Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/b01513-c61f-47ab-aba5-f77b6d164c72/1/PP6Q6bfO3ulYuZ_AXW7OZNNYpYE.roa
File:                     PP6Q6bfO3ulYuZ_AXW7OZNNYpYE.roa (raw, json)
Hash identifier:          GWQk0K8i68W5S0G6zmeFVg26t3cPyAskD7MpKZIwpOE=
Subject key identifier:   3C:FE:90:E9:B7:CE:DE:E9:58:B9:9F:C0:5D:6E:CE:64:D3:58:A5:81
Certificate issuer:       /CN=da828487183840993c01acf9d4005239484c42a0
Certificate serial:       018AFE6F8D05108FE1FD746602A765BE77C4
Authority key identifier: DA:82:84:87:18:38:40:99:3C:01:AC:F9:D4:00:52:39:48:4C:42:A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2oKEhxg4QJk8Aaz51ABSOUhMQqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/b01513-c61f-47ab-aba5-f77b6d164c72/1/PP6Q6bfO3ulYuZ_AXW7OZNNYpYE.roa
Signing time:             Thu 05 Oct 2023 06:03:57 +0000
ROA not before:           Thu 05 Oct 2023 06:03:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        176.105.244.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:fe:6f:8d:05:10:8f:e1:fd:74:66:02:a7:65:be:77:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da828487183840993c01acf9d4005239484c42a0
        Validity
            Not Before: Oct  5 06:03:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3cfe90e9b7cedee958b99fc05d6ece64d358a581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:62:86:ca:33:9f:0a:e3:c3:ba:ce:02:40:2d:
                    a1:a8:ad:9c:38:aa:ca:65:c2:da:d9:f4:84:8f:d9:
                    7c:2d:dc:af:8d:6d:19:cb:b4:1f:c8:19:35:82:e0:
                    2e:6a:0b:44:64:df:03:b7:87:bd:d6:27:7a:2e:f0:
                    15:be:7e:fd:07:a2:b5:29:3b:7a:43:3c:4b:59:f9:
                    65:75:86:b9:ec:fd:c8:b3:e1:85:a8:94:8c:c8:7c:
                    8e:5e:34:86:a3:68:58:98:3f:2a:73:81:1b:d9:43:
                    a6:ca:41:ee:96:e6:1f:36:32:a3:a6:4d:fe:f5:e7:
                    3c:6f:d4:77:27:0e:c1:3c:0a:d5:3f:00:45:67:1d:
                    e4:95:0e:31:5b:c0:6b:20:ed:e9:31:38:16:03:57:
                    e7:1b:39:a3:9f:00:14:d5:62:3b:6e:84:0c:ff:13:
                    a6:49:b0:00:e9:63:e2:e7:2f:ed:3c:27:5a:ce:3f:
                    3a:07:67:15:9d:49:8c:d4:3d:75:d8:96:07:a8:c4:
                    ab:01:c4:9d:f2:8c:31:a1:6e:06:98:e6:23:ca:9c:
                    ef:d3:1e:be:65:e6:58:55:d6:78:aa:ce:6e:7d:00:
                    c9:56:c4:be:52:f9:5a:f6:9d:3e:1d:6f:cb:ca:00:
                    d8:a4:d5:1c:7a:35:5b:ac:2d:8d:39:b1:6a:dc:04:
                    ca:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:FE:90:E9:B7:CE:DE:E9:58:B9:9F:C0:5D:6E:CE:64:D3:58:A5:81
            X509v3 Authority Key Identifier:
                keyid:DA:82:84:87:18:38:40:99:3C:01:AC:F9:D4:00:52:39:48:4C:42:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2oKEhxg4QJk8Aaz51ABSOUhMQqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b01513-c61f-47ab-aba5-f77b6d164c72/1/PP6Q6bfO3ulYuZ_AXW7OZNNYpYE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/b01513-c61f-47ab-aba5-f77b6d164c72/1/2oKEhxg4QJk8Aaz51ABSOUhMQqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.105.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:30:20:50:63:1b:e0:71:4b:8d:b6:2d:87:70:fe:98:2d:c4:
         6e:d0:15:df:6e:c8:d8:18:46:92:dc:65:8d:86:90:87:dc:81:
         18:95:65:5a:64:18:1c:35:1a:4a:b4:f0:24:ba:1f:85:5c:15:
         2d:0b:82:7e:a3:e9:30:4e:d3:e9:2e:ed:ed:84:47:5a:47:e2:
         ac:ae:d7:7f:cf:c0:04:e1:8a:5e:dd:fb:35:2e:23:f2:49:e7:
         e1:90:2b:c9:e2:d8:2e:65:92:70:c3:56:83:0e:69:e8:ef:e7:
         6f:a6:eb:84:6e:81:43:f9:43:ee:f0:1c:41:7c:05:e4:dd:99:
         d9:9c:96:ab:89:06:48:22:54:e5:be:28:a3:74:ce:14:76:a2:
         62:64:e7:01:e6:b5:17:c8:7b:45:bf:f0:3f:55:47:fd:07:06:
         10:71:14:2f:af:62:22:ca:5d:e3:2f:f3:7f:fe:a0:d9:9d:e2:
         c6:2a:8e:d3:4d:90:27:14:1c:cd:6a:3f:56:4f:7f:25:7c:dd:
         f7:4c:25:d3:ad:ce:0b:a9:1b:d0:2b:44:34:78:06:77:f3:37:
         01:a8:5e:3d:3f:bd:90:76:b2:21:bb:d6:42:4d:78:c8:a4:ea:
         cf:4d:2b:7d:9d:65:a2:6b:17:c0:55:16:3d:5c:8f:f1:ee:14:
         05:f2:94:42
-----BEGIN CERTIFICATE-----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Generated at Thu Oct 5 18:19:56 2023 by rpki-client on console-fra.rpki-client.org