Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/wrRkaqsUbwOO7sWbu9tOA4m25eg.roa
File:                     wrRkaqsUbwOO7sWbu9tOA4m25eg.roa (raw, json)
Hash identifier:          VG7JAsuCI6CLUXk3U3wRlm5KWvZaJs9A84SUqH/o9Wk=
Subject key identifier:   C2:B4:64:6A:AB:14:6F:03:8E:EE:C5:9B:BB:DB:4E:03:89:B6:E5:E8
Certificate issuer:       /CN=0bac82804700ad36538bf86f34c073e971430da5
Certificate serial:       0185DED01890D8091B9A29EC61E42B38F0F9
Authority key identifier: 0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/wrRkaqsUbwOO7sWbu9tOA4m25eg.roa
Signing time:             Mon 23 Jan 2023 13:27:37 +0000
ROA not before:           Mon 23 Jan 2023 13:27:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     0
IP address blocks:        185.1.230.0/25 maxlen: 25
                          185.1.230.128/25 maxlen: 25
                          212.237.192.0/24 maxlen: 24
                          212.237.193.0/24 maxlen: 24
                          195.69.118.0/24 maxlen: 24
                          195.69.117.0/24 maxlen: 24
                          195.69.116.0/24 maxlen: 24
                          195.69.119.0/24 maxlen: 24
                          195.245.240.0/24 maxlen: 24
                          2001:7f8:122::/49 maxlen: 49
                          2001:7f8:d::/48 maxlen: 64
                          2001:7f8:122:8000::/49 maxlen: 49

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:de:d0:18:90:d8:09:1b:9a:29:ec:61:e4:2b:38:f0:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bac82804700ad36538bf86f34c073e971430da5
        Validity
            Not Before: Jan 23 13:27:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c2b4646aab146f038eeec59bbbdb4e0389b6e5e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ce:f8:f4:2e:ce:12:85:48:ad:a9:3d:e9:ad:
                    3c:52:65:25:e4:aa:c1:b6:7d:76:fe:3c:a6:1d:18:
                    dd:e1:ae:74:f6:b4:2d:0e:e3:e1:e4:65:ff:7b:0f:
                    08:a4:3d:1b:87:68:72:d0:99:b7:db:36:5b:c9:99:
                    f4:c9:28:df:b7:0b:8c:a6:53:db:53:7e:45:cc:25:
                    e9:86:13:e5:1f:6f:b8:73:03:05:74:2f:53:9f:14:
                    79:b2:96:5a:7b:f3:8d:9f:6e:49:0f:36:35:e8:39:
                    ab:6f:1b:07:73:e6:06:10:f0:1e:b4:c8:af:ec:9e:
                    66:82:fa:db:bd:7d:31:11:ff:73:e0:01:5c:c6:04:
                    20:0f:bd:bb:31:50:97:77:1a:0c:51:d0:d1:75:d6:
                    61:7e:01:a4:fe:f4:9c:02:39:43:51:88:5a:6d:e7:
                    46:e4:71:42:a5:d5:67:90:b6:6c:63:0e:48:47:77:
                    a7:43:33:f9:0d:49:2d:95:03:4d:76:a5:87:32:ff:
                    e4:22:91:05:21:45:5e:12:80:23:f3:8e:fb:42:53:
                    f1:af:a5:1d:68:33:0b:9e:eb:b7:37:e4:82:87:f3:
                    44:f8:a6:31:a4:87:ac:1b:05:2c:4e:6a:75:90:bd:
                    ba:e9:31:41:45:d8:05:84:76:24:7a:a8:b2:5c:42:
                    3b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B4:64:6A:AB:14:6F:03:8E:EE:C5:9B:BB:DB:4E:03:89:B6:E5:E8
            X509v3 Authority Key Identifier:
                keyid:0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/wrRkaqsUbwOO7sWbu9tOA4m25eg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.1.230.0/24
                  195.69.116.0/22
                  195.245.240.0/24
                  212.237.192.0/23
                IPv6:
                  2001:7f8:d::/48
                  2001:7f8:122::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:32:90:44:46:87:0f:d3:c8:36:8f:9e:9f:33:22:a6:2c:84:
         a8:a3:88:d6:2b:04:78:78:4e:bc:50:04:1e:af:0a:94:85:68:
         b7:2c:01:f0:f8:7f:c7:a9:c4:83:c4:25:19:ee:ab:08:2d:0b:
         48:2a:0e:b4:46:e4:0b:ad:d6:7e:59:9d:4c:8a:41:3b:3e:8d:
         69:6d:29:ef:54:ea:f4:e1:a1:a1:08:54:f0:84:0a:b2:8e:90:
         90:d9:9e:6e:0b:96:e2:d8:b2:1a:c9:94:bf:59:8b:b6:8c:6f:
         b2:1b:34:29:b3:f3:7d:3d:c4:2d:13:e6:63:e7:78:26:04:0f:
         91:87:a2:45:55:51:c8:84:7e:c0:78:01:4b:a5:2d:03:2f:87:
         34:f1:4c:8d:eb:98:92:bb:9b:7f:12:95:6f:8c:c8:99:e0:67:
         ce:3b:f1:78:07:1b:7a:ae:27:4d:b7:97:c5:24:20:6f:6a:54:
         58:45:bc:d1:80:eb:46:58:66:2c:30:9c:51:d7:f0:a7:36:ec:
         12:72:25:f6:1f:4a:40:92:32:eb:58:e2:50:00:f8:4f:09:58:
         bb:87:a3:33:39:72:8a:9d:15:31:85:34:fa:4b:45:d1:97:06:
         bb:e2:fc:94:e7:ad:a7:01:21:9f:8b:f5:d2:90:00:32:e6:c7:
         d3:1b:ac:17
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAYXe0BiQ2AkbminsYeQrOPD5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYWM4MjgwNDcwMGFkMzY1MzhiZjg2ZjM0YzA3M2U5NzE0
MzBkYTUwHhcNMjMwMTIzMTMyNzM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmI0NjQ2YWFiMTQ2ZjAzOGVlZWM1OWJiYmRiNGUwMzg5YjZlNWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8749C7OEoVIrak96a08UmUl5KrB
tn12/jymHRjd4a509rQtDuPh5GX/ew8IpD0bh2hy0Jm32zZbyZn0ySjftwuMplPb
U35FzCXphhPlH2+4cwMFdC9TnxR5spZae/ONn25JDzY16DmrbxsHc+YGEPAetMiv
7J5mgvrbvX0xEf9z4AFcxgQgD727MVCXdxoMUdDRddZhfgGk/vScAjlDUYhabedG
5HFCpdVnkLZsYw5IR3enQzP5DUktlQNNdqWHMv/kIpEFIUVeEoAj8477QlPxr6Ud
aDMLnuu3N+SCh/NE+KYxpIesGwUsTmp1kL266TFBRdgFhHYkeqiyXEI7UQIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFMK0ZGqrFG8Dju7Fm7vbTgOJtuXoMB8GA1UdIwQY
MBaAFAusgoBHAK02U4v4bzTAc+lxQw2lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzZ5Q2dFY0FyVFpUaV9odk5NQno2WEZERGFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9hNzI4OTEtZGUyZi00MTU2LWEwMTEt
NDNmNjRiY2VhOTlkLzEvd3JSa2Fxc1Vid09PN3NXYnU5dE9BNG0yNWVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9hNzI4OTEtZGUyZi00MTU2LWEwMTEtNDNmNjRiY2VhOTlk
LzEvQzZ5Q2dFY0FyVFpUaV9odk5NQno2WEZERGFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjAeBAIAATAYAwQAuQHmAwQC
w0V0AwQAw/XwAwQB1O3AMBgEAgACMBIDBwAgAQf4AA0DBwAgAQf4ASIwDQYJKoZI
hvcNAQELBQADggEBAE4ykERGhw/TyDaPnp8zIqYshKijiNYrBHh4TrxQBB6vCpSF
aLcsAfD4f8epxIPEJRnuqwgtC0gqDrRG5Aut1n5ZnUyKQTs+jWltKe9U6vThoaEI
VPCECrKOkJDZnm4LluLYshrJlL9Zi7aMb7IbNCmz8309xC0T5mPneCYED5GHokVV
UciEfsB4AUulLQMvhzTxTI3rmJK7m38SlW+MyJngZ8478XgHG3quJ023l8UkIG9q
VFhFvNGA60ZYZiwwnFHX8Kc27BJyJfYfSkCSMutY4lAA+E8JWLuHozM5coqdFTGF
NPpLRdGXBrvi/JTnracBIZ+L9dKQADLmx9MbrBc=
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:31 2024 by rpki-client on console-ams.rpki-client.org