Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/a4rcFYL8jAgy7EQ75o_wlQ6xfNQ.roa
File:                     a4rcFYL8jAgy7EQ75o_wlQ6xfNQ.roa (raw, json)
Hash identifier:          qKe8pSzVqy0A9+6+Jluzrue0S1IB+MUwwgj5vsP93HE=
Subject key identifier:   6B:8A:DC:15:82:FC:8C:08:32:EC:44:3B:E6:8F:F0:95:0E:B1:7C:D4
Certificate issuer:       /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial:       0186499EF481499C814BD9DCAA7CD1D3C0E8
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/a4rcFYL8jAgy7EQ75o_wlQ6xfNQ.roa
Signing time:             Mon 13 Feb 2023 07:13:19 +0000
ROA not before:           Mon 13 Feb 2023 07:13:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        185.212.204.0/23 maxlen: 24
                          185.212.206.0/23 maxlen: 24
                          93.177.114.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:49:9e:f4:81:49:9c:81:4b:d9:dc:aa:7c:d1:d3:c0:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
        Validity
            Not Before: Feb 13 07:13:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6b8adc1582fc8c0832ec443be68ff0950eb17cd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5c:cb:e0:90:a5:82:a4:d0:07:c4:1d:cc:28:
                    c8:b9:81:15:50:98:b5:38:f4:6f:90:84:06:00:89:
                    5f:d6:c5:cc:0e:b1:3f:31:e1:cc:2a:df:f2:50:f8:
                    ee:d1:11:de:21:d3:16:13:fe:9a:70:08:77:25:20:
                    ff:e8:33:ad:37:e9:3e:47:58:1d:a1:c5:b2:d4:a7:
                    b5:53:dc:0b:d6:30:15:42:6f:7d:fc:9c:08:1f:6d:
                    f5:f7:d6:2b:98:6f:6c:45:f6:1e:d3:fd:94:54:be:
                    ef:cb:1e:0c:8d:76:60:81:82:34:96:37:6c:f3:ec:
                    eb:0e:a0:be:84:4e:38:46:72:8b:05:35:22:84:4c:
                    14:5d:c7:fa:5c:84:2a:6c:94:ac:4e:49:a4:19:5d:
                    38:47:0d:c0:d1:ce:4a:c7:82:6a:65:08:96:36:df:
                    15:4b:b3:66:ff:2f:e5:2f:b9:3e:df:d8:14:41:e5:
                    ab:f0:c1:0b:00:95:0f:8a:83:29:be:99:0c:77:40:
                    e7:07:31:65:9a:a0:e8:5b:ee:bc:8f:81:75:60:35:
                    7f:98:91:b4:2d:72:67:1f:1c:e8:7a:e4:b5:6f:e0:
                    7d:0b:e1:df:a4:1a:1c:c3:7b:29:14:c4:5f:bf:58:
                    c9:c2:cb:79:49:e9:b7:98:72:20:d3:c6:a4:49:38:
                    48:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:8A:DC:15:82:FC:8C:08:32:EC:44:3B:E6:8F:F0:95:0E:B1:7C:D4
            X509v3 Authority Key Identifier:
                keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/a4rcFYL8jAgy7EQ75o_wlQ6xfNQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.177.114.0/23
                  185.212.204.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:56:1e:3b:a7:35:4a:24:13:ae:6c:1d:0d:a9:d3:3f:a7:89:
         2f:4a:e0:55:05:69:89:40:bf:66:d7:85:df:ff:fb:a2:20:f1:
         9e:18:67:c6:cd:87:31:47:1e:e7:5e:29:b5:78:c8:d2:ba:97:
         a8:13:ff:14:21:2e:8c:72:c5:0b:77:7b:df:ff:7f:bd:f9:75:
         f8:de:87:f9:33:56:dd:9b:be:a0:77:64:0c:f4:77:95:2d:c8:
         6c:4e:a9:9d:07:48:42:18:aa:21:85:df:18:04:fd:6a:e6:d9:
         91:20:79:4b:8c:c9:cd:81:6d:69:47:5f:0a:a0:34:42:17:a5:
         f3:3b:fb:1c:ff:ae:58:03:76:9c:0c:85:d2:e9:bb:14:1c:99:
         8c:73:a4:ff:81:9d:70:19:e8:e8:fc:29:1e:f9:5f:59:b6:cb:
         b6:9e:8e:c7:db:62:a5:8c:30:48:cf:5e:10:c6:e1:8b:33:12:
         69:27:6e:ac:26:c7:12:6c:41:26:f7:b2:c2:dc:45:bc:42:6f:
         33:b7:77:e4:fc:83:b7:10:0a:4b:e3:7d:39:01:32:86:fd:0d:
         32:96:6a:e7:3f:0f:09:1c:63:8c:c2:84:dc:7b:bb:06:50:55:
         fa:fb:ac:f6:77:83:b9:b3:5b:d8:26:5e:02:b2:86:14:fd:72:
         9c:72:8b:d4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYZJnvSBSZyBS9ncqnzR08DoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MGZiMGYxZDhiOGMxOThiMGRjODYxNThhZmJjYmM1Mjlj
ZjE2YmUwHhcNMjMwMjEzMDcxMzE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjhhZGMxNTgyZmM4YzA4MzJlYzQ0M2JlNjhmZjA5NTBlYjE3Y2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVzL4JClgqTQB8QdzCjIuYEVUJi1
OPRvkIQGAIlf1sXMDrE/MeHMKt/yUPju0RHeIdMWE/6acAh3JSD/6DOtN+k+R1gd
ocWy1Ke1U9wL1jAVQm99/JwIH23199YrmG9sRfYe0/2UVL7vyx4MjXZggYI0ljds
8+zrDqC+hE44RnKLBTUihEwUXcf6XIQqbJSsTkmkGV04Rw3A0c5Kx4JqZQiWNt8V
S7Nm/y/lL7k+39gUQeWr8MELAJUPioMpvpkMd0DnBzFlmqDoW+68j4F1YDV/mJG0
LXJnHxzoeuS1b+B9C+HfpBocw3spFMRfv1jJwst5Sem3mHIg08akSThIZwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGuK3BWC/IwIMuxEO+aP8JUOsXzUMB8GA1UdIwQY
MBaAFFcPsPHYuMGYsNyGFYr7y8Upzxa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2Qt
OTcyNDNlMzE2MjcyLzEvYTRyY0ZZTDhqQWd5N0VRNzVvX3dsUTZ4Zk5RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2QtOTcyNDNlMzE2Mjcy
LzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBXbFyAwQC
udTMMA0GCSqGSIb3DQEBCwUAA4IBAQCPVh47pzVKJBOubB0NqdM/p4kvSuBVBWmJ
QL9m14Xf//uiIPGeGGfGzYcxRx7nXim1eMjSupeoE/8UIS6McsULd3vf/3+9+XX4
3of5M1bdm76gd2QM9HeVLchsTqmdB0hCGKohhd8YBP1q5tmRIHlLjMnNgW1pR18K
oDRCF6XzO/sc/65YA3acDIXS6bsUHJmMc6T/gZ1wGejo/Cke+V9Ztsu2no7H22Kl
jDBIz14QxuGLMxJpJ26sJscSbEEm97LC3EW8Qm8zt3fk/IO3EApL4305ATKG/Q0y
lmrnPw8JHGOMwoTce7sGUFX6+6z2d4O5s1vYJl4CsoYU/XKccovU
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:39 2023 by rpki-client on console-ams.rpki-client.org