Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/ZipQlpe0N4OkjksGXsMh2WrW6oM.roa
File:                     ZipQlpe0N4OkjksGXsMh2WrW6oM.roa (raw, json)
Hash identifier:          w7eUfRUQXhCE1bWTpnle0rFF/g2WJ5v4VDnkvKV0sYc=
Subject key identifier:   66:2A:50:96:97:B4:37:83:A4:8E:4B:06:5E:C3:21:D9:6A:D6:EA:83
Certificate issuer:       /CN=0e282a15c1a5d154bbda872b357607a91f950aa5
Certificate serial:       01856E267D6292849F94F4DD77F7DBE1483E
Authority key identifier: 0E:28:2A:15:C1:A5:D1:54:BB:DA:87:2B:35:76:07:A9:1F:95:0A:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/ZipQlpe0N4OkjksGXsMh2WrW6oM.roa
Signing time:             Sun 01 Jan 2023 16:24:54 +0000
ROA not before:           Sun 01 Jan 2023 16:24:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60860
IP address blocks:        193.107.83.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:26:7d:62:92:84:9f:94:f4:dd:77:f7:db:e1:48:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e282a15c1a5d154bbda872b357607a91f950aa5
        Validity
            Not Before: Jan  1 16:24:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=662a509697b43783a48e4b065ec321d96ad6ea83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:80:4b:e0:fa:d3:04:8c:12:61:c2:de:fb:b6:
                    01:66:51:d0:13:2b:8f:1e:f0:55:6a:e5:c6:23:d4:
                    55:19:5f:22:b7:02:8d:ef:62:03:60:66:82:fe:db:
                    2f:a1:f1:8c:c0:08:70:de:f8:54:59:3a:b4:8f:f7:
                    3c:33:20:4c:35:46:4f:bc:67:07:2a:90:44:1e:c8:
                    31:44:a7:0c:84:6a:ed:ee:ef:7d:1c:06:d5:f6:bf:
                    8f:6b:18:43:a7:98:67:9d:21:5d:ec:22:00:a5:1b:
                    9b:00:82:4a:7a:84:7e:cd:41:95:82:79:ca:ca:dd:
                    49:ef:e3:17:c9:3f:c8:32:07:b1:15:44:76:f5:f9:
                    ef:e3:f5:a7:7c:ec:cb:f9:38:11:71:08:0f:5d:06:
                    8e:3e:4e:47:7b:4e:ed:55:18:48:7e:08:81:d9:72:
                    f8:cb:d5:e3:27:9d:ee:88:6b:8c:1e:1e:44:1f:e9:
                    e2:aa:df:68:f1:0e:5d:f9:e5:2f:bd:a4:50:a5:a4:
                    ba:55:d0:10:d3:95:ba:d3:96:07:c3:33:82:0f:b6:
                    73:bd:f0:ba:87:ac:55:f9:57:ed:fe:0f:03:15:fb:
                    e6:67:f5:de:26:41:27:ef:44:81:fa:3a:19:42:b9:
                    ac:21:ac:ae:cf:e1:49:07:38:80:76:a3:5f:85:30:
                    d7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:2A:50:96:97:B4:37:83:A4:8E:4B:06:5E:C3:21:D9:6A:D6:EA:83
            X509v3 Authority Key Identifier:
                keyid:0E:28:2A:15:C1:A5:D1:54:BB:DA:87:2B:35:76:07:A9:1F:95:0A:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/ZipQlpe0N4OkjksGXsMh2WrW6oM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.107.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:23:23:eb:28:ed:fc:59:11:1d:a8:3c:b6:20:37:37:cd:54:
         c8:83:64:70:c8:af:c3:12:16:19:ef:a4:5c:a8:b5:9c:59:fe:
         bb:9d:ce:dd:9c:df:31:7b:92:8e:9d:ba:88:69:0c:f5:bb:5b:
         4f:52:53:fe:f4:09:5f:bc:5c:52:8a:e6:70:cc:ca:04:82:6e:
         45:d2:2b:7c:2b:72:b8:99:b8:bd:18:9d:1b:3e:76:96:7a:5b:
         74:9e:22:d2:50:d7:72:19:ae:4f:b5:7b:af:d0:9d:d4:d8:2f:
         b7:1d:3f:f2:63:95:a0:9a:25:21:2c:99:39:b3:27:25:e4:2a:
         12:c7:d1:5f:b5:8e:69:02:f3:36:3b:fb:dc:66:8a:04:6a:49:
         f3:2f:78:bf:05:1c:bc:0e:03:65:f8:53:5e:b5:1b:dd:84:c6:
         01:b9:88:4f:43:2d:28:59:e8:3f:f9:b2:47:51:45:b0:6d:b5:
         1e:51:05:31:8b:fa:4d:34:64:fc:b2:53:98:8d:ce:0f:cc:10:
         4f:08:12:f3:28:a7:1b:22:39:17:17:77:bd:9c:8f:d3:84:f5:
         77:b2:e1:ef:7d:b5:80:6a:3f:07:5a:60:9e:66:e7:3c:a1:b8:
         3e:fb:7f:13:0b:ee:18:88:9a:5d:ba:1c:ba:0e:00:cc:e2:75:
         11:e4:84:e6
-----BEGIN CERTIFICATE-----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Generated at Sat Jul 29 09:13:26 2023 by rpki-client on console-fra.rpki-client.org