Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/7106a8-7252-4ad3-afd7-9379e5dfa3a7/1/yO8lyloVE2Ls4_n4Ula5OM14-lA.roa
File:                     yO8lyloVE2Ls4_n4Ula5OM14-lA.roa (raw, json)
Hash identifier:          oLzLxcRrEOkjlO/20zzemOef+zCr6lbqPK+8a1NvLEs=
Subject key identifier:   C8:EF:25:CA:5A:15:13:62:EC:E3:F9:F8:52:56:B9:38:CD:78:FA:50
Certificate issuer:       /CN=f661d8c4c9c4b9f68aa6c7f53c76e6309f077913
Certificate serial:       01857139E9568E0778F8AE8D65D78697A7DC
Authority key identifier: F6:61:D8:C4:C9:C4:B9:F6:8A:A6:C7:F5:3C:76:E6:30:9F:07:79:13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9mHYxMnEufaKpsf1PHbmMJ8HeRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/7106a8-7252-4ad3-afd7-9379e5dfa3a7/1/yO8lyloVE2Ls4_n4Ula5OM14-lA.roa
Signing time:             Mon 02 Jan 2023 06:44:58 +0000
ROA not before:           Mon 02 Jan 2023 06:44:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        212.18.107.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:39:e9:56:8e:07:78:f8:ae:8d:65:d7:86:97:a7:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f661d8c4c9c4b9f68aa6c7f53c76e6309f077913
        Validity
            Not Before: Jan  2 06:44:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c8ef25ca5a151362ece3f9f85256b938cd78fa50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4d:5b:03:21:e5:7f:c0:40:2f:5f:66:2f:c0:
                    a9:44:bc:c6:1e:03:6f:8c:ef:82:eb:3b:f9:32:51:
                    32:71:7b:38:74:80:17:bb:cc:34:53:fe:6c:b8:87:
                    d7:4a:55:f3:65:b7:6a:ab:dd:03:70:93:9c:19:c5:
                    aa:be:8d:30:ff:1c:4e:5f:07:33:31:22:e2:1e:5d:
                    8e:dc:05:f6:4c:2d:fa:15:dc:ac:79:be:53:5d:90:
                    c3:a7:df:5d:fa:a2:dd:51:e6:74:85:e9:5f:33:cb:
                    0e:3f:cf:a8:e9:4d:75:a6:b5:f1:c6:73:02:0e:37:
                    a1:1b:75:b8:1c:9e:b0:da:2a:4b:5d:89:60:ce:46:
                    8b:c8:ea:43:bb:b4:22:89:31:e3:78:8c:cc:cf:ab:
                    57:98:ed:e7:1a:51:0d:e6:e4:47:87:53:9b:b2:22:
                    c2:83:ec:b1:d1:e5:f7:40:ce:ba:49:c0:57:dd:51:
                    a0:d2:c6:f3:4c:9b:da:9b:c0:97:94:ab:4a:d3:50:
                    f0:0a:d3:50:33:75:1c:d0:22:90:7f:e1:9f:d4:45:
                    34:87:c3:50:95:4d:61:73:59:fc:0d:d6:2b:c8:d7:
                    85:6e:5c:7b:b8:af:96:91:01:f4:7d:3d:9e:08:f7:
                    50:18:8c:24:cd:03:27:06:9b:83:58:bb:c0:03:31:
                    d9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                C8:EF:25:CA:5A:15:13:62:EC:E3:F9:F8:52:56:B9:38:CD:78:FA:50
            X509v3 Authority Key Identifier: 
                keyid:F6:61:D8:C4:C9:C4:B9:F6:8A:A6:C7:F5:3C:76:E6:30:9F:07:79:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9mHYxMnEufaKpsf1PHbmMJ8HeRM.cer

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/7106a8-7252-4ad3-afd7-9379e5dfa3a7/1/yO8lyloVE2Ls4_n4Ula5OM14-lA.roa

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/7106a8-7252-4ad3-afd7-9379e5dfa3a7/1/9mHYxMnEufaKpsf1PHbmMJ8HeRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  212.18.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:ed:14:39:7a:88:dd:2b:36:1e:14:78:ba:d9:3b:8c:18:3e:
         04:0d:af:11:2f:a8:14:ab:0e:b5:2a:cc:bc:1e:4b:18:14:e9:
         7d:b6:03:4b:bb:91:91:94:21:ec:3a:74:05:3b:56:bd:6c:1a:
         73:81:8d:6b:1a:e2:7f:3c:2b:fe:9a:14:20:34:e9:7c:6a:93:
         8d:f1:0a:9e:6f:ac:69:54:fd:c0:4e:fc:e4:98:9a:b4:c9:1a:
         03:e1:f1:d4:07:b9:55:2d:fc:54:fb:63:f6:55:5e:4f:eb:d1:
         0f:e2:a8:12:f7:79:18:a9:9f:e7:42:a7:60:ba:66:8b:b8:c4:
         aa:14:98:c4:7f:f5:3b:52:f0:3e:d0:71:c3:1e:39:f6:89:19:
         50:98:7c:d6:0a:34:27:db:a3:92:dd:f7:8a:a3:7a:4a:e9:21:
         47:5d:1d:97:3a:4b:bd:d0:9d:cc:61:25:5b:c6:2d:d6:43:93:
         1a:34:1f:af:a6:91:19:0d:c4:1a:62:fb:c1:bc:d0:ad:da:37:
         db:76:f3:3b:4f:1f:4b:cd:14:33:c1:89:bd:bd:80:dc:4c:9a:
         72:22:c8:0f:cb:e9:5d:2c:b6:8b:4d:11:6f:4a:98:62:c0:cc:
         3f:6b:a2:40:bc:b6:38:d5:c8:c8:40:97:08:2c:31:31:ba:c0:
         2f:74:13:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 14 20:27:59 2023 by rpki-client on console-ams.rpki-client.org