Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/6ewkjqCeRtinNLJKJviIKZuolLQ.roa
File:                     6ewkjqCeRtinNLJKJviIKZuolLQ.roa (raw, json)
Hash identifier:          mvZPCl2V4ZzFLRU/JRPVRmGsMrfV6JSVK9angEvNoNA=
Subject key identifier:   E9:EC:24:8E:A0:9E:46:D8:A7:34:B2:4A:26:F8:88:29:9B:A8:94:B4
Certificate issuer:       /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial:       018940767286484821E04754B1FA494AF76A
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/6ewkjqCeRtinNLJKJviIKZuolLQ.roa
Signing time:             Mon 10 Jul 2023 15:40:51 +0000
ROA not before:           Mon 10 Jul 2023 15:40:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        217.113.22.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:40:76:72:86:48:48:21:e0:47:54:b1:fa:49:4a:f7:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
        Validity
            Not Before: Jul 10 15:40:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e9ec248ea09e46d8a734b24a26f888299ba894b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4f:5b:cd:90:ba:b0:5c:af:b5:91:95:95:43:
                    c6:e1:bd:81:77:00:39:9f:3e:6c:4f:8e:77:7b:19:
                    92:83:e5:51:fd:60:95:b9:bc:d1:14:9f:63:06:ac:
                    9f:e5:c8:56:0c:2c:1b:25:35:b3:2e:8c:38:25:ab:
                    3d:54:d9:75:0b:d0:43:c1:74:9f:1c:36:d4:bd:87:
                    d6:02:a5:52:f9:b3:aa:bc:61:e9:8c:29:e1:4a:ed:
                    8e:cd:f7:08:2e:18:31:86:b1:05:76:6e:12:80:02:
                    55:30:d5:f5:a4:78:ac:81:5b:16:c5:95:60:14:ec:
                    26:4d:3a:df:fb:21:39:79:76:9b:9a:31:d9:ce:21:
                    85:81:c4:b1:1d:2e:15:4a:68:ee:49:26:e5:c9:ba:
                    de:ff:d5:c1:9a:5a:44:57:8b:43:d4:34:0e:e3:c6:
                    2b:a2:85:15:4a:57:65:f9:d3:15:e7:d4:27:5d:1e:
                    dc:cd:16:cc:af:40:dd:11:d0:b8:db:1c:91:4c:de:
                    a6:dc:be:0d:7c:77:cb:db:c0:ee:0e:97:d0:03:91:
                    e4:98:94:07:82:03:4e:c0:84:70:b5:85:b3:09:ca:
                    c6:bc:4d:1b:8b:76:01:ed:b8:2c:83:06:d0:5d:a7:
                    c9:cb:f4:52:21:e8:22:d4:3b:d9:ed:25:e9:3a:cc:
                    49:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:EC:24:8E:A0:9E:46:D8:A7:34:B2:4A:26:F8:88:29:9B:A8:94:B4
            X509v3 Authority Key Identifier:
                keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/6ewkjqCeRtinNLJKJviIKZuolLQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.113.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:2e:e2:94:65:e8:ea:b9:fb:f1:67:20:15:da:14:a8:ae:9e:
         ef:8a:19:0c:ed:cf:b2:07:43:2f:2e:24:f6:bd:89:4f:72:34:
         8a:a5:f7:ec:eb:8d:f1:8e:b8:71:3b:e8:07:f2:1d:15:9e:a0:
         2c:30:03:05:1f:6c:b3:83:82:5c:f6:c1:f8:b2:05:93:56:9b:
         78:3b:5e:f5:cd:7f:74:71:d2:17:56:8f:1c:d5:a5:0f:79:1f:
         72:d4:d5:19:5e:cd:65:cb:37:8a:16:aa:20:14:28:c5:1b:e8:
         ba:d6:bb:89:37:1e:d8:cb:72:17:65:05:0b:a0:37:fb:bf:be:
         36:e3:47:29:0f:23:0d:54:33:7a:33:6e:0b:07:ff:31:ce:ce:
         41:08:ec:0a:d7:05:24:4f:93:10:88:0f:41:d5:93:aa:c2:68:
         81:02:88:f4:be:8d:62:51:47:86:f5:a0:e9:bb:cc:1e:fe:b0:
         ed:53:a4:fe:2f:fb:24:de:ff:7a:73:f8:70:8c:f3:ab:42:35:
         d7:91:4b:0d:d4:c4:eb:0d:db:38:b5:1b:af:88:f3:50:21:6d:
         91:d3:24:ff:37:9e:66:12:9a:23:c2:61:7e:1f:a1:27:54:bd:
         8e:a9:c0:78:a5:6a:f6:c9:eb:76:40:84:1f:29:fe:cd:96:e5:
         92:7d:52:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:42 2023 by rpki-client on console-fra.rpki-client.org