Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/k7A_fVCidWuKqEN-I4njUKUCMLs.roa
File:                     k7A_fVCidWuKqEN-I4njUKUCMLs.roa (raw, json)
Hash identifier:          9UJzaUGunNXTmxedytVROvJNf2ixT4ap5F3rwdGxLTc=
Subject key identifier:   93:B0:3F:7D:50:A2:75:6B:8A:A8:43:7E:23:89:E3:50:A5:02:30:BB
Certificate issuer:       /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
Certificate serial:       01869253BE68FA514F7D202063F2B2EAA639
Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/k7A_fVCidWuKqEN-I4njUKUCMLs.roa
Signing time:             Mon 27 Feb 2023 10:03:26 +0000
ROA not before:           Mon 27 Feb 2023 10:03:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16262
IP address blocks:        116.206.95.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:92:53:be:68:fa:51:4f:7d:20:20:63:f2:b2:ea:a6:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d
        Validity
            Not Before: Feb 27 10:03:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=93b03f7d50a2756b8aa8437e2389e350a50230bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ca:e8:a8:48:fe:8e:76:ea:c8:fd:c5:2b:01:
                    80:74:91:c2:e0:76:92:99:50:76:23:a4:9a:0e:a1:
                    dc:1b:84:8e:97:1c:b3:8f:0d:8e:f3:f7:25:2e:cd:
                    84:f1:36:29:67:cc:93:83:92:51:07:2a:57:00:22:
                    8b:b2:d8:d7:67:f6:f7:81:d6:94:d7:bb:b4:9d:81:
                    6c:0f:08:94:43:a8:c8:f5:cc:41:51:cc:73:02:ec:
                    f8:1d:f3:d0:56:ec:ef:0f:3a:b9:59:af:a9:e1:78:
                    06:e8:c1:83:f7:0b:38:44:20:a2:db:7f:8d:30:f9:
                    24:64:79:39:da:47:49:91:0b:88:b4:b3:10:a0:36:
                    44:57:42:75:55:f0:fc:0d:97:80:a3:11:11:32:ec:
                    68:4b:c5:d1:11:c3:15:80:5a:2a:ce:3e:4d:30:c3:
                    77:77:e8:84:5b:20:6b:7d:21:de:a2:a6:3f:b9:a2:
                    b1:71:fa:b9:47:77:25:a1:c5:22:82:bc:fe:f8:d1:
                    93:43:f8:05:0f:b6:7e:53:0a:92:fa:67:4d:f5:86:
                    b8:a2:e6:a5:1c:eb:d3:46:c0:7b:52:a7:b2:63:4a:
                    bc:00:6d:d2:da:ff:83:fd:86:8e:d4:ce:5c:c7:cd:
                    20:a1:25:56:93:0f:5c:62:ba:c3:a1:ab:76:b8:c7:
                    3e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B0:3F:7D:50:A2:75:6B:8A:A8:43:7E:23:89:E3:50:A5:02:30:BB
            X509v3 Authority Key Identifier:
                keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/k7A_fVCidWuKqEN-I4njUKUCMLs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.206.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:c1:bf:8e:c4:82:fd:83:4c:d7:3d:be:c2:66:cb:00:72:45:
         0b:ee:29:97:75:7e:ca:c1:a9:a7:70:20:f3:33:43:fc:12:24:
         6d:d6:02:e8:90:10:63:8b:8f:39:ac:f7:52:19:31:a5:18:45:
         98:87:d3:f4:de:88:9d:af:2c:8c:57:6e:75:b1:ff:16:f1:99:
         70:e0:71:22:c4:e6:af:e9:e2:7a:07:04:f6:43:ba:6e:a6:c4:
         8f:15:9d:af:d4:45:1a:fa:e4:b2:3b:4e:5a:3a:04:96:57:14:
         3c:5d:f3:a0:e1:1e:03:ba:82:87:a8:df:4d:a9:1f:f4:8f:35:
         c2:4f:b5:ac:15:06:91:36:f2:b9:c5:40:3e:13:20:0b:e7:d0:
         66:dc:18:3b:02:5b:54:a0:a8:a6:47:58:58:55:64:ed:63:0e:
         c3:ca:56:68:44:d8:3b:f1:b7:c7:da:83:c4:33:54:4c:31:00:
         d4:d9:e5:33:5d:03:8c:a1:98:c7:48:58:df:dd:50:78:f9:fb:
         2e:0c:15:15:e1:b3:ec:8f:44:9c:e1:76:e4:68:c1:01:27:78:
         a3:d3:3f:36:42:d9:4b:fa:47:63:f0:34:57:16:53:8c:e7:10:
         96:58:69:4a:02:dc:2a:d1:54:a9:f2:4f:f0:57:a5:db:3f:a8:
         09:e7:cd:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYaSU75o+lFPfSAgY/Ky6qY5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMzEyZTkyOTdiYzFkMjdlYmViNDc2ZGVhMGVlMTVkZDc1
NjU0MmQwHhcNMjMwMjI3MTAwMzI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5M2IwM2Y3ZDUwYTI3NTZiOGFhODQzN2UyMzg5ZTM1MGE1MDIzMGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusroqEj+jnbqyP3FKwGAdJHC4HaS
mVB2I6SaDqHcG4SOlxyzjw2O8/clLs2E8TYpZ8yTg5JRBypXACKLstjXZ/b3gdaU
17u0nYFsDwiUQ6jI9cxBUcxzAuz4HfPQVuzvDzq5Wa+p4XgG6MGD9ws4RCCi23+N
MPkkZHk52kdJkQuItLMQoDZEV0J1VfD8DZeAoxERMuxoS8XREcMVgFoqzj5NMMN3
d+iEWyBrfSHeoqY/uaKxcfq5R3clocUigrz++NGTQ/gFD7Z+UwqS+mdN9Ya4oual
HOvTRsB7UqeyY0q8AG3S2v+D/YaO1M5cx80goSVWkw9cYrrDoat2uMc+0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJOwP31QonVriqhDfiOJ41ClAjC7MB8GA1UdIwQY
MBaAFJ8xLpKXvB0n6+tHbeoO4V3XVlQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQt
YmQ1ZDNmMDBmYmIyLzEvazdBX2ZWQ2lkV3VLcUVOLUk0bmpVS1VDTUxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQtYmQ1ZDNmMDBmYmIy
LzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAdM5fMA0G
CSqGSIb3DQEBCwUAA4IBAQBxwb+OxIL9g0zXPb7CZssAckUL7imXdX7KwamncCDz
M0P8EiRt1gLokBBji485rPdSGTGlGEWYh9P03oidryyMV251sf8W8Zlw4HEixOav
6eJ6BwT2Q7pupsSPFZ2v1EUa+uSyO05aOgSWVxQ8XfOg4R4DuoKHqN9NqR/0jzXC
T7WsFQaRNvK5xUA+EyAL59Bm3Bg7AltUoKimR1hYVWTtYw7DylZoRNg78bfH2oPE
M1RMMQDU2eUzXQOMoZjHSFjf3VB4+fsuDBUV4bPsj0Sc4XbkaMEBJ3ij0z82QtlL
+kdj8DRXFlOM5xCWWGlKAtwq0VSp8k/wV6XbP6gJ583u
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:58 2023 by rpki-client on console-fra.rpki-client.org