Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/oY8BHAd8pMrYLx0OB7qHwWNRjuk.roa
File:                     oY8BHAd8pMrYLx0OB7qHwWNRjuk.roa (raw, json)
Hash identifier:          0FELqHE7uEh6MyQJvhyyxoH7tgk7kI+p5QRlZ7LOmyI=
Subject key identifier:   A1:8F:01:1C:07:7C:A4:CA:D8:2F:1D:0E:07:BA:87:C1:63:51:8E:E9
Certificate issuer:       /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial:       018B864F74808B1C5826D38BFCF49DEDBDBA
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/oY8BHAd8pMrYLx0OB7qHwWNRjuk.roa
Signing time:             Tue 31 Oct 2023 15:17:16 +0000
ROA not before:           Tue 31 Oct 2023 15:17:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     216106
IP address blocks:        82.206.30.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:86:4f:74:80:8b:1c:58:26:d3:8b:fc:f4:9d:ed:bd:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
        Validity
            Not Before: Oct 31 15:17:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a18f011c077ca4cad82f1d0e07ba87c163518ee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c6:5f:50:5b:ea:fe:9c:8c:57:b1:d5:78:11:
                    e9:5b:18:1c:4d:d7:24:34:aa:54:01:17:f8:0f:a6:
                    46:d2:df:04:de:0e:94:1d:e4:89:03:77:4a:6f:5c:
                    1c:0c:ee:18:f5:49:5c:b8:7d:e0:3f:55:a4:dc:17:
                    64:f1:b2:33:00:c5:16:74:6a:07:31:17:ec:a3:6e:
                    37:59:13:96:91:08:c8:c7:de:2b:6c:e8:b1:6e:2e:
                    19:f3:09:ed:b9:d3:d9:9e:9a:f4:90:63:21:c4:10:
                    9e:89:0b:7a:f6:63:89:11:7e:8e:fb:85:79:26:b5:
                    ad:4e:c1:66:35:7a:6e:87:bf:39:72:3a:1d:16:d7:
                    ed:19:db:7d:bf:b7:f3:c6:fc:63:4f:81:ba:ae:2c:
                    8d:13:c6:cd:ea:3d:95:77:6e:12:0f:35:f2:d3:a5:
                    85:b6:b4:21:73:bd:d7:22:52:a7:a9:c5:5d:a2:5b:
                    43:e9:61:08:99:75:8b:77:f7:aa:b7:54:77:13:83:
                    86:e3:ec:05:70:d3:42:ce:ed:06:bb:95:37:ab:94:
                    4b:ac:21:6f:a5:8f:5c:37:c3:e9:8b:86:24:5d:1b:
                    27:76:f8:30:39:20:cd:65:a4:c8:47:2a:fe:da:8b:
                    ef:17:30:97:90:4b:f1:eb:e1:50:d7:18:ee:09:f3:
                    54:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8F:01:1C:07:7C:A4:CA:D8:2F:1D:0E:07:BA:87:C1:63:51:8E:E9
            X509v3 Authority Key Identifier:
                keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/oY8BHAd8pMrYLx0OB7qHwWNRjuk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.206.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:1a:5b:09:18:d4:8c:a4:ff:68:2e:23:b1:44:ab:e4:66:91:
         50:25:53:70:88:51:91:db:18:2b:64:21:fe:db:4b:06:99:8c:
         c3:6f:f7:c8:7d:04:7b:bf:4f:1b:e8:51:5c:1e:23:43:a8:12:
         08:b0:79:af:d1:af:25:9c:8c:7c:3d:7e:69:c0:76:ed:47:73:
         a3:b4:de:59:e7:f7:0b:f6:35:dc:d9:0e:f2:f9:74:a5:5f:3f:
         40:5b:27:f3:37:48:90:b2:dc:65:10:e7:df:7f:54:eb:d9:78:
         1c:70:54:9b:e4:02:68:84:40:e6:55:50:42:19:de:4f:6d:68:
         5f:42:83:1f:8c:5c:14:dc:38:92:07:42:4d:8d:15:58:08:7d:
         f0:89:f3:70:fd:be:af:9c:b8:cf:36:72:49:d2:d6:f0:c2:94:
         33:1e:c9:b9:12:e5:f0:a0:8a:f9:74:48:6d:50:62:7d:3e:d9:
         c0:80:ef:0b:fe:12:f8:2c:d3:28:14:80:da:f9:92:af:71:f6:
         e1:8b:0c:ad:93:5d:ec:7c:df:2e:cb:a6:bd:70:db:b7:33:52:
         4b:0f:d0:68:8c:8d:31:77:51:4f:b9:08:29:00:73:83:d8:e8:
         2e:e7:1b:4f:6f:ba:8e:dc:17:34:30:a2:3b:51:46:3b:71:ab:
         94:d2:72:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 16 13:15:25 2023 by rpki-client on console-fra.rpki-client.org