Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/1AXIiaYmi_K-L9IpFz8_oOgrp6k.roa
File:                     1AXIiaYmi_K-L9IpFz8_oOgrp6k.roa (raw, json)
Hash identifier:          S0822w15PVOLlsDUKPCGE8XFD8qwTtkHV6674Nf8Au4=
Subject key identifier:   D4:05:C8:89:A6:26:8B:F2:BE:2F:D2:29:17:3F:3F:A0:E8:2B:A7:A9
Certificate issuer:       /CN=e8b3eed1c7aca636d6245852b802e0e73754df63
Certificate serial:       01856CE40A10A79E08DD9580AE122DE4D453
Authority key identifier: E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/1AXIiaYmi_K-L9IpFz8_oOgrp6k.roa
Signing time:             Sun 01 Jan 2023 10:32:42 +0000
ROA not before:           Sun 01 Jan 2023 10:32:42 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        37.148.216.0/21 maxlen: 24
                          195.191.102.0/23 maxlen: 24
                          37.148.220.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:e4:0a:10:a7:9e:08:dd:95:80:ae:12:2d:e4:d4:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8b3eed1c7aca636d6245852b802e0e73754df63
        Validity
            Not Before: Jan  1 10:32:42 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d405c889a6268bf2be2fd229173f3fa0e82ba7a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:57:da:8e:e6:e0:0e:cd:3b:66:0e:54:ae:2a:
                    77:82:10:cf:73:f5:9d:05:0d:fd:e5:b4:4e:3e:3c:
                    2f:db:90:6a:08:f3:80:20:45:e1:0e:7b:f3:34:c2:
                    97:d8:09:a7:6c:f9:b3:c3:2e:5a:30:06:2e:e7:f9:
                    43:76:2a:64:49:a8:b4:b1:98:8c:d1:2b:58:ce:e6:
                    77:52:16:b1:11:f2:f7:fc:84:2c:96:66:83:3c:59:
                    c2:6b:ef:9d:f9:84:fd:db:8b:0e:99:04:c8:d6:fa:
                    3c:6b:b9:e3:a6:82:45:05:2a:f5:9c:a3:ac:79:af:
                    7b:86:f0:fa:3b:f2:df:f7:76:19:18:4f:ba:47:0a:
                    d1:8f:bd:a8:17:b7:aa:e9:72:22:74:16:f5:ce:b5:
                    92:7f:89:71:d3:d5:59:72:a3:52:ad:bf:46:b7:5c:
                    6b:dd:ed:f6:ac:06:6e:f0:12:6e:84:9a:cc:99:ea:
                    d9:d5:e1:e0:fd:b9:ae:23:da:2b:a6:27:09:4c:c7:
                    bd:c5:82:06:0c:e2:6a:c9:fa:37:69:f4:31:6c:a1:
                    5a:3e:0f:3c:68:7b:24:f4:b2:a5:67:5d:59:5a:55:
                    44:5c:14:04:a6:b8:a8:12:bd:65:d2:a2:87:8d:3e:
                    aa:5e:7c:81:23:0f:5c:15:50:2c:08:0f:5a:67:57:
                    c0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:05:C8:89:A6:26:8B:F2:BE:2F:D2:29:17:3F:3F:A0:E8:2B:A7:A9
            X509v3 Authority Key Identifier:
                keyid:E8:B3:EE:D1:C7:AC:A6:36:D6:24:58:52:B8:02:E0:E7:37:54:DF:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6LPu0cespjbWJFhSuALg5zdU32M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/1AXIiaYmi_K-L9IpFz8_oOgrp6k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/177329-28cd-4864-9e16-946404ec1aa4/1/6LPu0cespjbWJFhSuALg5zdU32M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  37.148.216.0/21
                  195.191.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:9d:5f:0d:e0:1f:23:d0:d9:f3:21:92:ed:f7:27:0c:cb:f2:
         4e:4b:37:68:26:8e:3a:83:da:1e:fc:c9:a8:09:00:08:88:07:
         0a:ff:8e:50:88:50:89:cd:e0:49:09:42:90:fa:5a:d9:b6:d1:
         55:6b:6c:3a:04:1c:39:c3:8c:68:45:b3:cf:79:39:4c:5d:1b:
         68:e0:a6:af:ae:f3:3f:2c:28:93:34:af:a9:93:a1:25:b6:fc:
         7f:d3:e3:24:ae:3d:ba:76:47:df:77:2b:2d:bf:2b:d4:d0:b6:
         e9:07:a0:a9:32:45:b4:36:4b:60:a5:d3:3c:ad:51:00:54:c8:
         7e:6c:d8:34:84:36:08:35:9c:4f:f3:f2:ed:26:1c:e2:c4:1b:
         5e:1a:32:40:9d:7d:16:19:36:73:a0:20:f2:55:42:41:93:4e:
         c7:bf:fc:08:ad:88:d3:cc:e5:28:ee:3d:58:8a:2a:90:76:d6:
         dc:c7:09:86:23:5c:8f:6f:65:5d:1f:cc:37:83:fe:55:07:99:
         d6:83:62:0b:d0:43:74:e6:16:cd:f6:dd:55:97:ee:08:3b:a0:
         32:db:c6:63:1c:4e:67:3a:08:76:0d:7d:e4:a5:54:93:62:c9:
         1f:85:85:f6:92:e2:cc:73:5e:d8:41:a9:bf:98:69:57:a1:5f:
         8d:e0:ba:f2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVs5AoQp54I3ZWArhIt5NRTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4YjNlZWQxYzdhY2E2MzZkNjI0NTg1MmI4MDJlMGU3Mzc1
NGRmNjMwHhcNMjMwMTAxMTAzMjQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDA1Yzg4OWE2MjY4YmYyYmUyZmQyMjkxNzNmM2ZhMGU4MmJhN2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1fajubgDs07Zg5Urip3ghDPc/Wd
BQ395bROPjwv25BqCPOAIEXhDnvzNMKX2AmnbPmzwy5aMAYu5/lDdipkSai0sZiM
0StYzuZ3UhaxEfL3/IQslmaDPFnCa++d+YT924sOmQTI1vo8a7njpoJFBSr1nKOs
ea97hvD6O/Lf93YZGE+6RwrRj72oF7eq6XIidBb1zrWSf4lx09VZcqNSrb9Gt1xr
3e32rAZu8BJuhJrMmerZ1eHg/bmuI9orpicJTMe9xYIGDOJqyfo3afQxbKFaPg88
aHsk9LKlZ11ZWlVEXBQEprioEr1l0qKHjT6qXnyBIw9cFVAsCA9aZ1fA2QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNQFyImmJovyvi/SKRc/P6DoK6epMB8GA1UdIwQY
MBaAFOiz7tHHrKY21iRYUrgC4Oc3VN9jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkxQdTBjZXNwamJXSkZoU3VBTGc1emRVMzJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8xNzczMjktMjhjZC00ODY0LTllMTYt
OTQ2NDA0ZWMxYWE0LzEvMUFYSWlhWW1pX0stTDlJcEZ6OF9vT2dycDZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8xNzczMjktMjhjZC00ODY0LTllMTYtOTQ2NDA0ZWMxYWE0
LzEvNkxQdTBjZXNwamJXSkZoU3VBTGc1emRVMzJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDJZTYAwQB
w79mMA0GCSqGSIb3DQEBCwUAA4IBAQBgnV8N4B8j0NnzIZLt9ycMy/JOSzdoJo46
g9oe/MmoCQAIiAcK/45QiFCJzeBJCUKQ+lrZttFVa2w6BBw5w4xoRbPPeTlMXRto
4KavrvM/LCiTNK+pk6Eltvx/0+Mkrj26dkffdystvyvU0LbpB6CpMkW0NktgpdM8
rVEAVMh+bNg0hDYINZxP8/LtJhzixBteGjJAnX0WGTZzoCDyVUJBk07Hv/wIrYjT
zOUo7j1YiiqQdtbcxwmGI1yPb2VdH8w3g/5VB5nWg2IL0EN05hbN9t1Vl+4IO6Ay
28ZjHE5nOgh2DX3kpVSTYskfhYX2kuLMc17YQam/mGlXoV+N4Lry
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:54 2023 by rpki-client on console-ams.rpki-client.org