6:4f:b2:ab:a6:a9:fe:c0:1b:15:31:69:d2:b9:8b:
                    5c:03:7f:a5:a8:12:41:f8:9b:b0:e9:07:6d:62:6c:
                    9e:47:47:ff:bf:31:07:54:43:f9:5d:ba:80:37:0c:
                    59:d1:08:37:f6:32:c7:25:3a:96:a7:0c:66:2a:b7:
                    4d:6d:b4:71:da:24:d8:c2:2f:0c:df:b8:d1:f7:03:
                    03:7b:a5:28:0e:3d:a3:1f:fe:0c:a6:76:da:ea:20:
                    d1:4f:7b:31:f2:b0:54:e4:19:dc:68:3f:ec:04:f4:
                    75:95:88:30:45:ad:93:d7:82:42:f7:e6:89:77:60:
                    b8:b6:e9:54:a0:9c:e8:3e:4a:48:d8:db:d1:1b:0d:
                    dc:d7:1b:d4:ab:c3:14:17:62:d5:db:a3:7d:90:28:
                    83:62:43:e2:94:2c:ed:dd:3e:7a:35:68:7d:be:a7:
                    bf:cd:52:8c:1a:3a:8e:16:70:cb:b8:00:c8:14:9e:
                    48:2e:5e:ae:7b:d4:08:75:c2:6e:8f:7b:fc:0d:1c:
                    10:8e:d5:f1:e3:60:35:b5:18:7b:1a:29:a9:b3:7c:
                    90:44:76:75:be:a8:dc:7c:48:f3:a5:3c:9c:6e:c2:
                    f9:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:FC:31:D4:E0:0B:AE:F5:04:DF:F4:1D:F3:47:14:C2:3B:28:A7:80
            X509v3 Authority Key Identifier:
                keyid:33:AD:F9:EE:F1:DE:DC:7B:35:E0:DA:46:4B:FD:77:A4:9A:56:91:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6357vHe3Hs14NpGS_13pJpWke4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/766970-1ba3-490b-a6c9-51083d8630b2/1/EPwx1OALrvUE3_Qd80cUwjsop4A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/766970-1ba3-490b-a6c9-51083d8630b2/1/M6357vHe3Hs14NpGS_13pJpWke4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.3.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:14:97:07:84:d1:5f:3e:cd:13:fa:33:bf:64:fc:e9:37:54:
         d6:31:46:b1:9d:83:dd:66:30:5c:d2:64:41:3b:0f:44:23:dd:
         5c:b4:0c:f2:50:ed:f1:a4:52:f9:76:00:77:4c:cc:35:66:3e:
         25:70:ad:e3:50:43:8b:c4:d8:53:3e:e7:c6:19:49:d7:39:c2:
         1c:fb:ea:eb:b2:51:10:4a:0f:8e:c0:ea:dd:73:4f:7a:d0:34:
         d3:52:3d:52:e0:e0:19:5a:03:b7:d7:b1:bf:a2:52:73:6f:fa:
         6d:b7:b9:10:49:36:66:1d:2f:90:c0:27:f7:a6:2b:5c:da:d1:
         1b:52:46:db:f4:6d:d9:d3:c5:82:ea:73:39:5c:ab:76:f9:6e:
         db:da:e4:14:c0:dc:d4:20:4f:2c:b1:95:a4:bb:9b:d0:0a:43:
         35:20:e7:20:a8:2c:14:41:14:ac:96:79:26:91:f7:9b:00:a4:
         1a:9c:7c:e5:20:30:48:2b:08:85:9a:f8:07:db:79:4d:b4:37:
         d2:4a:69:b2:4c:33:7c:88:2e:4c:9e:de:e7:cd:ad:a9:72:b0:
         2b:31:e9:7e:e4:29:09:ce:5b:9a:79:67:32:5d:09:32:49:78:
         32:c5:10:74:d0:0a:82:5d:93:df:76:6e:ff:61:99:95:79:af:
         ad:1c:15:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:43 2023 by rpki-client on console-fra.rpki-client.org