Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/e57dcf-36f9-4a4a-ae3c-0bb3affcc2d3/1/qOsHEwhwe8bIbwfl3xqCpXX3aTA.roa
File:                     qOsHEwhwe8bIbwfl3xqCpXX3aTA.roa (raw, json)
Hash identifier:          prDQROXHKO0BidQLyxYNEqKmThp9mdJXyy8yyx2YJwA=
Subject key identifier:   A8:EB:07:13:08:70:7B:C6:C8:6F:07:E5:DF:1A:82:A5:75:F7:69:30
Certificate issuer:       /CN=919bf29e1aca23a515e11f66960b4eb95c80cfb9
Certificate serial:       01856C53D524ED5CE3A6581B06F4A14D1FF3
Authority key identifier: 91:9B:F2:9E:1A:CA:23:A5:15:E1:1F:66:96:0B:4E:B9:5C:80:CF:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kZvynhrKI6UV4R9mlgtOuVyAz7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/e57dcf-36f9-4a4a-ae3c-0bb3affcc2d3/1/qOsHEwhwe8bIbwfl3xqCpXX3aTA.roa
Signing time:             Sun 01 Jan 2023 07:55:11 +0000
ROA not before:           Sun 01 Jan 2023 07:55:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        185.51.120.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:53:d5:24:ed:5c:e3:a6:58:1b:06:f4:a1:4d:1f:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=919bf29e1aca23a515e11f66960b4eb95c80cfb9
        Validity
            Not Before: Jan  1 07:55:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a8eb071308707bc6c86f07e5df1a82a575f76930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3b:e6:1b:ec:d3:7f:af:c0:8a:95:b3:2c:5c:
                    fe:41:59:63:1a:6d:4b:5b:7d:91:a7:1e:2e:2f:ea:
                    c6:f0:91:6b:20:63:65:ef:c2:6f:f7:e3:f7:c4:8c:
                    75:ce:53:06:99:59:d1:89:ea:ce:dd:1b:95:b8:4b:
                    7b:ff:6d:6e:19:2d:6f:5c:d9:b9:8c:da:67:cf:32:
                    d0:e3:59:80:d0:b3:28:b9:d5:91:95:df:5f:f1:45:
                    0a:a0:03:79:3d:bb:de:94:9e:e6:76:4a:5f:12:96:
                    0e:fa:2b:de:70:f0:dc:2c:1c:e3:00:8f:6f:cb:cd:
                    ad:c8:d1:94:50:ee:b7:5d:7f:f3:29:f4:c8:90:a1:
                    1d:fa:fb:d4:59:32:2e:d0:7c:e2:2a:d0:68:77:5d:
                    05:56:8a:41:c1:f5:17:c3:9f:a5:4a:45:68:0e:45:
                    33:5b:2e:fe:c4:19:65:fb:a7:8a:29:b8:5a:61:ea:
                    ff:21:ba:f7:ad:61:16:63:1f:f0:95:aa:1e:c1:19:
                    5e:35:be:f1:3e:28:bf:ce:1b:b5:f7:a7:8f:33:c8:
                    6f:a7:9c:04:0b:dd:1a:94:c9:e7:79:cd:77:0d:ee:
                    a3:ea:6f:3d:29:7b:d8:8c:74:68:60:dd:78:4a:5d:
                    e4:76:2f:5e:bc:8a:d6:68:56:4e:55:b8:94:33:e1:
                    a9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:EB:07:13:08:70:7B:C6:C8:6F:07:E5:DF:1A:82:A5:75:F7:69:30
            X509v3 Authority Key Identifier:
                keyid:91:9B:F2:9E:1A:CA:23:A5:15:E1:1F:66:96:0B:4E:B9:5C:80:CF:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kZvynhrKI6UV4R9mlgtOuVyAz7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e57dcf-36f9-4a4a-ae3c-0bb3affcc2d3/1/qOsHEwhwe8bIbwfl3xqCpXX3aTA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e57dcf-36f9-4a4a-ae3c-0bb3affcc2d3/1/kZvynhrKI6UV4R9mlgtOuVyAz7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.51.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:76:0f:ea:9b:cc:62:9b:35:63:5b:07:25:3d:12:cd:ca:ff:
         0e:e2:8b:51:d2:b9:ec:a6:ff:a5:94:ca:30:7a:84:78:23:a3:
         93:b7:bb:71:0b:a3:2d:12:7a:41:55:a8:74:26:2f:40:b0:8e:
         76:20:a4:1a:8c:f6:b2:d2:e7:f2:36:82:0c:c2:6e:1d:b1:c3:
         1e:d3:50:2c:ad:6c:ef:c5:1c:54:0a:cc:76:4e:e9:1b:45:50:
         46:fa:f7:2a:18:7b:03:80:11:f2:ba:71:d5:bf:f3:44:42:48:
         48:31:32:fb:9f:c9:da:a4:e0:1f:29:9c:f5:ea:86:86:ba:06:
         97:1b:53:84:18:b8:93:28:0d:df:a7:29:2e:83:74:d7:68:4a:
         67:0d:b5:c5:fd:d9:4c:39:fa:a8:8f:a8:82:05:17:a8:6d:d8:
         0f:71:af:c3:0f:1a:69:85:b5:64:07:e1:c3:ea:6c:b9:e5:3f:
         9d:2f:f4:3f:eb:10:a3:87:6f:59:8d:91:5b:9c:1f:95:06:2f:
         21:58:30:81:e0:90:04:7b:ab:4b:e2:5f:0a:83:de:e4:6e:62:
         fd:69:97:37:9a:b3:56:cc:df:0e:86:66:55:55:57:13:b3:0a:
         7c:ef:73:39:0c:4a:aa:f4:15:58:e3:9f:1e:33:d9:0d:2a:3f:
         83:6a:62:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:55 2023 by rpki-client on console-ams.rpki-client.org