Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/46ca25-7595-4e7f-a4b1-23386749fbdf/1/kPUoOK9Ec12AzzHSTk5syLMEJs4.roa
File:                     kPUoOK9Ec12AzzHSTk5syLMEJs4.roa (raw, json)
Hash identifier:          7SVtBM1iqndZUTNfAswi6OgqnrIwLgrJJSFokl9Lifs=
Subject key identifier:   90:F5:28:38:AF:44:73:5D:80:CF:31:D2:4E:4E:6C:C8:B3:04:26:CE
Certificate issuer:       /CN=0acf0a954639c83582974bd29c1992272b3683a3
Certificate serial:       0186F5410F63F9B5415BD323E898957FF6B6
Authority key identifier: 0A:CF:0A:95:46:39:C8:35:82:97:4B:D2:9C:19:92:27:2B:36:83:A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cs8KlUY5yDWCl0vSnBmSJys2g6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/46ca25-7595-4e7f-a4b1-23386749fbdf/1/kPUoOK9Ec12AzzHSTk5syLMEJs4.roa
Signing time:             Sat 18 Mar 2023 15:05:27 +0000
ROA not before:           Sat 18 Mar 2023 15:05:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208068
IP address blocks:        185.202.110.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:f5:41:0f:63:f9:b5:41:5b:d3:23:e8:98:95:7f:f6:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0acf0a954639c83582974bd29c1992272b3683a3
        Validity
            Not Before: Mar 18 15:05:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=90f52838af44735d80cf31d24e4e6cc8b30426ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:c4:08:fd:69:01:93:78:e2:ee:33:45:bd:29:
                    0d:4e:89:e4:16:84:61:3d:69:24:da:d1:2a:a9:29:
                    a9:0f:e1:e1:ce:5f:5d:9d:b6:39:78:ce:10:d9:82:
                    50:96:fa:ef:73:9a:3e:3e:6d:39:80:db:cb:81:fc:
                    a5:c4:54:65:0b:78:9b:ff:2e:e2:78:b4:11:ef:f2:
                    2b:2f:a0:7c:70:f9:12:11:f4:e6:8e:f7:46:fe:9f:
                    89:df:01:75:b2:85:34:dd:cb:87:f7:48:fc:57:ac:
                    b5:9a:09:69:ee:83:f1:90:6c:08:70:eb:79:d8:3c:
                    ff:98:c5:d9:d2:61:01:37:6a:6c:2a:fc:ac:56:d1:
                    44:1f:3a:d2:6d:76:06:e1:82:39:c7:6a:c3:65:bf:
                    5c:80:1b:cd:bf:17:3d:08:88:2c:21:96:26:b0:0a:
                    a6:f6:d0:0a:a3:1f:66:d6:8b:d8:ad:25:e2:23:b3:
                    de:a7:e4:cf:9a:86:e4:36:bd:e8:fb:e8:ce:99:54:
                    6e:8b:24:b3:ef:58:11:7e:6d:65:f9:63:a6:b5:dc:
                    e8:0e:cb:47:eb:d6:e1:34:39:9c:d2:e2:25:cf:72:
                    bb:8e:ce:c8:34:1d:16:c6:ec:56:80:cb:c9:15:80:
                    5b:e7:c0:46:88:10:74:9e:a5:58:2b:1d:7b:c1:14:
                    24:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F5:28:38:AF:44:73:5D:80:CF:31:D2:4E:4E:6C:C8:B3:04:26:CE
            X509v3 Authority Key Identifier:
                keyid:0A:CF:0A:95:46:39:C8:35:82:97:4B:D2:9C:19:92:27:2B:36:83:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cs8KlUY5yDWCl0vSnBmSJys2g6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/46ca25-7595-4e7f-a4b1-23386749fbdf/1/kPUoOK9Ec12AzzHSTk5syLMEJs4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/46ca25-7595-4e7f-a4b1-23386749fbdf/1/Cs8KlUY5yDWCl0vSnBmSJys2g6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.202.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:7e:52:a1:c2:00:56:8e:ca:c8:f9:05:e4:39:95:8a:e9:13:
         ca:1e:2d:ae:fa:a0:f7:a2:05:0d:bd:7c:54:af:ec:c9:c1:3e:
         48:51:d4:9a:52:d6:5e:38:84:4a:92:81:79:63:65:41:80:57:
         62:4c:b4:73:e3:a6:e6:8b:5c:4d:eb:e9:a0:6e:2d:44:27:73:
         84:d7:0a:de:15:03:ca:56:06:85:7f:5b:44:d6:6d:77:99:dc:
         31:36:4e:36:0c:0f:31:61:66:06:ab:b7:85:60:f7:0b:94:c2:
         72:da:75:5d:59:b9:57:76:50:e6:2d:2d:2d:b5:01:f1:c8:b5:
         38:bb:b7:01:76:bb:6a:d3:71:77:65:c7:ff:f4:2a:12:83:8c:
         cb:9b:09:be:49:ed:5a:12:66:b7:7c:c1:12:e4:9c:57:2a:c9:
         be:d9:68:63:85:85:07:e0:09:2a:b5:c7:2f:9f:87:d8:d8:0b:
         ba:a0:89:cb:29:5c:2d:7b:12:21:7f:ef:7d:b7:49:8b:55:85:
         41:32:38:cd:79:9b:2a:cf:72:4b:c2:3d:9b:79:ae:b2:5c:3b:
         9d:8d:e4:f4:33:2a:23:26:a1:c9:91:57:ac:f8:85:0d:4e:25:
         c5:db:2e:74:9d:78:11:8f:67:28:69:c1:0e:03:0d:2c:3e:db:
         ec:c6:82:18
-----BEGIN CERTIFICATE-----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Generated at Fri Aug 18 06:06:14 2023 by rpki-client on console-fra.rpki-client.org