Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/9Rt7hhZ-VmUx8b7LIux9nOIO90I.roa
File:                     9Rt7hhZ-VmUx8b7LIux9nOIO90I.roa (raw, json)
Hash identifier:          KsycPkIlgQ4w/PQnVou4REG+T+nuWqOYrXEYXTB7a3k=
Subject key identifier:   F5:1B:7B:86:16:7E:56:65:31:F1:BE:CB:22:EC:7D:9C:E2:0E:F7:42
Certificate issuer:       /CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
Certificate serial:       018570E75EF337F5A9D6D806C5D95F411B86
Authority key identifier: E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/9Rt7hhZ-VmUx8b7LIux9nOIO90I.roa
Signing time:             Mon 02 Jan 2023 05:14:49 +0000
ROA not before:           Mon 02 Jan 2023 05:14:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     20836
IP address blocks:        185.112.90.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:e7:5e:f3:37:f5:a9:d6:d8:06:c5:d9:5f:41:1b:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
        Validity
            Not Before: Jan  2 05:14:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f51b7b86167e566531f1becb22ec7d9ce20ef742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:80:08:22:21:82:f2:ec:6c:cc:c4:d6:26:ae:
                    b2:e8:52:38:32:f4:1e:7f:5a:a4:58:bc:60:9d:dd:
                    d9:4e:43:c4:68:11:d9:1b:ea:ed:97:40:7f:c0:10:
                    57:cb:d6:e0:05:4f:37:e5:a8:b1:e2:c2:ee:e8:32:
                    54:d5:a9:ba:0f:da:39:0f:c4:b3:9e:c5:0c:25:9e:
                    f0:40:bb:c3:9a:83:0f:f7:4f:af:89:3b:86:e0:cf:
                    32:5c:18:7b:36:70:ba:c3:6f:07:28:af:09:ea:5d:
                    25:d3:34:58:4a:48:91:f6:05:1b:36:6c:32:f1:63:
                    3e:ab:fb:64:95:60:c1:58:29:af:6a:fe:fa:fa:ac:
                    12:d9:af:5e:9d:aa:82:e3:57:da:53:85:5e:9a:2f:
                    7f:25:68:33:06:d9:7d:2e:c5:00:0a:b9:2a:64:b2:
                    68:cb:21:69:e7:03:9a:df:53:9a:4a:84:a2:bf:27:
                    9d:9f:93:15:b7:bc:7d:a3:17:84:43:13:80:bb:a4:
                    16:f7:15:a1:38:13:af:29:88:4f:9a:40:0d:9a:86:
                    7b:64:0a:70:26:b9:40:00:32:a6:9f:6f:61:3d:88:
                    b3:50:6f:02:ca:46:c6:a8:f5:30:cf:b0:16:9a:c0:
                    83:27:5f:05:00:5d:82:11:6b:9d:e9:50:ff:1e:ac:
                    25:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:1B:7B:86:16:7E:56:65:31:F1:BE:CB:22:EC:7D:9C:E2:0E:F7:42
            X509v3 Authority Key Identifier:
                keyid:E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/9Rt7hhZ-VmUx8b7LIux9nOIO90I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.112.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:1a:ff:c5:eb:a2:3c:66:1f:af:cd:e4:b8:10:4b:b3:3f:2f:
         11:7a:a1:00:45:1e:7d:92:1c:15:51:98:d6:a5:dd:b7:d9:75:
         77:5e:6d:95:51:62:7d:ff:54:8f:85:b9:21:10:ce:3e:45:c0:
         82:d2:6e:82:15:b1:20:b6:0a:90:c3:80:9b:21:2e:56:ef:2f:
         74:dd:77:b9:5b:e6:ac:ff:e3:5a:d7:5d:39:66:b1:41:f0:1f:
         75:0c:0c:7f:f8:a2:41:72:af:02:02:7f:8a:98:5b:c2:3f:83:
         7a:40:64:cf:3b:7e:67:c1:ab:0b:1e:4a:cf:69:ab:b3:8c:10:
         37:6c:39:89:05:93:5c:f8:ff:92:70:d2:d2:61:7f:f0:75:d0:
         e6:bc:80:18:75:bd:a1:9b:8f:8f:4a:f8:6c:5f:93:07:e3:68:
         ee:cc:bc:52:ea:0d:a8:b1:fa:d9:83:c0:61:99:1a:4e:df:83:
         e4:4f:e6:18:81:65:4c:99:28:d6:be:40:03:24:69:77:e5:9f:
         48:15:24:f5:03:5b:b0:97:97:e2:35:68:9e:3b:f0:68:04:0e:
         80:a6:fd:d9:b9:4c:8d:e2:3d:90:f8:67:c4:2c:3f:28:4e:15:
         ae:70:b0:2c:b4:30:49:1e:ea:36:13:b1:38:ef:42:25:47:a3:
         f0:19:07:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:05 2024 by rpki-client on console-fra.rpki-client.org