Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/fe4f01-6116-4b97-b7a5-dff1f9ee6135/1/ALSFrux7PHP2PvDSc2_RMoCjGU4.roa
File:                     ALSFrux7PHP2PvDSc2_RMoCjGU4.roa (raw, json)
Hash identifier:          iUo8m8HKE/0WvQYHwVr3MBoFzz7K84qiRywaG2fpJK8=
Subject key identifier:   00:B4:85:AE:EC:7B:3C:73:F6:3E:F0:D2:73:6F:D1:32:80:A3:19:4E
Certificate issuer:       /CN=be2ee5cf4bfc2b6cbdd086aae3877abf6797dea8
Certificate serial:       01856D8ACF60B38EC190808AEE9200B416CC
Authority key identifier: BE:2E:E5:CF:4B:FC:2B:6C:BD:D0:86:AA:E3:87:7A:BF:67:97:DE:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vi7lz0v8K2y90Iaq44d6v2eX3qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/fe4f01-6116-4b97-b7a5-dff1f9ee6135/1/ALSFrux7PHP2PvDSc2_RMoCjGU4.roa
Signing time:             Sun 01 Jan 2023 13:34:51 +0000
ROA not before:           Sun 01 Jan 2023 13:34:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        193.163.193.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:8a:cf:60:b3:8e:c1:90:80:8a:ee:92:00:b4:16:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be2ee5cf4bfc2b6cbdd086aae3877abf6797dea8
        Validity
            Not Before: Jan  1 13:34:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=00b485aeec7b3c73f63ef0d2736fd13280a3194e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:cb:c5:50:39:8f:43:51:e4:93:1b:72:51:e4:
                    42:47:b6:c1:de:76:b8:10:d1:32:19:aa:dc:51:a9:
                    40:70:0f:89:f6:a0:69:d6:8f:36:9f:93:87:18:8d:
                    cd:b4:90:82:fd:3d:fc:04:df:36:45:c6:48:bf:17:
                    1d:4b:20:14:52:5f:0a:6f:48:ca:37:64:1d:2a:b0:
                    5c:73:4d:19:b7:ae:0a:53:5d:78:df:e1:9f:79:f4:
                    7b:c9:d0:36:2a:cc:fd:14:8a:e6:f5:ce:dd:1a:0f:
                    a5:b5:e1:12:91:53:ca:c9:6d:ae:85:dd:1f:b6:5f:
                    14:69:40:2c:3e:64:52:f0:44:c9:29:2f:83:64:7f:
                    6f:59:e5:4e:1d:8b:90:62:72:fe:50:e9:be:99:d1:
                    93:61:73:45:b2:e5:5c:84:32:48:d1:a1:e9:a5:af:
                    65:21:e8:1a:5e:30:f8:48:60:5a:33:46:a9:9f:4d:
                    92:78:0f:32:20:53:83:11:6e:93:ee:45:6e:b6:69:
                    8d:b7:48:e2:a8:70:16:82:e9:81:15:84:c1:56:c9:
                    e2:3e:47:57:87:bf:ca:df:92:f2:7d:ce:13:bc:fa:
                    01:f9:c9:d2:6a:60:14:67:e0:57:03:20:9b:41:ff:
                    a2:ef:8f:49:75:a8:8a:77:16:b2:ca:38:8d:af:4f:
                    ed:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B4:85:AE:EC:7B:3C:73:F6:3E:F0:D2:73:6F:D1:32:80:A3:19:4E
            X509v3 Authority Key Identifier:
                keyid:BE:2E:E5:CF:4B:FC:2B:6C:BD:D0:86:AA:E3:87:7A:BF:67:97:DE:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vi7lz0v8K2y90Iaq44d6v2eX3qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fe4f01-6116-4b97-b7a5-dff1f9ee6135/1/ALSFrux7PHP2PvDSc2_RMoCjGU4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/fe4f01-6116-4b97-b7a5-dff1f9ee6135/1/vi7lz0v8K2y90Iaq44d6v2eX3qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.163.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:84:ae:46:15:82:5e:d6:99:0e:15:7f:34:d5:4d:08:89:a4:
         35:5a:fc:6d:8f:9e:a2:c2:a2:2f:71:22:a7:1d:5f:0b:5a:b4:
         c8:52:6c:6f:ee:51:56:ae:00:67:09:47:9c:97:16:b0:8f:ed:
         84:3a:a9:22:ec:b5:e0:ed:1e:d0:78:b2:df:b1:65:94:ea:66:
         7f:28:6d:c6:af:99:1a:98:e4:a5:7b:d1:4b:33:c9:e4:27:a2:
         70:cf:57:e9:a9:29:88:b9:7e:ea:86:19:e3:d4:72:7b:3f:12:
         02:60:50:b6:51:ed:e2:69:00:67:45:6b:ca:82:0c:e4:7b:8b:
         52:17:0a:75:fa:24:d9:1a:c7:04:5b:94:19:10:ee:07:7d:c2:
         2b:ad:e9:10:1c:13:4b:91:a8:99:65:83:dd:03:fb:42:27:e6:
         a4:71:20:b6:11:45:af:5f:d3:0f:01:6a:47:79:02:9b:42:13:
         4b:e5:42:f6:53:31:78:f5:1c:84:ee:65:1a:bc:0b:39:cf:b0:
         03:3a:90:75:1f:35:d8:79:ac:cb:57:95:68:49:15:ae:00:1e:
         b0:52:29:c5:83:cb:53:18:c1:eb:f8:41:c0:d6:b2:d3:89:57:
         8d:55:af:78:19:e4:75:ef:3c:2c:a1:cb:f3:f2:e3:e4:0c:61:
         b8:a3:9f:f2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtis9gs47BkICK7pIAtBbMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlMmVlNWNmNGJmYzJiNmNiZGQwODZhYWUzODc3YWJmNjc5
N2RlYTgwHhcNMjMwMTAxMTMzNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMGI0ODVhZWVjN2IzYzczZjYzZWYwZDI3MzZmZDEzMjgwYTMxOTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMvFUDmPQ1HkkxtyUeRCR7bB3na4
ENEyGarcUalAcA+J9qBp1o82n5OHGI3NtJCC/T38BN82RcZIvxcdSyAUUl8Kb0jK
N2QdKrBcc00Zt64KU1143+GfefR7ydA2Ksz9FIrm9c7dGg+lteESkVPKyW2uhd0f
tl8UaUAsPmRS8ETJKS+DZH9vWeVOHYuQYnL+UOm+mdGTYXNFsuVchDJI0aHppa9l
IegaXjD4SGBaM0apn02SeA8yIFODEW6T7kVutmmNt0jiqHAWgumBFYTBVsniPkdX
h7/K35Lyfc4TvPoB+cnSamAUZ+BXAyCbQf+i749JdaiKdxayyjiNr0/t/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAC0ha7sezxz9j7w0nNv0TKAoxlOMB8GA1UdIwQY
MBaAFL4u5c9L/CtsvdCGquOHer9nl96oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmk3bHowdjhLMnk5MElhcTQ0ZDZ2MmVYM3FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9mZTRmMDEtNjExNi00Yjk3LWI3YTUt
ZGZmMWY5ZWU2MTM1LzEvQUxTRnJ1eDdQSFAyUHZEU2MyX1JNb0NqR1U0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9mZTRmMDEtNjExNi00Yjk3LWI3YTUtZGZmMWY5ZWU2MTM1
LzEvdmk3bHowdjhLMnk5MElhcTQ0ZDZ2MmVYM3FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaPBMA0G
CSqGSIb3DQEBCwUAA4IBAQB9hK5GFYJe1pkOFX801U0IiaQ1Wvxtj56iwqIvcSKn
HV8LWrTIUmxv7lFWrgBnCUeclxawj+2EOqki7LXg7R7QeLLfsWWU6mZ/KG3Gr5ka
mOSle9FLM8nkJ6Jwz1fpqSmIuX7qhhnj1HJ7PxICYFC2Ue3iaQBnRWvKggzke4tS
Fwp1+iTZGscEW5QZEO4HfcIrrekQHBNLkaiZZYPdA/tCJ+akcSC2EUWvX9MPAWpH
eQKbQhNL5UL2UzF49RyE7mUavAs5z7ADOpB1HzXYeazLV5VoSRWuAB6wUinFg8tT
GMHr+EHA1rLTiVeNVa94GeR17zwsocvz8uPkDGG4o5/y
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:48 2023 by rpki-client on console-ams.rpki-client.org