Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/daNKB8v0hqtJ9wAXwZGwsydCJE8.roa
File:                     daNKB8v0hqtJ9wAXwZGwsydCJE8.roa (raw, json)
Hash identifier:          VNHFmLUjtnw4PwrILVvH4aRtweVD7atDq9LJTCDB64U=
Subject key identifier:   75:A3:4A:07:CB:F4:86:AB:49:F7:00:17:C1:91:B0:B3:27:42:24:4F
Certificate issuer:       /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial:       018689F27AE45DAB5FBDB4CFD9BE6710F957
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/daNKB8v0hqtJ9wAXwZGwsydCJE8.roa
Signing time:             Sat 25 Feb 2023 19:00:14 +0000
ROA not before:           Sat 25 Feb 2023 19:00:14 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        80.246.231.0/24 maxlen: 24
                          80.246.229.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:89:f2:7a:e4:5d:ab:5f:bd:b4:cf:d9:be:67:10:f9:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
        Validity
            Not Before: Feb 25 19:00:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=75a34a07cbf486ab49f70017c191b0b32742244f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:18:eb:8c:4f:f9:01:81:a4:14:be:17:b1:6a:
                    e6:31:34:b2:56:19:00:d7:43:48:b9:72:f6:88:b6:
                    b8:51:b0:e0:1e:28:0f:68:28:79:da:48:f7:e2:2c:
                    66:45:14:b5:8e:cd:38:6d:2b:40:c8:93:3c:27:28:
                    02:e3:8f:71:16:c4:69:d8:77:e0:bc:92:98:87:e1:
                    d0:6a:0a:04:a4:f8:fb:4e:79:8e:db:bc:a1:92:b6:
                    6c:7a:ad:fe:88:d3:d8:16:41:14:fa:bb:ee:6e:94:
                    20:17:91:a3:73:47:7d:cf:91:ca:3b:2f:d5:b2:c1:
                    09:11:ca:ca:bd:d5:f6:7a:7a:08:9f:0c:14:21:18:
                    c8:90:04:75:e9:07:99:c7:25:1e:ce:b2:02:15:05:
                    38:5a:c3:06:c9:3a:f9:dc:e5:6e:f8:4e:f4:1b:3c:
                    b7:07:83:e4:f1:3b:49:fc:29:81:ea:3f:7b:cb:8b:
                    3d:d2:2f:b4:7c:3f:2a:46:55:cf:28:ad:c2:0d:e6:
                    62:30:5f:88:2c:bf:7a:d7:34:bf:0d:d5:51:49:6d:
                    9a:35:c7:db:3b:90:a3:9a:12:be:91:b9:be:ae:f4:
                    21:ce:21:87:5b:16:f7:ed:cf:35:f8:1c:a2:91:ab:
                    ee:ae:c4:64:5a:2c:47:af:70:93:bd:80:9f:c1:8d:
                    0f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:A3:4A:07:CB:F4:86:AB:49:F7:00:17:C1:91:B0:B3:27:42:24:4F
            X509v3 Authority Key Identifier:
                keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/daNKB8v0hqtJ9wAXwZGwsydCJE8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.246.229.0/24
                  80.246.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:33:d6:7f:78:a5:05:18:b2:d4:b9:23:fd:a6:51:a8:64:bf:
         d4:09:77:7f:f0:3e:1a:76:59:8e:71:5d:fc:69:49:75:da:66:
         30:19:de:10:f2:11:41:2e:37:84:61:b0:52:2e:de:b1:1c:cf:
         27:1a:93:e2:ce:98:17:43:23:58:97:cf:3e:b5:f9:50:6d:6a:
         42:9f:a1:32:25:f7:20:aa:83:50:b3:2c:26:2d:ab:66:41:3c:
         35:00:30:8d:7d:5f:8d:2f:00:5d:92:b1:8b:f0:38:63:70:13:
         89:b7:46:96:67:b2:72:7e:2b:3c:aa:14:6e:e4:63:b0:31:0a:
         97:87:d8:c9:0d:e2:14:6b:f0:2b:c2:9d:e8:0f:01:f3:70:94:
         2e:9b:69:6c:2e:c0:f1:7f:37:76:c1:4f:93:5f:8c:b1:4e:22:
         f9:52:a0:d5:92:38:bb:07:49:f1:f6:37:cc:75:b6:b9:0d:53:
         f5:d1:b2:69:40:d5:7f:1b:f3:6a:07:c9:82:ab:a0:88:9f:d5:
         cb:2e:47:44:b9:21:fa:82:c1:a1:48:34:72:c1:26:9c:93:a8:
         fa:10:3e:54:58:62:4d:7e:f5:4f:23:a8:15:44:7d:5a:37:76:
         cf:6a:5d:06:59:3d:9d:ad:54:50:60:b7:26:6f:49:cb:8f:20:
         7d:35:69:42
-----BEGIN CERTIFICATE-----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Generated at Mon Sep 25 06:08:34 2023 by rpki-client on console-fra.rpki-client.org