Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/uIZXVSJAXLaIcHgtzRW8xCXxUPA.roa
File:                     uIZXVSJAXLaIcHgtzRW8xCXxUPA.roa (raw, json)
Hash identifier:          EGzlcereFlhdxySEqwRocDrSh8VZqt6coO/0AqUgIw4=
Subject key identifier:   B8:86:57:55:22:40:5C:B6:88:70:78:2D:CD:15:BC:C4:25:F1:50:F0
Certificate issuer:       /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial:       01893E5B2E1C3E4E606DA36476A296418F30
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/uIZXVSJAXLaIcHgtzRW8xCXxUPA.roa
Signing time:             Mon 10 Jul 2023 05:51:50 +0000
ROA not before:           Mon 10 Jul 2023 05:51:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3320
IP address blocks:        81.29.147.0/24 maxlen: 24
                          81.29.157.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:3e:5b:2e:1c:3e:4e:60:6d:a3:64:76:a2:96:41:8f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
        Validity
            Not Before: Jul 10 05:51:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b886575522405cb68870782dcd15bcc425f150f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:db:42:34:e1:5b:72:31:b0:fe:69:ce:24:2a:
                    30:79:48:ac:c8:d0:49:22:1f:db:c7:0b:58:92:1a:
                    48:f9:04:cd:66:8d:ec:8d:96:09:8d:94:13:e7:47:
                    90:d2:a7:44:e9:fd:07:e6:28:8e:84:fb:d4:3b:cd:
                    52:a0:b9:a9:0d:e6:b2:bb:ba:e1:ce:4d:e7:17:d0:
                    5f:4a:c5:df:fb:34:de:9b:30:80:ad:df:16:70:23:
                    92:2c:09:57:2e:ff:a3:a6:80:a2:de:b2:b3:f0:8d:
                    fa:bd:52:4e:78:32:ac:07:03:0b:ad:58:be:60:a3:
                    bd:88:b8:4d:c6:2d:27:15:c3:0b:e0:ab:ee:95:ba:
                    a6:a5:19:6f:aa:24:4a:d8:87:5e:d9:39:89:89:38:
                    8e:60:b4:07:2b:fb:f3:55:50:58:81:53:68:7a:ec:
                    16:a1:50:dc:8f:67:05:8b:bc:ea:e6:30:13:c6:85:
                    c1:83:c3:1a:31:bd:d7:61:9b:66:7a:7c:3e:12:89:
                    7a:51:3d:b3:e6:40:91:be:7e:1a:97:b5:1b:9c:c5:
                    ae:47:eb:17:5d:65:71:31:d3:a5:6f:8f:c8:21:a7:
                    d7:ac:f1:b7:6d:f9:37:99:34:78:40:df:8b:38:3e:
                    db:b6:d8:16:3c:dd:32:88:b9:54:5f:98:40:df:a7:
                    a8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:86:57:55:22:40:5C:B6:88:70:78:2D:CD:15:BC:C4:25:F1:50:F0
            X509v3 Authority Key Identifier:
                keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/uIZXVSJAXLaIcHgtzRW8xCXxUPA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  81.29.147.0/24
                  81.29.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:14:09:e0:0f:fb:b9:57:a3:6f:de:f6:c8:0d:3b:45:6f:5f:
         da:ce:e7:12:05:c6:19:eb:6f:cb:3d:b3:5d:48:4f:80:c8:e9:
         e1:02:96:e5:d6:ac:02:1a:c6:c6:3d:7f:ed:39:aa:a9:0b:c4:
         d0:28:2e:42:20:a0:59:44:2a:b1:43:37:36:e0:42:ba:97:ab:
         87:f2:39:f3:bb:38:3e:a3:6f:e7:08:ab:ff:25:77:de:dc:2d:
         36:16:35:66:54:9b:d2:4b:c6:f5:35:b7:f0:99:4e:49:d6:36:
         74:c8:be:ee:4a:5d:40:78:03:a5:69:12:96:a5:a7:ef:86:c4:
         95:da:b3:ee:c0:5d:de:f9:09:6d:49:40:20:d3:85:1c:15:c0:
         2d:8d:b2:43:2c:8d:89:19:b6:fd:9f:8e:4e:5a:6c:f4:96:25:
         83:ab:29:4c:08:8a:ab:b6:39:3e:52:2b:14:f4:f3:8b:f3:18:
         69:04:bc:c1:e0:58:b1:39:5e:8c:66:91:85:8f:88:e8:58:cc:
         2e:33:04:ab:e8:88:84:9b:8a:74:5f:d3:47:7d:ca:b4:b2:69:
         6f:4f:50:6c:58:15:bd:90:e1:56:a9:f5:57:29:05:41:82:bf:
         2a:36:f6:73:8c:50:26:2e:c8:af:81:f9:15:26:8b:37:d4:ea:
         98:40:f3:bf
-----BEGIN CERTIFICATE-----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Generated at Sun Jul 30 06:35:28 2023 by rpki-client on console-ams.rpki-client.org