Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/HOlpagUO_nr46IeCMagFn1QYtXE.roa
File:                     HOlpagUO_nr46IeCMagFn1QYtXE.roa (raw, json)
Hash identifier:          gFqIR5ji3qv1ZHmv0o7yj93zPC76s5Fl7ORqhd0f7PA=
Subject key identifier:   1C:E9:69:6A:05:0E:FE:7A:F8:E8:87:82:31:A8:05:9F:54:18:B5:71
Certificate issuer:       /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial:       01856F8242EBD3B7A51537867A06DB95B982
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/HOlpagUO_nr46IeCMagFn1QYtXE.roa
Signing time:             Sun 01 Jan 2023 22:44:45 +0000
ROA not before:           Sun 01 Jan 2023 22:44:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29405
IP address blocks:        193.34.48.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:82:42:eb:d3:b7:a5:15:37:86:7a:06:db:95:b9:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
        Validity
            Not Before: Jan  1 22:44:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1ce9696a050efe7af8e8878231a8059f5418b571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5b:1d:1c:07:dc:9d:ea:89:35:7d:b6:74:05:
                    6e:ef:b1:35:af:05:e6:e6:f5:62:cf:04:9b:7b:7c:
                    d4:59:97:21:b0:52:ac:d3:c8:24:72:5c:06:fb:cc:
                    39:ac:4b:d7:36:39:54:b8:e2:6b:8c:c1:cb:fe:42:
                    04:14:f6:4e:ba:54:ef:b7:1d:89:74:9c:e7:05:4e:
                    6c:f6:92:a6:85:8c:49:c4:65:38:d6:3b:d2:1d:4c:
                    78:92:05:5b:7b:82:47:e3:a1:61:9e:9d:d6:70:67:
                    27:ab:d8:ed:79:49:62:cb:77:f7:3b:31:4c:1a:eb:
                    9c:10:3f:c0:b8:7b:b2:2b:5d:6c:9b:83:d9:30:22:
                    0f:bc:b6:67:64:0d:ec:3d:0d:a3:81:1f:de:07:ce:
                    0d:6a:bd:cd:5a:0b:83:a9:ed:a5:13:b8:e1:4d:b4:
                    6a:ac:d9:3a:bb:ab:a6:c1:47:30:62:20:e9:8b:1c:
                    e3:4b:ca:fc:e7:f2:08:58:38:06:b8:64:87:26:e1:
                    18:36:d7:d1:72:9d:92:da:84:d0:32:ea:10:03:f7:
                    a7:a7:6b:95:73:d7:c9:0c:fe:e7:c0:c8:7e:ac:58:
                    59:78:30:35:a4:ce:53:46:9d:02:cc:e4:53:bf:21:
                    1b:a3:92:67:55:99:b6:2f:2f:8c:f1:dd:49:4c:a4:
                    01:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E9:69:6A:05:0E:FE:7A:F8:E8:87:82:31:A8:05:9F:54:18:B5:71
            X509v3 Authority Key Identifier:
                keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/HOlpagUO_nr46IeCMagFn1QYtXE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.34.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:da:39:eb:41:bd:8f:ad:32:b8:6d:f1:b6:ae:f1:9f:25:52:
         04:72:4f:20:09:bc:cd:88:14:52:cd:8f:6e:72:92:cc:53:bf:
         f3:c4:3b:03:3e:23:5d:e3:84:f0:dd:57:d7:4c:b7:f2:81:af:
         3b:ef:76:47:ca:e9:70:38:6d:a8:ed:06:5e:fc:da:1a:ad:2c:
         c1:05:3c:5c:d3:85:ee:b3:ef:22:14:94:fd:e8:cb:92:43:97:
         7a:1d:a7:4d:30:f0:c5:50:69:fd:1e:47:f7:aa:70:ab:a3:1a:
         28:9c:57:dc:69:02:7b:cc:79:42:14:44:2f:a9:34:1d:7b:0f:
         26:50:83:2f:16:03:21:61:90:e5:7c:05:ea:9d:36:02:c8:84:
         32:8d:8c:2c:92:a0:66:14:8e:45:20:c9:08:24:30:e9:59:13:
         94:f4:b3:e5:aa:0d:55:51:62:f3:8c:0a:94:a5:1c:c3:f8:8a:
         32:2d:5c:57:3c:b7:ab:d3:49:26:f7:b8:20:8b:44:39:1a:36:
         bc:eb:23:79:86:34:e7:e5:78:d3:d2:4f:68:58:31:2f:ea:4e:
         87:41:af:3b:62:b2:c3:75:bd:16:c1:57:99:a6:6d:3f:f7:57:
         34:c5:fc:ae:b6:d4:6e:cc:ba:65:b2:ed:f9:79:a0:d1:4b:59:
         ad:77:ab:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:48 2023 by rpki-client on console-fra.rpki-client.org