Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/dWsC-VWjmpdjo6NLDbHOWRGLPCU.roa
File:                     dWsC-VWjmpdjo6NLDbHOWRGLPCU.roa (raw, json)
Hash identifier:          MfbDAIzDsvbWJnSKm9uJLrVWZa4U9v+LIXF3Eo1u9gQ=
Subject key identifier:   75:6B:02:F9:55:A3:9A:97:63:A3:A3:4B:0D:B1:CE:59:11:8B:3C:25
Certificate issuer:       /CN=dec0f14fac8ddb348037280076cc36614da305ec
Certificate serial:       01870DD886D145533035ACE2C0FA29BB92DC
Authority key identifier: DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/dWsC-VWjmpdjo6NLDbHOWRGLPCU.roa
Signing time:             Thu 23 Mar 2023 09:41:46 +0000
ROA not before:           Thu 23 Mar 2023 09:41:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209793
IP address blocks:        185.127.200.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:0d:d8:86:d1:45:53:30:35:ac:e2:c0:fa:29:bb:92:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dec0f14fac8ddb348037280076cc36614da305ec
        Validity
            Not Before: Mar 23 09:41:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=756b02f955a39a9763a3a34b0db1ce59118b3c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f4:bb:3a:dd:05:6c:ef:95:4b:4f:3a:70:3e:
                    f2:2c:66:96:e0:5f:83:dd:2a:e1:e7:f8:e4:83:47:
                    a1:6a:14:ec:c2:33:9e:a8:61:1c:88:02:bc:0d:b9:
                    35:df:c3:bd:9c:a8:b7:78:34:c3:29:0c:8e:dd:65:
                    e7:26:a7:bb:f6:1b:b6:23:7a:11:76:56:be:97:8a:
                    5e:a9:98:64:74:33:ed:37:a7:5f:32:c5:2a:37:5a:
                    43:51:1e:b4:d1:09:d1:d1:14:0b:ed:3a:af:61:91:
                    55:fd:a8:04:82:94:3d:b8:e7:4f:56:79:0e:57:ac:
                    28:7b:7e:d4:80:6a:5b:1f:c2:8d:c2:ba:2a:88:b0:
                    46:ba:47:6b:2a:3f:d5:89:c3:c5:46:14:11:1a:15:
                    fa:5b:17:dc:1c:99:24:8a:3a:f3:f1:de:50:86:a1:
                    c6:1b:42:4d:3b:50:eb:62:db:34:98:d9:1c:84:cb:
                    2f:71:22:7a:c0:30:c5:c3:f8:40:a5:21:da:56:63:
                    4f:d1:53:af:c9:9b:62:e0:22:85:ea:7b:36:07:6d:
                    9a:a4:c0:0e:34:b7:54:3d:6e:0e:c9:bf:77:fe:96:
                    7c:32:2f:04:87:9f:bc:c0:3e:43:1b:a9:18:49:82:
                    88:00:02:59:8f:75:3e:43:9d:c5:1f:fc:e2:c0:ad:
                    dc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:6B:02:F9:55:A3:9A:97:63:A3:A3:4B:0D:B1:CE:59:11:8B:3C:25
            X509v3 Authority Key Identifier:
                keyid:DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/dWsC-VWjmpdjo6NLDbHOWRGLPCU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.127.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         31:2f:58:d4:d4:82:a2:54:d6:b8:bd:e8:3c:57:96:bc:cd:f7:
         f5:bd:3f:bf:2c:c6:dc:89:c9:13:88:58:57:e0:29:f1:c7:78:
         8e:73:37:c0:fc:9e:64:2d:a8:c4:26:00:ad:3c:22:d9:d4:d6:
         b6:a8:89:23:a0:d5:f1:8b:65:7f:cf:7f:df:01:4b:77:1e:f2:
         b4:bd:62:6e:2b:8e:19:59:bf:1f:ae:71:11:28:c2:5a:f5:b1:
         7c:08:7f:10:99:30:86:8e:59:36:5e:0e:06:a2:60:7e:5c:ca:
         1f:04:f3:27:c9:b1:93:3d:5b:76:2c:b3:39:b4:8b:96:e4:7b:
         76:fd:d6:4f:42:f4:ee:6e:e6:84:8f:af:b4:8f:ad:53:65:47:
         cc:be:16:fd:dd:66:d9:45:c7:58:4d:c9:79:89:f5:40:dc:de:
         2b:9a:19:03:f7:8f:36:3f:ae:25:a6:4e:59:88:9d:dd:21:e4:
         86:31:78:20:23:9d:0d:ff:e5:52:3d:bd:3f:6e:25:d4:f8:16:
         ec:03:04:10:1b:4e:3f:0b:8e:c3:7c:d7:85:24:83:6f:9b:82:
         22:d0:46:56:47:85:97:f6:a1:76:f4:f0:8a:db:e9:82:e8:33:
         aa:0e:14:f8:32:c1:cd:82:05:1b:9a:a9:4e:86:70:03:3c:cb:
         74:dd:e9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 6 19:38:18 2023 by rpki-client on console-ams.rpki-client.org