Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/69PrDJZjDLgmkLm_YQ9Dtj_HQsw.roa
File:                     69PrDJZjDLgmkLm_YQ9Dtj_HQsw.roa (raw, json)
Hash identifier:          fP1/LtLCPUL2StLwxaa1Izvdrn8IXECy1FYSutQewL0=
Subject key identifier:   EB:D3:EB:0C:96:63:0C:B8:26:90:B9:BF:61:0F:43:B6:3F:C7:42:CC
Certificate issuer:       /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial:       01869BFD7BEDA5399CFD64F6F8E4D3F10D97
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/69PrDJZjDLgmkLm_YQ9Dtj_HQsw.roa
Signing time:             Wed 01 Mar 2023 07:05:26 +0000
ROA not before:           Wed 01 Mar 2023 07:05:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     48359
IP address blocks:        185.215.231.0/24 maxlen: 24
                          185.215.230.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:9b:fd:7b:ed:a5:39:9c:fd:64:f6:f8:e4:d3:f1:0d:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
        Validity
            Not Before: Mar  1 07:05:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ebd3eb0c96630cb82690b9bf610f43b63fc742cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1c:c9:da:42:c4:92:89:8c:53:c1:f2:d0:c8:
                    f2:db:7f:41:4c:08:20:a8:12:7f:2c:97:7c:9e:35:
                    33:f2:f6:69:27:a6:8c:94:53:1f:b9:37:88:f8:46:
                    80:bb:e0:c7:06:44:f1:57:8e:44:3e:23:93:a5:4d:
                    f2:c0:42:c6:bd:c6:79:bf:c6:dd:fc:24:0f:44:dc:
                    d8:20:68:2c:3b:9e:14:b4:92:36:7e:c8:05:22:80:
                    c0:c1:90:ef:23:2d:2b:48:24:94:61:79:b0:35:a4:
                    9b:85:d7:2b:11:63:9c:df:4a:70:c7:b9:e6:69:c4:
                    6c:8c:5b:89:11:35:a8:41:f9:bc:cf:04:dd:01:2a:
                    3f:93:b9:bc:f3:63:63:47:d1:f1:58:2a:6e:c6:17:
                    a3:54:70:67:a8:89:53:0f:c8:48:56:2d:ae:f0:ec:
                    c0:e0:8e:ea:85:31:6e:13:2d:b9:86:e6:e0:21:8a:
                    45:ca:35:76:c6:47:17:4e:35:21:5c:47:c7:55:53:
                    07:38:94:7d:05:7b:88:48:89:f6:93:95:84:06:e8:
                    4f:b8:f2:e3:8b:8e:d7:dc:87:4f:0c:a9:43:ba:98:
                    47:53:00:0e:d0:98:a9:d3:9c:a6:b0:eb:67:c7:a9:
                    7b:eb:a6:ed:90:e6:25:66:58:17:63:a9:0a:51:82:
                    48:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D3:EB:0C:96:63:0C:B8:26:90:B9:BF:61:0F:43:B6:3F:C7:42:CC
            X509v3 Authority Key Identifier:
                keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/69PrDJZjDLgmkLm_YQ9Dtj_HQsw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.215.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:1a:3f:cd:c9:8d:c9:3f:13:23:1d:f1:6c:62:2b:ad:a4:f1:
         ee:ad:ba:8c:47:92:66:68:4b:08:34:c7:81:61:59:64:6b:20:
         f8:9a:36:b3:23:1d:5f:5f:aa:2c:c2:1b:e5:f7:70:69:eb:d8:
         ed:5b:ce:a1:12:d6:64:62:e9:d8:4d:54:f9:04:00:64:c6:89:
         88:ee:f7:78:4d:a3:09:9e:69:cd:9d:e9:34:6b:2b:18:91:21:
         78:66:45:48:df:a1:11:bb:57:97:54:ee:23:43:33:69:eb:b6:
         c4:8e:5b:ad:73:81:b2:b0:14:78:1a:a0:fc:5a:f6:44:b8:c8:
         9d:9c:a4:c8:34:22:f7:23:ca:be:7d:f7:31:1b:d2:9b:2c:7a:
         62:8e:f7:33:7c:e7:36:35:df:93:7b:66:16:b6:19:ef:e8:a0:
         93:96:e4:a4:d8:e7:7b:46:35:90:56:a1:f2:06:c9:7e:a3:53:
         ab:2f:66:22:bf:16:ee:0c:68:b0:82:99:cb:72:3b:e4:76:f9:
         29:d2:18:57:9f:72:78:0c:8e:56:f8:9d:12:0f:71:e1:70:10:
         94:28:09:e3:85:78:6c:15:c5:bf:1e:25:46:01:84:4f:cd:c5:
         4f:68:5c:82:87:83:c5:06:85:84:44:15:cd:fa:9b:cd:b1:28:
         e6:1c:43:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:19 2023 by rpki-client on console-ams.rpki-client.org