Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/WlT6K77Wx90kepJHbeIpgozjy1I.roa
File:                     WlT6K77Wx90kepJHbeIpgozjy1I.roa (raw, json)
Hash identifier:          um8nPynKODcvTN9lbkS6dMSRo5dCGDED1AGhf2OXBWw=
Subject key identifier:   5A:54:FA:2B:BE:D6:C7:DD:24:7A:92:47:6D:E2:29:82:8C:E3:CB:52
Certificate issuer:       /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial:       0189AD406C1898C3B343EB52FCA7C5119F1A
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/WlT6K77Wx90kepJHbeIpgozjy1I.roa
Signing time:             Mon 31 Jul 2023 18:40:27 +0000
ROA not before:           Mon 31 Jul 2023 18:40:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        91.147.116.0/24 maxlen: 24
                          91.147.118.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:ad:40:6c:18:98:c3:b3:43:eb:52:fc:a7:c5:11:9f:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
        Validity
            Not Before: Jul 31 18:40:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5a54fa2bbed6c7dd247a92476de229828ce3cb52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3b:d8:bf:aa:39:dd:71:e2:b2:2a:65:e1:83:
                    e1:e7:d5:0a:29:1c:fc:d7:f4:37:ff:ac:db:4c:3d:
                    cc:30:35:de:fb:22:8c:5c:3a:b8:77:1d:02:2f:da:
                    3e:d7:f7:f8:fd:3c:c5:b9:52:b1:66:a5:cd:6a:09:
                    89:e2:aa:a9:a8:e4:9c:96:b6:76:b0:64:07:9a:bb:
                    34:0f:2e:f7:a1:ea:cb:9f:f0:7e:99:7c:56:08:9d:
                    bc:73:a5:0d:a0:e0:eb:e3:8b:8c:e1:bc:ea:95:79:
                    9c:0a:50:d6:73:3a:cf:72:6c:eb:a2:da:1f:6f:89:
                    bb:9c:6a:97:fc:24:11:c2:3b:1d:e4:65:d8:33:01:
                    c0:80:cb:93:7c:83:28:5f:3b:0c:9e:a6:d6:c6:13:
                    05:92:ca:04:f1:09:46:85:6b:79:3c:1a:d9:e4:65:
                    84:27:ff:8c:fa:4d:25:c1:ba:f6:92:37:cd:1c:7f:
                    c4:df:3d:e7:08:33:23:a1:f0:58:f1:82:e6:25:a6:
                    58:69:04:d8:c6:60:be:9a:8f:d3:69:ca:b7:e8:a9:
                    37:87:c5:a7:7a:76:4b:3e:f6:3d:40:f3:6a:b5:90:
                    b5:28:5e:ed:b6:dc:54:54:4c:da:02:af:65:81:3e:
                    0d:84:2c:24:6d:e1:82:cf:0e:0c:c2:cb:f9:51:3b:
                    49:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:54:FA:2B:BE:D6:C7:DD:24:7A:92:47:6D:E2:29:82:8C:E3:CB:52
            X509v3 Authority Key Identifier:
                keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/WlT6K77Wx90kepJHbeIpgozjy1I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.147.116.0/24
                  91.147.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:b7:e8:2c:1f:41:f8:aa:cb:14:2b:90:2c:6e:9d:a6:ab:d4:
         c8:c9:1c:e7:c8:4f:b9:2f:c2:3f:7a:55:b9:e2:99:cb:3a:22:
         22:5b:93:52:1f:24:fc:ce:e3:3b:ad:1e:b5:4c:2d:57:07:11:
         04:fa:50:5d:ae:09:dd:f6:d7:b8:08:1b:4e:0f:a2:8c:97:93:
         1b:a5:8d:70:85:53:02:a2:69:e8:8a:af:38:2e:79:28:4d:91:
         41:b0:25:f2:ce:da:fe:2a:f4:b3:40:cf:51:7b:db:b6:1f:ff:
         6b:64:64:dc:99:c1:37:84:15:d9:20:f7:66:2a:d5:0d:37:5b:
         83:37:32:d5:e5:d3:81:e1:06:22:61:66:33:4c:4d:bd:c9:ed:
         56:3b:92:98:24:90:16:3c:2b:3d:da:68:b3:98:90:11:f6:16:
         5e:ab:88:72:54:87:f0:7f:d7:45:ab:83:88:d0:99:98:c1:b9:
         38:ed:64:d2:44:95:80:15:72:21:7b:ad:bd:62:f3:6e:5e:db:
         42:9f:63:7e:bf:ba:fa:d7:ad:7c:ef:d5:07:b0:94:3d:97:f3:
         82:e5:c6:b4:6c:0f:d3:4b:20:77:af:11:70:96:8f:41:02:eb:
         54:0a:3e:30:53:84:41:42:9b:6d:83:3d:25:a2:07:6c:55:51:
         cd:e4:0c:90
-----BEGIN CERTIFICATE-----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Generated at Wed Aug 2 18:09:12 2023 by rpki-client on console-ams.rpki-client.org