Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/4c4cd2-6c70-4db9-94f6-b637381b4f79/1/Fp7bdX5y0y7hQbEfW4sS9Ma8y4E.roa
File:                     Fp7bdX5y0y7hQbEfW4sS9Ma8y4E.roa (raw, json)
Hash identifier:          vgMbeCLA1VG/JBtjqnOQzDgxnn588mSPDagEVQRkeco=
Subject key identifier:   16:9E:DB:75:7E:72:D3:2E:E1:41:B1:1F:5B:8B:12:F4:C6:BC:CB:81
Certificate issuer:       /CN=88e8e1cafa7b604859840c57af48e817c327f644
Certificate serial:       01856F1D977E037656FD8ABE65C6D7911F66
Authority key identifier: 88:E8:E1:CA:FA:7B:60:48:59:84:0C:57:AF:48:E8:17:C3:27:F6:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iOjhyvp7YEhZhAxXr0joF8Mn9kQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/4c4cd2-6c70-4db9-94f6-b637381b4f79/1/Fp7bdX5y0y7hQbEfW4sS9Ma8y4E.roa
Signing time:             Sun 01 Jan 2023 20:54:48 +0000
ROA not before:           Sun 01 Jan 2023 20:54:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     399130
IP address blocks:        185.104.191.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:1d:97:7e:03:76:56:fd:8a:be:65:c6:d7:91:1f:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88e8e1cafa7b604859840c57af48e817c327f644
        Validity
            Not Before: Jan  1 20:54:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=169edb757e72d32ee141b11f5b8b12f4c6bccb81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3a:9a:e4:30:bd:e0:6e:3b:b9:9f:99:56:38:
                    33:02:75:ad:60:e4:84:dc:da:b1:2b:b4:1a:d8:31:
                    a6:1d:64:98:1a:9c:03:c1:d8:b0:03:75:fb:e6:7c:
                    72:dd:40:c5:24:7f:e4:c6:43:80:68:2f:22:af:75:
                    eb:42:57:cd:ac:45:65:92:04:56:73:bf:ab:66:66:
                    98:97:f5:bc:d3:c2:42:1d:23:4d:19:0b:ab:8f:e6:
                    04:51:bd:ae:8b:22:76:2f:3d:f7:69:7c:fe:37:36:
                    ee:3c:0f:ff:62:df:b2:12:c5:62:02:92:50:77:cf:
                    c0:14:9d:22:fd:80:0b:79:86:7b:12:09:b8:ba:fb:
                    25:a0:9a:cf:97:9f:89:87:e5:b6:50:1d:30:07:1c:
                    3c:e1:f1:48:76:d2:08:6c:7c:58:a9:fe:7e:89:b2:
                    d9:65:e8:fe:dc:0d:2b:8d:a2:c1:c3:2c:04:57:ae:
                    38:09:75:73:98:3e:e7:f1:bf:81:82:00:92:78:d8:
                    4e:cf:23:8e:12:ae:b4:44:99:a6:0e:ac:fe:b6:26:
                    a0:c1:0f:7e:40:0e:79:85:78:e6:39:a4:d2:d8:81:
                    5b:ce:f0:79:cd:77:0f:da:c3:44:3e:26:7c:53:67:
                    75:69:e7:6a:5f:54:d5:3c:c9:96:4a:17:e2:6c:d4:
                    f2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9E:DB:75:7E:72:D3:2E:E1:41:B1:1F:5B:8B:12:F4:C6:BC:CB:81
            X509v3 Authority Key Identifier:
                keyid:88:E8:E1:CA:FA:7B:60:48:59:84:0C:57:AF:48:E8:17:C3:27:F6:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOjhyvp7YEhZhAxXr0joF8Mn9kQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/4c4cd2-6c70-4db9-94f6-b637381b4f79/1/Fp7bdX5y0y7hQbEfW4sS9Ma8y4E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/4c4cd2-6c70-4db9-94f6-b637381b4f79/1/iOjhyvp7YEhZhAxXr0joF8Mn9kQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.104.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:6d:8e:a8:c0:b2:69:d6:6c:3a:46:ab:4a:90:5f:7d:8a:6c:
         b3:14:b9:45:b2:75:7b:aa:b8:6d:a0:a7:0c:fe:b5:39:c8:a1:
         35:91:3d:d2:50:a8:98:c0:34:c0:0c:d9:16:04:e3:95:02:24:
         ef:b6:fa:8c:f6:a6:eb:43:27:61:25:77:74:1b:d2:49:ad:e6:
         55:49:38:d4:8a:06:d9:7b:bd:eb:49:22:f6:61:25:49:4d:cb:
         8a:82:14:b3:d1:bf:7d:c5:0d:d2:9e:13:8b:a4:56:bd:45:b5:
         da:64:5a:9f:b8:bb:c0:83:19:07:86:9d:25:17:4d:0e:54:37:
         86:65:d7:a4:fd:de:1b:f3:b4:a1:0a:be:01:93:1d:36:f2:52:
         13:03:35:86:c9:2f:fb:8e:b7:51:5f:0a:2a:d3:62:a2:72:8e:
         fa:7e:5e:45:59:5f:e2:08:75:b9:d9:60:e9:b3:66:4d:4b:13:
         18:f0:2f:42:1c:61:31:5b:f1:f7:74:61:d4:45:fc:c2:62:81:
         27:d6:d5:5c:fc:f7:56:18:7a:52:50:c4:2f:bc:6a:44:18:0d:
         f4:41:73:74:5b:be:3c:27:02:1a:d9:e8:2d:35:5f:22:1d:6e:
         fe:71:c8:82:32:6a:9a:14:92:da:20:3e:16:f4:2a:ac:7f:68:
         95:85:2b:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvHZd+A3ZW/Yq+ZcbXkR9mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4ZThlMWNhZmE3YjYwNDg1OTg0MGM1N2FmNDhlODE3YzMy
N2Y2NDQwHhcNMjMwMTAxMjA1NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjllZGI3NTdlNzJkMzJlZTE0MWIxMWY1YjhiMTJmNGM2YmNjYjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Dqa5DC94G47uZ+ZVjgzAnWtYOSE
3NqxK7Qa2DGmHWSYGpwDwdiwA3X75nxy3UDFJH/kxkOAaC8ir3XrQlfNrEVlkgRW
c7+rZmaYl/W808JCHSNNGQurj+YEUb2uiyJ2Lz33aXz+NzbuPA//Yt+yEsViApJQ
d8/AFJ0i/YALeYZ7Egm4uvsloJrPl5+Jh+W2UB0wBxw84fFIdtIIbHxYqf5+ibLZ
Zej+3A0rjaLBwywEV644CXVzmD7n8b+BggCSeNhOzyOOEq60RJmmDqz+tiagwQ9+
QA55hXjmOaTS2IFbzvB5zXcP2sNEPiZ8U2d1aedqX1TVPMmWShfibNTyzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBae23V+ctMu4UGxH1uLEvTGvMuBMB8GA1UdIwQY
MBaAFIjo4cr6e2BIWYQMV69I6BfDJ/ZEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaU9qaHl2cDdZRWhaaEF4WHIwam9GOE1uOWtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny80YzRjZDItNmM3MC00ZGI5LTk0ZjYt
YjYzNzM4MWI0Zjc5LzEvRnA3YmRYNXkweTdoUWJFZlc0c1M5TWE4eTRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny80YzRjZDItNmM3MC00ZGI5LTk0ZjYtYjYzNzM4MWI0Zjc5
LzEvaU9qaHl2cDdZRWhaaEF4WHIwam9GOE1uOWtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWi/MA0G
CSqGSIb3DQEBCwUAA4IBAQAKbY6owLJp1mw6RqtKkF99imyzFLlFsnV7qrhtoKcM
/rU5yKE1kT3SUKiYwDTADNkWBOOVAiTvtvqM9qbrQydhJXd0G9JJreZVSTjUigbZ
e73rSSL2YSVJTcuKghSz0b99xQ3SnhOLpFa9RbXaZFqfuLvAgxkHhp0lF00OVDeG
Zdek/d4b87ShCr4Bkx028lITAzWGyS/7jrdRXwoq02Kico76fl5FWV/iCHW52WDp
s2ZNSxMY8C9CHGExW/H3dGHURfzCYoEn1tVc/PdWGHpSUMQvvGpEGA30QXN0W748
JwIa2egtNV8iHW7+cciCMmqaFJLaID4W9Cqsf2iVhSs8
-----END CERTIFICATE-----
Generated at Thu Dec 7 11:18:35 2023 by rpki-client on console-ams.rpki-client.org