Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/5ec55a-7461-408e-b45c-e5f26bc4d46e/1/Y32Wn5XQ63XI5aubidkAlPbraOg.roa
File:                     Y32Wn5XQ63XI5aubidkAlPbraOg.roa (raw, json)
Hash identifier:          EhgROsw9UubAIqLIfSbuRgErZbq1hBSZfxr62+8PRqs=
Subject key identifier:   63:7D:96:9F:95:D0:EB:75:C8:E5:AB:9B:89:D9:00:94:F6:EB:68:E8
Certificate issuer:       /CN=a3e6332cc397d338e1d6a1fb86c2b71c92cb2559
Certificate serial:       01856ECB8A603FE0ADC095E74521602250D0
Authority key identifier: A3:E6:33:2C:C3:97:D3:38:E1:D6:A1:FB:86:C2:B7:1C:92:CB:25:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o-YzLMOX0zjh1qH7hsK3HJLLJVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/5ec55a-7461-408e-b45c-e5f26bc4d46e/1/Y32Wn5XQ63XI5aubidkAlPbraOg.roa
Signing time:             Sun 01 Jan 2023 19:25:11 +0000
ROA not before:           Sun 01 Jan 2023 19:25:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        94.247.138.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:cb:8a:60:3f:e0:ad:c0:95:e7:45:21:60:22:50:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e6332cc397d338e1d6a1fb86c2b71c92cb2559
        Validity
            Not Before: Jan  1 19:25:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=637d969f95d0eb75c8e5ab9b89d90094f6eb68e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d8:f2:5f:88:b3:60:80:17:4f:bf:93:63:09:
                    ec:c9:b5:c8:bb:74:fa:4c:dc:0a:53:62:87:6b:80:
                    d8:2a:39:7c:01:5e:48:ca:85:3a:a1:0d:06:5f:05:
                    36:a0:fe:47:f4:12:e6:dd:21:2a:9e:ce:9d:05:f5:
                    3c:54:ad:43:ae:74:5b:94:40:df:04:60:7b:5f:79:
                    ae:98:cb:c8:10:54:64:89:28:3e:b3:6d:0c:4a:c7:
                    b4:b4:2b:46:1b:52:a5:95:03:de:67:27:d8:bb:71:
                    6f:ba:e4:70:ff:47:b1:31:0c:2d:97:79:f7:87:cc:
                    9b:1d:8e:1a:50:d0:75:c4:4b:7c:cb:64:97:8f:01:
                    7b:b0:9f:c6:58:d4:c8:67:82:d2:27:df:79:9c:94:
                    77:7c:50:41:24:af:fc:02:2f:80:76:29:e8:73:b0:
                    ae:b1:96:be:65:1d:77:1b:c8:50:a9:55:a8:0c:81:
                    84:f8:0a:d4:c2:d1:2d:2a:bf:1f:c9:88:76:e6:3f:
                    b9:8f:b5:3d:77:d1:93:ac:a9:4e:08:b3:64:59:3b:
                    b3:85:90:d9:25:95:70:0c:09:d5:d3:c8:d8:99:38:
                    60:cd:6a:fc:c8:04:16:ee:94:6c:07:03:c7:39:9e:
                    91:68:98:a4:e1:64:ba:bb:c3:ea:c6:6c:f9:57:4c:
                    d2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:7D:96:9F:95:D0:EB:75:C8:E5:AB:9B:89:D9:00:94:F6:EB:68:E8
            X509v3 Authority Key Identifier:
                keyid:A3:E6:33:2C:C3:97:D3:38:E1:D6:A1:FB:86:C2:B7:1C:92:CB:25:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-YzLMOX0zjh1qH7hsK3HJLLJVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5ec55a-7461-408e-b45c-e5f26bc4d46e/1/Y32Wn5XQ63XI5aubidkAlPbraOg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/5ec55a-7461-408e-b45c-e5f26bc4d46e/1/o-YzLMOX0zjh1qH7hsK3HJLLJVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.247.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:d2:2e:9d:ef:26:43:9b:81:ff:7e:2b:e0:f1:1c:a7:e7:f9:
         44:45:21:31:bc:a3:c3:45:f5:79:23:a5:43:e0:8f:dd:47:ba:
         a4:02:9f:37:98:6f:a2:29:ed:d5:77:75:f4:8b:34:af:69:19:
         d1:4a:84:33:be:38:60:d3:4f:be:18:8f:e6:20:a9:a3:35:00:
         8f:1b:4e:e4:fe:aa:a0:82:d9:40:f8:f7:26:cb:e8:5d:31:ce:
         f7:f8:03:d3:14:b8:7f:1d:b0:2a:3c:c7:16:3c:b5:f3:1e:d3:
         e6:76:35:78:b4:e3:b4:1c:8d:dd:03:f8:ef:65:6a:7c:4b:18:
         a7:93:86:59:25:fe:3d:84:ac:e0:81:87:7b:d1:21:7d:b8:93:
         ca:17:2f:14:de:96:30:b7:84:63:64:87:e5:74:10:06:08:04:
         31:30:88:0c:46:b6:b9:59:2f:f1:98:4f:0e:85:66:b4:56:45:
         bb:32:63:03:2d:8c:2e:3d:fd:80:15:cd:fe:d3:aa:c9:8d:65:
         91:91:38:a2:d8:d7:9e:63:26:0a:5d:d7:72:b3:9a:38:63:f0:
         d2:cf:62:d1:fa:03:20:bc:b8:ac:21:d3:44:2f:78:72:e5:1c:
         16:f0:bf:70:26:e6:4b:9f:c2:0d:70:25:22:80:00:17:32:c7:
         c7:33:63:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:39 2023 by rpki-client on console-ams.rpki-client.org