Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/sEmKDbfLDL5T1wH8smlj9U5JGNs.roa
File:                     sEmKDbfLDL5T1wH8smlj9U5JGNs.roa (raw, json)
Hash identifier:          soTM6fqxtCFoWOte/ekOQVpyfxozt7FqZX5Pc6uE3N8=
Subject key identifier:   B0:49:8A:0D:B7:CB:0C:BE:53:D7:01:FC:B2:69:63:F5:4E:49:18:DB
Certificate issuer:       /CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
Certificate serial:       018A40151B4CF410424D09690AD0CE26B685
Authority key identifier: 0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/sEmKDbfLDL5T1wH8smlj9U5JGNs.roa
Signing time:             Tue 29 Aug 2023 06:57:19 +0000
ROA not before:           Tue 29 Aug 2023 06:57:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     12316
IP address blocks:        80.90.30.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:40:15:1b:4c:f4:10:42:4d:09:69:0a:d0:ce:26:b6:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a332f5adc0469533bbddcfce8957eaee58bfd60
        Validity
            Not Before: Aug 29 06:57:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b0498a0db7cb0cbe53d701fcb26963f54e4918db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ca:34:5c:9e:9c:67:96:fa:8c:8c:89:ce:a5:
                    33:48:80:55:c8:c3:fb:ee:21:e8:2a:ff:f5:6c:03:
                    8d:bd:52:6b:70:a1:32:5c:c1:4f:2a:57:ba:cc:5b:
                    a2:13:67:0d:a1:67:a4:92:53:60:21:99:55:83:65:
                    34:c8:1b:53:91:79:8c:17:bd:53:63:9d:d6:37:0b:
                    ae:03:81:ea:27:14:8c:e3:54:5a:2c:76:bf:c1:4e:
                    1a:f4:bc:c5:e2:5f:ab:35:83:f1:94:c6:ef:c2:1b:
                    d1:72:ed:91:cf:63:8b:fe:a2:a5:77:15:37:78:3f:
                    ac:cc:74:c4:a6:ea:3f:a9:53:44:fd:08:9b:e3:27:
                    8f:0f:02:3e:49:a1:98:2c:db:16:f1:82:75:02:29:
                    20:5c:79:99:95:01:41:09:44:02:7b:37:e4:86:da:
                    67:60:8e:f3:15:fb:e3:6d:5a:16:fb:73:3e:f9:92:
                    cf:42:40:45:b0:f4:34:f9:e1:17:7e:a7:a9:a0:5e:
                    4b:4c:ca:b0:d4:be:95:fc:c9:b9:06:59:cc:c4:88:
                    ee:c3:22:58:b3:de:74:c9:4d:c4:10:2a:3e:2c:49:
                    d8:97:4c:be:16:08:8c:94:9c:6c:2e:15:07:b5:b3:
                    57:9e:de:bf:e2:88:f7:38:62:2a:1c:9b:d1:b5:c5:
                    3a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:49:8A:0D:B7:CB:0C:BE:53:D7:01:FC:B2:69:63:F5:4E:49:18:DB
            X509v3 Authority Key Identifier:
                keyid:0A:33:2F:5A:DC:04:69:53:3B:BD:DC:FC:E8:95:7E:AE:E5:8B:FD:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjMvWtwEaVM7vdz86JV-ruWL_WA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/sEmKDbfLDL5T1wH8smlj9U5JGNs.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278f68-c16f-4a2f-80f7-4130fa48b559/1/CjMvWtwEaVM7vdz86JV-ruWL_WA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.90.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:74:8c:fc:a2:8f:ec:74:e3:89:dc:4f:a5:62:ec:b4:74:43:
         ae:e2:80:83:4b:df:1c:cd:fd:e8:b6:1d:10:e0:b3:8b:9b:45:
         c9:8e:19:c7:2d:15:70:7c:4e:75:a4:c6:2c:d9:38:15:d4:b7:
         ae:01:2f:bc:44:30:e8:fe:79:d0:ec:c1:32:d5:2c:34:54:b9:
         55:17:7a:f1:00:83:87:ce:e3:56:ef:15:0b:05:cb:c4:c5:de:
         bd:4a:6b:8c:a1:73:b8:98:80:6b:fa:68:a0:41:79:50:f3:c3:
         8c:78:71:d1:fe:bf:ac:6a:aa:e9:22:ee:a5:87:f0:99:1f:02:
         32:aa:05:42:bb:31:1d:cb:34:92:27:a7:23:95:56:d8:cf:29:
         2a:dd:94:ae:09:24:a7:af:df:d0:80:19:db:64:a0:f8:ee:43:
         67:d2:9b:f0:ec:88:ef:c6:3b:a7:e0:1f:ae:de:0c:e0:5e:7d:
         f5:3c:0b:cc:89:c4:07:cb:74:87:9c:4c:2b:29:8a:4b:e5:ba:
         0f:bb:68:3e:70:f0:00:02:e2:c3:76:fd:55:ef:c4:23:02:5c:
         6a:30:3c:27:2e:bf:47:19:d3:a7:0d:b3:df:b4:60:07:d8:d4:
         ef:cf:52:50:d7:ce:cd:61:0f:87:5a:25:d3:d1:d8:a6:49:87:
         30:68:36:82
-----BEGIN CERTIFICATE-----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Generated at Tue Aug 29 13:01:41 2023 by rpki-client on console-ams.rpki-client.org