Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DcqtIUkD5W9y7o7n8tENe1tHm5U.roa
File:                     DcqtIUkD5W9y7o7n8tENe1tHm5U.roa (raw, json)
Hash identifier:          2mnL/1iieNSK9KNwm57JFCwSN1O+69gD9x/4eo4UQ3c=
Subject key identifier:   0D:CA:AD:21:49:03:E5:6F:72:EE:8E:E7:F2:D1:0D:7B:5B:47:9B:95
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       01859783424B383C006CB0D0BB1F61F9F9CA
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DcqtIUkD5W9y7o7n8tENe1tHm5U.roa
Signing time:             Mon 09 Jan 2023 17:10:39 +0000
ROA not before:           Mon 09 Jan 2023 17:10:39 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61988
IP address blocks:        93.170.135.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:97:83:42:4b:38:3c:00:6c:b0:d0:bb:1f:61:f9:f9:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  9 17:10:39 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0dcaad214903e56f72ee8ee7f2d10d7b5b479b95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:68:b7:5b:88:84:97:9a:dc:24:87:78:97:92:
                    df:a9:f0:f4:7e:98:a2:66:f9:84:16:4e:c8:e0:18:
                    de:12:37:0a:c4:c7:49:5f:e4:08:99:29:a3:27:53:
                    ab:36:3e:31:70:94:76:aa:3c:bc:e8:67:cb:9c:f1:
                    a9:81:fc:00:c4:e8:e5:97:2b:2f:45:e6:8f:bf:9d:
                    5f:74:61:20:35:9c:34:64:f5:1d:16:13:a6:32:3a:
                    7d:bc:8d:6f:c5:b9:a7:19:76:8e:c8:48:bd:7f:ee:
                    df:35:7a:6b:65:36:9a:ee:88:34:61:41:b1:af:60:
                    f3:ce:a4:39:88:36:6e:45:13:f8:d9:df:f8:60:49:
                    0b:9a:ec:24:d5:22:ac:29:4a:36:89:63:e7:44:71:
                    f4:cd:4f:e8:ba:cd:c5:cf:38:37:d6:b4:7f:bb:8a:
                    78:e9:98:95:ee:2f:9f:7e:49:54:07:df:dc:8a:92:
                    72:0b:be:54:c9:c6:b6:6f:4d:d3:ff:58:5f:61:a6:
                    6f:7a:c7:98:c4:17:63:84:8e:57:b0:01:f7:4b:d8:
                    3e:5b:36:02:b3:88:16:cb:41:04:81:67:57:ba:96:
                    9f:c6:fd:84:e1:6a:df:97:8e:d2:64:bc:f7:d8:e8:
                    77:73:d7:13:22:af:ea:09:3c:74:8a:70:3c:65:4e:
                    8c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CA:AD:21:49:03:E5:6F:72:EE:8E:E7:F2:D1:0D:7B:5B:47:9B:95
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DcqtIUkD5W9y7o7n8tENe1tHm5U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.170.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:00:25:d2:96:26:92:11:e5:65:00:ba:7a:c5:42:21:66:87:
         64:38:80:a1:3e:1f:41:ee:2b:08:2d:af:df:81:47:d8:3c:bf:
         e7:08:1a:58:31:49:d1:71:97:b7:cf:51:19:57:d1:97:0e:67:
         6f:ba:08:9d:e1:2e:8d:22:c5:7c:11:16:40:50:5e:10:6f:fb:
         ab:37:1a:38:70:a3:a5:d4:d9:5c:be:d9:7b:e7:ab:2b:d5:ef:
         20:81:d5:e2:c4:87:f4:8e:74:44:36:5a:73:3e:f9:3d:3d:26:
         93:18:ec:a4:5e:4a:cc:ab:6b:ac:f3:49:bc:ce:df:d4:bf:f7:
         c6:90:15:78:b6:e7:9c:a0:48:a8:74:aa:b2:2a:86:e8:88:7f:
         ee:60:94:df:98:56:eb:8b:f8:1a:b7:6a:95:d9:54:6d:5a:10:
         81:15:aa:9a:f2:23:bc:ab:9a:ec:00:03:80:cf:c4:89:6a:fc:
         7e:b9:a0:06:2b:15:a6:53:c6:b8:75:13:af:2e:8e:4f:86:ad:
         17:33:65:86:8f:13:5d:2a:30:c6:b1:d0:df:3d:48:4b:c8:9a:
         61:76:9a:92:c6:0e:05:60:b8:52:5b:63:83:6a:57:82:5a:a2:
         b8:b0:f4:fa:1a:a4:c7:bd:ee:ed:d0:7d:60:56:23:05:5d:5b:
         ca:16:00:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:41 2023 by rpki-client on console-fra.rpki-client.org