Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/mNouxLcexee0OMICJpEVpBFobxQ.roa
File:                     mNouxLcexee0OMICJpEVpBFobxQ.roa (raw, json)
Hash identifier:          4pBfTck6HOsZalzpOs3huK6wn8R+y3OwkFnhUeR+Qwg=
Subject key identifier:   98:DA:2E:C4:B7:1E:C5:E7:B4:38:C2:02:26:91:15:A4:11:68:6F:14
Certificate issuer:       /CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Certificate serial:       0185F47D439BA2E793F403251D18B223C2E1
Authority key identifier: 15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/mNouxLcexee0OMICJpEVpBFobxQ.roa
Signing time:             Fri 27 Jan 2023 18:28:48 +0000
ROA not before:           Fri 27 Jan 2023 18:28:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212238
IP address blocks:        185.164.122.0/24 maxlen: 24
                          185.164.120.0/24 maxlen: 24
                          185.221.96.0/24 maxlen: 24
                          185.221.98.0/24 maxlen: 24
                          185.221.97.0/24 maxlen: 24
                          185.221.99.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:f4:7d:43:9b:a2:e7:93:f4:03:25:1d:18:b2:23:c2:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ddd4c9dc23fac35574fce2b4294398add8521c
        Validity
            Not Before: Jan 27 18:28:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=98da2ec4b71ec5e7b438c202269115a411686f14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:fd:e1:24:b1:f7:bc:ba:36:97:90:9e:63:a0:
                    8e:48:94:c3:46:f8:45:5f:2f:c4:de:5c:ce:c1:df:
                    2f:73:1f:d2:e1:8d:35:50:f9:38:3f:86:f3:43:4a:
                    aa:a3:e8:eb:e5:82:8e:4c:15:6a:bf:86:5c:d0:39:
                    d6:45:05:8d:ff:11:f4:d5:aa:58:0e:36:14:a0:7d:
                    5e:9a:07:55:60:c1:83:56:66:6b:57:33:f4:01:21:
                    7d:3b:e8:34:4d:15:4b:c8:59:3f:51:7f:c7:68:9b:
                    c3:0b:d8:ed:7b:4d:3e:0c:f2:77:2b:69:31:b7:86:
                    ba:71:24:3c:28:08:88:36:09:8d:56:bf:31:64:92:
                    88:9f:b5:15:fd:59:60:24:6f:13:d8:94:e8:b8:32:
                    0c:3e:48:0c:e7:cc:87:96:c3:ae:d2:48:08:2e:64:
                    be:b3:ad:4c:e3:17:98:d4:f6:5e:cb:a5:35:07:48:
                    d1:35:b0:f1:90:9d:43:e9:da:19:57:bb:9d:30:47:
                    0c:f1:9b:2c:62:3b:3e:38:9f:2d:f6:44:9c:55:63:
                    56:54:2a:17:12:0b:8c:50:c1:48:2f:c5:9c:91:f1:
                    a8:5f:84:9a:21:51:06:1a:f3:50:11:ff:ac:df:0f:
                    a0:65:25:14:f6:50:c6:e2:b6:cb:c6:d4:ad:13:77:
                    64:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:DA:2E:C4:B7:1E:C5:E7:B4:38:C2:02:26:91:15:A4:11:68:6F:14
            X509v3 Authority Key Identifier:
                keyid:15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/mNouxLcexee0OMICJpEVpBFobxQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.164.120.0/24
                  185.164.122.0/24
                  185.221.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1b:8b:31:94:c0:65:30:34:1d:da:26:c6:17:75:9c:e9:f8:49:
         39:a0:0c:d6:1a:d0:d0:50:2f:2f:a0:1e:ad:35:ca:c9:c0:c6:
         46:ce:5a:80:89:01:48:ad:78:20:c0:a2:34:83:eb:21:cc:95:
         d9:49:4c:74:60:9d:83:9d:a1:dd:62:29:8a:ed:52:fd:e5:71:
         81:92:fa:40:2b:a5:00:09:50:a7:1e:a0:4e:77:49:d4:f3:ee:
         29:43:b5:fe:d9:09:cf:5f:0c:4b:ca:b4:a1:36:34:ff:89:ec:
         64:99:dd:5a:8b:b3:cb:9f:2f:4b:2e:58:af:63:b3:07:cc:3b:
         f5:7d:30:55:c9:28:9f:6c:8a:d5:13:8d:c9:b0:aa:69:52:49:
         fc:f7:59:e1:c4:54:1b:0d:fc:4a:6d:85:22:1f:ca:d6:07:0e:
         52:89:c4:e4:f4:a4:38:a5:af:79:c9:31:67:23:a7:2d:76:24:
         17:88:88:95:69:26:4e:35:45:3d:7b:bf:28:03:9d:8d:8e:e0:
         1e:44:44:1b:a6:2b:8f:c3:b8:34:8a:96:32:64:4e:cf:93:da:
         14:67:63:8a:d1:50:32:81:40:4e:27:4b:4f:25:42:19:fc:b4:
         87:1e:b7:0b:87:7b:40:d9:92:05:e6:50:72:fb:74:ac:11:09:
         08:c3:73:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:44 2023 by rpki-client on console-fra.rpki-client.org