Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/76602c-c1ac-46a3-81bc-deeff3b2ae8a/1/_i9c_oT_kboalqpVAIntEIPeeBk.roa
File:                     _i9c_oT_kboalqpVAIntEIPeeBk.roa (raw, json)
Hash identifier:          iu5UhCFf393EL9jID1NJJ4gDueRK4Qge2pxV0fhuieE=
Subject key identifier:   FE:2F:5C:FE:84:FF:91:BA:1A:96:AA:55:00:89:ED:10:83:DE:78:19
Certificate issuer:       /CN=d860f6f2c318559e65959cd5f28d159a0842d72a
Certificate serial:       01856D5411F822C65BECF8ACE1920828C802
Authority key identifier: D8:60:F6:F2:C3:18:55:9E:65:95:9C:D5:F2:8D:15:9A:08:42:D7:2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2GD28sMYVZ5llZzV8o0VmghC1yo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/76602c-c1ac-46a3-81bc-deeff3b2ae8a/1/_i9c_oT_kboalqpVAIntEIPeeBk.roa
Signing time:             Sun 01 Jan 2023 12:35:04 +0000
ROA not before:           Sun 01 Jan 2023 12:35:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        185.234.12.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:54:11:f8:22:c6:5b:ec:f8:ac:e1:92:08:28:c8:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d860f6f2c318559e65959cd5f28d159a0842d72a
        Validity
            Not Before: Jan  1 12:35:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fe2f5cfe84ff91ba1a96aa550089ed1083de7819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c5:d4:5e:40:18:08:13:29:6b:56:99:e4:5c:
                    90:7f:1a:5c:fd:ed:8c:29:b9:8b:33:69:43:8e:bb:
                    db:d9:5f:ee:6c:3e:14:5a:ba:20:de:32:36:63:8d:
                    d7:c9:04:16:00:ab:ff:d1:c4:35:25:1f:8f:2b:81:
                    95:41:6c:63:80:da:82:76:f3:7b:d9:95:4e:52:23:
                    11:98:19:38:3f:c2:1d:7f:8a:f5:f9:48:57:44:52:
                    58:4c:25:92:fb:0c:89:b0:f4:5a:71:fd:8c:bb:b4:
                    2c:c5:2d:a2:40:3f:d3:af:19:29:14:25:5f:af:71:
                    41:f3:b2:9f:cd:8a:26:6a:c8:98:72:94:91:c6:0b:
                    a8:84:b8:74:e4:a7:9d:46:e9:33:08:3d:73:7d:6a:
                    92:c1:03:4a:7c:91:48:7a:72:a8:42:d4:b8:90:dd:
                    14:4a:36:52:11:68:9f:8e:4a:bf:43:a6:b4:4d:75:
                    e7:b4:bc:ee:77:a7:32:84:38:d1:42:3c:ac:16:5c:
                    1b:8d:cd:60:e3:da:90:4f:15:4a:ec:6e:31:2c:b5:
                    ac:fc:e8:34:c3:79:f0:aa:fb:7f:1c:e7:7b:33:72:
                    3c:77:6d:42:67:45:2c:6f:06:90:67:b7:c1:5c:61:
                    92:f8:c7:34:13:80:37:2e:c7:19:b0:23:3f:f9:b1:
                    e2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:2F:5C:FE:84:FF:91:BA:1A:96:AA:55:00:89:ED:10:83:DE:78:19
            X509v3 Authority Key Identifier:
                keyid:D8:60:F6:F2:C3:18:55:9E:65:95:9C:D5:F2:8D:15:9A:08:42:D7:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2GD28sMYVZ5llZzV8o0VmghC1yo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76602c-c1ac-46a3-81bc-deeff3b2ae8a/1/_i9c_oT_kboalqpVAIntEIPeeBk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/76602c-c1ac-46a3-81bc-deeff3b2ae8a/1/2GD28sMYVZ5llZzV8o0VmghC1yo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.234.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:fe:dc:66:f9:ae:c4:03:34:89:57:5d:e9:3f:c9:16:e4:55:
         ed:0e:0f:96:21:ae:67:13:15:29:2e:e6:70:62:f0:2d:cd:90:
         d2:2f:2c:4c:6e:ec:56:f8:f8:d0:46:27:45:ba:6c:8d:82:ea:
         8f:42:02:6e:f7:66:db:e2:f8:f3:1d:37:8f:dd:50:0c:4b:f0:
         b8:5d:5d:6d:87:0c:ca:7f:f1:75:3f:1b:4c:b9:97:64:d0:db:
         94:3a:de:54:05:15:ee:53:37:f7:eb:e9:c0:0c:be:24:cb:da:
         1c:7d:46:c4:a0:09:be:e6:72:b7:1f:16:25:f6:0b:81:8c:06:
         39:77:7c:7b:64:64:ec:35:42:74:5a:e6:01:98:c4:a5:f1:35:
         84:be:c8:1c:ab:eb:60:ca:2c:43:65:7c:a3:d2:d4:76:4c:99:
         ee:39:5f:e9:79:0b:75:04:e5:7b:14:e9:52:fb:94:86:b6:0c:
         9d:20:06:ed:a3:18:44:5e:25:70:90:39:16:c7:ce:a2:93:bb:
         47:29:28:09:65:1c:12:4e:36:e1:2c:9a:52:92:8d:3b:93:03:
         b8:40:63:8f:8d:53:bb:45:70:53:60:0d:e5:39:37:9b:e7:d7:
         81:4c:27:19:b4:6f:63:ab:3a:56:42:3a:c2:b2:42:f9:ca:e0:
         80:02:aa:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:52 2023 by rpki-client on console-fra.rpki-client.org