Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/Fl-6ij4pIBe7Z0D7KyUG4-FVRl4.roa
File:                     Fl-6ij4pIBe7Z0D7KyUG4-FVRl4.roa (raw, json)
Hash identifier:          KSrdwKEqS+2mxLlZl6T8TrT7FI0PrcC5qtgr/z15eLg=
Subject key identifier:   16:5F:BA:8A:3E:29:20:17:BB:67:40:FB:2B:25:06:E3:E1:55:46:5E
Certificate issuer:       /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial:       018800F66B56EA12C292DFE82A215BD97BC2
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/Fl-6ij4pIBe7Z0D7KyUG4-FVRl4.roa
Signing time:             Tue 09 May 2023 14:42:09 +0000
ROA not before:           Tue 09 May 2023 14:42:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        185.33.26.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:00:f6:6b:56:ea:12:c2:92:df:e8:2a:21:5b:d9:7b:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
        Validity
            Not Before: May  9 14:42:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=165fba8a3e292017bb6740fb2b2506e3e155465e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:97:c4:38:a2:06:19:78:43:32:d3:b1:f7:49:
                    25:8a:e3:a3:46:95:15:62:8b:ee:c4:cc:bb:d9:45:
                    57:e1:3a:c7:5b:b1:6b:88:0f:6c:5a:6b:04:8b:16:
                    a8:59:b7:26:69:8a:eb:ac:1c:d5:6d:76:50:31:60:
                    1c:42:d1:67:9b:60:3d:2a:8c:42:9c:29:89:ac:d1:
                    a8:eb:6a:71:ac:4e:13:82:cb:0c:66:e8:a0:a7:79:
                    f7:9c:4c:a2:64:7c:e9:a6:e7:3a:ed:7e:90:9f:b0:
                    d6:3c:10:19:3d:83:cf:5a:1c:24:e9:0b:40:61:7a:
                    26:0d:24:91:5e:7a:da:04:31:a1:5e:0f:25:3b:4c:
                    90:68:51:8d:f8:1d:d7:29:c0:fd:26:79:18:3a:be:
                    b5:54:f6:8e:16:8a:f7:19:f4:82:52:c1:8c:0d:8e:
                    ae:17:2f:3e:27:e3:74:f6:39:3c:8a:5e:26:7a:45:
                    75:a9:d7:b5:d6:d0:6f:0d:36:41:91:0e:12:3c:e7:
                    77:47:44:41:82:1b:3c:4c:5d:1c:7e:de:ee:5e:2a:
                    23:fb:55:ce:a7:5f:da:99:85:b2:4a:d4:7a:f4:89:
                    0a:c5:ad:bb:70:80:1d:81:47:00:2f:ef:dd:9b:80:
                    02:77:87:93:7e:fe:20:0a:f3:3b:bb:67:0f:87:df:
                    61:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:5F:BA:8A:3E:29:20:17:BB:67:40:FB:2B:25:06:E3:E1:55:46:5E
            X509v3 Authority Key Identifier:
                keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/Fl-6ij4pIBe7Z0D7KyUG4-FVRl4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.33.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:02:1c:2d:c5:90:4d:18:a9:0f:b2:2f:10:e6:a5:8f:02:52:
         f8:fa:25:e8:e0:a8:2b:2f:2f:40:80:13:2d:89:3c:1a:5e:b6:
         a6:dd:3b:97:54:fc:92:56:13:bf:cd:6d:8e:44:1f:a3:33:cd:
         1f:3c:4d:bc:32:10:1c:9f:25:87:92:51:16:df:9e:3a:1d:46:
         05:32:ad:36:e8:95:2b:58:fd:d7:83:59:4e:ad:5c:16:8c:9c:
         07:29:cb:8b:07:0c:81:4b:0c:d9:94:79:f9:dd:80:b1:a0:72:
         29:64:04:b9:a8:5c:25:15:63:1b:17:8f:4a:92:e2:4b:5a:e5:
         58:6f:1c:ca:03:90:af:f4:b7:5c:e5:87:f4:fa:13:57:72:a3:
         cb:ea:3e:fb:8f:c9:19:a8:55:be:39:13:6f:ac:0e:04:91:b9:
         8e:8a:d6:b1:df:f3:c1:d2:6b:d0:d2:ab:e0:fa:40:f3:e7:42:
         36:4b:65:3b:d1:12:d7:d0:2b:56:5e:82:98:d1:0d:9e:6f:48:
         45:34:26:6a:42:27:b6:b4:6d:68:1a:79:38:90:fd:b8:bc:bd:
         e4:30:e3:66:e1:21:82:c1:83:79:5c:49:7b:f1:f0:8c:84:d1:
         09:fa:dc:7a:aa:6f:ab:4f:1d:46:09:02:18:e9:80:8a:76:5c:
         19:b9:f4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:07 2023 by rpki-client on console-fra.rpki-client.org