Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/uWmp_EpM47mywXQPBs3SyLSdoV8.roa
File:                     uWmp_EpM47mywXQPBs3SyLSdoV8.roa (raw, json)
Hash identifier:          OOcwL8Jt1wSFRqmNB33hsJxeINzoM/F4txyWWjKzLp8=
Subject key identifier:   B9:69:A9:FC:4A:4C:E3:B9:B2:C1:74:0F:06:CD:D2:C8:B4:9D:A1:5F
Certificate issuer:       /CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
Certificate serial:       01856B935B88A376BAF63C2AF2492540101A
Authority key identifier: E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/uWmp_EpM47mywXQPBs3SyLSdoV8.roa
Signing time:             Sun 01 Jan 2023 04:24:57 +0000
ROA not before:           Sun 01 Jan 2023 04:24:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6461
IP address blocks:        82.98.192.0/21 maxlen: 21
                          94.31.0.0/18 maxlen: 18
                          193.160.88.0/22 maxlen: 22
                          82.98.232.0/21 maxlen: 21
                          213.161.64.0/19 maxlen: 19
                          82.98.240.0/20 maxlen: 20
                          193.28.62.0/23 maxlen: 23
                          213.152.224.0/19 maxlen: 19
                          79.141.32.0/20 maxlen: 20
                          193.28.104.0/23 maxlen: 23
                          2a00:16f8::/29 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:93:5b:88:a3:76:ba:f6:3c:2a:f2:49:25:40:10:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e30cc9429b63382e9b1714d21b3c96d2e5ebe257
        Validity
            Not Before: Jan  1 04:24:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b969a9fc4a4ce3b9b2c1740f06cdd2c8b49da15f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:29:a7:75:91:07:c6:ea:dc:a8:a9:41:89:51:
                    c6:71:fc:56:8d:70:5b:86:bd:77:9d:1e:ea:86:ab:
                    9f:67:5d:c3:d2:ce:89:04:01:05:99:c6:68:83:ee:
                    f1:4e:81:33:2c:10:05:ec:cf:de:35:5b:e2:a2:f8:
                    4a:0c:8c:03:81:fd:b6:d6:e3:77:39:ed:e9:58:be:
                    5b:ab:41:fc:41:30:cb:56:36:75:18:e7:ee:82:59:
                    9f:10:33:6d:60:cd:d9:c9:1c:19:4c:70:38:59:a5:
                    c0:27:4e:4e:42:6d:fa:37:47:ac:af:bd:3c:90:8b:
                    84:93:08:77:ca:b5:32:83:e1:60:42:be:a5:ec:10:
                    90:2b:d1:87:b0:9d:15:37:37:1d:3e:6a:83:8d:a5:
                    42:5c:0c:f3:9a:67:97:43:8a:34:7a:0b:05:b0:42:
                    5a:f2:ad:e7:4f:b7:41:63:0e:df:40:c6:39:59:89:
                    dd:92:d3:ff:3c:2f:75:9a:95:31:b4:da:fe:09:ce:
                    d6:a3:1d:b5:7a:d2:4a:60:65:cf:13:f3:6f:9b:fc:
                    03:e2:c7:35:98:04:35:2d:ea:a9:dc:50:f5:59:12:
                    b0:72:45:98:f4:6d:9f:52:9d:aa:0a:62:7e:3f:9f:
                    33:97:19:4f:69:9a:dc:82:39:8b:59:eb:e1:8a:a9:
                    c4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:69:A9:FC:4A:4C:E3:B9:B2:C1:74:0F:06:CD:D2:C8:B4:9D:A1:5F
            X509v3 Authority Key Identifier:
                keyid:E3:0C:C9:42:9B:63:38:2E:9B:17:14:D2:1B:3C:96:D2:E5:EB:E2:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wzJQptjOC6bFxTSGzyW0uXr4lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/uWmp_EpM47mywXQPBs3SyLSdoV8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c73287-b1b1-4aca-bd2e-db4f352e9ad3/1/4wzJQptjOC6bFxTSGzyW0uXr4lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  79.141.32.0/20
                  82.98.192.0/21
                  82.98.232.0-82.98.255.255
                  94.31.0.0/18
                  193.28.62.0/23
                  193.28.104.0/23
                  193.160.88.0/22
                  213.152.224.0/19
                  213.161.64.0/19
                IPv6:
                  2a00:16f8::/29

    Signature Algorithm: sha256WithRSAEncryption
         c2:9a:e7:1e:98:9d:30:66:2f:b8:72:71:1d:c6:3c:b3:20:10:
         b5:5b:d3:f3:13:2f:92:1d:bc:82:dd:b2:c4:e0:ec:04:57:72:
         14:7c:b7:f9:31:33:75:6a:9d:22:07:0c:08:82:21:d0:ff:2c:
         95:c1:42:72:53:e4:fb:ab:5e:d2:46:35:08:48:9e:cd:3a:90:
         d8:2d:88:58:0f:f6:15:f9:a9:06:6d:bb:f7:48:41:00:64:e4:
         3b:1f:83:3b:58:d1:89:7b:5a:f8:07:1e:9c:99:ab:56:83:cc:
         f4:6f:9b:da:7d:c6:31:3a:91:8d:a9:3f:93:8e:56:d2:00:6e:
         ab:86:6c:a1:4c:82:dd:03:3d:a1:15:c8:d4:3b:a5:69:e7:3a:
         69:ae:20:6d:c9:90:1f:59:56:9d:40:90:f1:57:67:bd:f0:85:
         30:61:c0:8a:df:12:a7:5d:7c:bc:91:c1:b0:5d:d7:fd:8c:c2:
         31:68:45:d4:0d:51:97:d2:e7:b5:48:04:94:5b:b0:12:3e:ca:
         b6:1f:f8:cc:8b:5d:19:db:54:3f:db:b4:63:c4:bf:fb:c1:c9:
         45:c8:56:2e:1d:86:93:c5:89:c0:81:c7:b8:e5:86:21:b5:c1:
         9b:68:bd:a6:1c:6e:4d:0e:6c:06:ee:8d:64:ea:c3:b8:e1:a2:
         cb:13:88:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 3 17:30:46 2023 by rpki-client on console-fra.rpki-client.org