Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/7106a8-7252-4ad3-afd7-9379e5dfa3a7/1/rqMvB3LlGvM5KZi3PiXWy3RENOY.roa
File:                     rqMvB3LlGvM5KZi3PiXWy3RENOY.roa (raw, json)
Hash identifier:          mL3+Ki1TYKGf3WXIdHyp5gf53OcuoPM7xFeu6W5Ym04=
Subject key identifier:   AE:A3:2F:07:72:E5:1A:F3:39:29:98:B7:3E:25:D6:CB:74:44:34:E6
Certificate issuer:       /CN=f661d8c4c9c4b9f68aa6c7f53c76e6309f077913
Certificate serial:       01867A5291B56391B7C59E280A89B9A19CCD
Authority key identifier: F6:61:D8:C4:C9:C4:B9:F6:8A:A6:C7:F5:3C:76:E6:30:9F:07:79:13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9mHYxMnEufaKpsf1PHbmMJ8HeRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/7106a8-7252-4ad3-afd7-9379e5dfa3a7/1/rqMvB3LlGvM5KZi3PiXWy3RENOY.roa
Signing time:             Wed 22 Feb 2023 18:11:16 +0000
ROA not before:           Wed 22 Feb 2023 18:11:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     142430
IP address blocks:        212.18.107.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:7a:52:91:b5:63:91:b7:c5:9e:28:0a:89:b9:a1:9c:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f661d8c4c9c4b9f68aa6c7f53c76e6309f077913
        Validity
            Not Before: Feb 22 18:11:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=aea32f0772e51af3392998b73e25d6cb744434e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:42:4f:8e:51:90:e6:aa:ca:d1:08:fe:45:34:
                    9b:b8:05:0a:77:51:0f:9b:0a:63:07:46:de:8e:5d:
                    c6:a4:f6:f6:e6:f8:50:d2:9a:5a:ff:56:c0:2b:9d:
                    42:41:3d:f6:02:25:ff:c8:33:7a:1c:75:55:03:70:
                    e3:d2:15:6b:a8:a1:b9:4d:df:65:e8:f0:81:a1:f4:
                    bb:88:de:6b:3e:03:91:ed:58:ce:22:2e:b2:f7:ae:
                    c5:cf:cc:27:e4:80:93:47:57:c2:43:35:0a:ba:f9:
                    ff:79:e4:0f:49:cf:af:3a:0c:90:ad:60:ee:b9:a0:
                    89:b7:9e:77:f5:b9:8c:ce:b7:e9:d9:ae:c3:11:59:
                    3b:fd:6d:28:a1:21:d9:e4:c3:1e:ad:94:cd:94:a2:
                    a7:a7:83:c7:52:47:9d:94:84:b8:52:ec:59:0b:0e:
                    07:12:c1:2f:a6:f3:d3:b4:c8:c5:45:bd:23:9a:85:
                    55:ba:f1:f4:61:b3:63:be:42:88:ae:53:14:8e:6e:
                    f5:bd:9c:16:cb:2d:6b:48:00:e2:37:e2:48:72:be:
                    01:77:d0:2f:a9:d2:1e:b8:a9:f6:c1:2b:29:af:cf:
                    b3:30:c2:c4:73:78:58:5c:bf:28:57:c5:7c:dc:30:
                    17:8c:df:fd:48:29:46:82:e5:99:75:17:8c:7c:b7:
                    6b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:A3:2F:07:72:E5:1A:F3:39:29:98:B7:3E:25:D6:CB:74:44:34:E6
            X509v3 Authority Key Identifier:
                keyid:F6:61:D8:C4:C9:C4:B9:F6:8A:A6:C7:F5:3C:76:E6:30:9F:07:79:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9mHYxMnEufaKpsf1PHbmMJ8HeRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/7106a8-7252-4ad3-afd7-9379e5dfa3a7/1/rqMvB3LlGvM5KZi3PiXWy3RENOY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/7106a8-7252-4ad3-afd7-9379e5dfa3a7/1/9mHYxMnEufaKpsf1PHbmMJ8HeRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.18.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:cc:7e:7b:2b:58:61:89:71:a6:cb:07:8b:47:33:e9:76:3c:
         da:0e:f0:f1:39:46:4f:7e:72:51:b3:1c:2b:14:dd:c1:a2:69:
         a5:80:0a:09:e3:27:34:b1:48:47:be:09:3c:8b:7f:03:7e:fe:
         8b:ce:04:7f:4d:a1:07:8f:d3:78:d7:1d:51:40:6e:67:8a:da:
         0b:f3:50:a4:46:3f:35:36:02:55:df:e3:e1:4d:8b:ca:72:fc:
         d7:57:4f:c4:4c:e2:73:00:a6:ef:79:b2:71:6b:cd:31:9b:0c:
         c3:b5:94:c1:6a:a5:31:50:3b:da:22:be:9f:b6:60:da:d0:fc:
         53:59:f9:f6:a1:a3:c1:1d:08:16:79:7e:75:9f:b0:ac:0b:92:
         52:4b:fe:21:e4:f7:4f:6b:f2:8f:f9:46:2b:ba:3a:d1:5d:d9:
         b1:07:01:93:24:6b:2b:60:60:97:d5:11:85:be:7a:1e:dc:c7:
         5c:5c:3e:f9:31:68:d0:f5:65:b1:9a:1c:f4:fb:a0:35:94:de:
         a8:e9:14:e8:1b:c9:15:3b:23:47:88:8a:75:f7:44:62:7c:1e:
         e6:ee:f6:09:0f:76:d6:2a:8b:2c:59:be:4a:6d:7f:b2:39:08:
         6e:70:3c:5c:73:7a:6e:a8:da:fa:fa:c9:31:d8:b8:6e:35:41:
         fb:93:93:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:56 2023 by rpki-client on console-fra.rpki-client.org