Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1-iMA183mwFnaf_qnt9MpHs6M_No.roa
File:                     1-iMA183mwFnaf_qnt9MpHs6M_No.roa (raw, json)
Hash identifier:          ZwT1TrFrPGKsPeOnF2PVqx+/1t5U4aBQD2LBLRejW3M=
Subject key identifier:   FA:23:00:D7:CD:E6:C0:59:DA:7F:FA:A7:B7:D3:29:1E:CE:8C:FC:DA
Certificate issuer:       /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial:       018878891D7B364FDD4443245E39EA93C0D9
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1-iMA183mwFnaf_qnt9MpHs6M_No.roa
Signing time:             Thu 01 Jun 2023 19:57:11 +0000
ROA not before:           Thu 01 Jun 2023 19:57:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     398465
IP address blocks:        5.180.82.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:78:89:1d:7b:36:4f:dd:44:43:24:5e:39:ea:93:c0:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
        Validity
            Not Before: Jun  1 19:57:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=fa2300d7cde6c059da7ffaa7b7d3291ece8cfcda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:10:4e:36:f2:7b:f8:33:69:e6:78:38:ff:f7:
                    1a:9d:d1:e9:e8:45:99:58:e1:bf:73:09:da:e2:ee:
                    55:90:64:3d:bd:a0:d6:48:87:e8:0f:08:91:5f:d1:
                    09:72:26:83:02:c3:ce:1c:7c:2e:0f:26:5a:e2:e1:
                    e8:ea:c4:90:dd:31:0e:1f:61:31:01:3f:66:3e:c7:
                    fa:04:1f:61:27:17:d8:5f:02:1f:68:8f:20:73:5d:
                    8e:14:13:eb:29:65:b3:9e:47:ee:de:44:17:ea:34:
                    f2:f9:46:ce:6c:b0:c0:f4:4f:cb:84:be:d7:90:e6:
                    71:11:35:f7:75:9e:39:eb:1c:a5:98:f8:9c:28:b4:
                    fa:69:d3:c7:7e:53:f2:c8:44:40:cf:97:16:f6:54:
                    ce:88:b4:b6:ae:2b:fe:5b:74:ce:63:75:f5:cb:36:
                    a5:49:d9:2d:13:76:f8:43:d0:e8:ca:bc:bd:97:23:
                    3d:47:66:df:93:2c:a1:c3:be:dc:0a:e6:3e:30:3a:
                    1c:ab:21:e6:ce:b2:d5:b7:f7:fa:e0:20:12:f8:c5:
                    84:2d:e0:f8:2f:3d:8d:ef:e1:59:22:2c:df:a7:0f:
                    1a:21:04:03:1b:1e:a7:dd:3b:ac:e8:bc:12:0d:55:
                    e6:96:5b:01:24:f4:03:0c:ab:50:13:02:58:54:55:
                    40:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:23:00:D7:CD:E6:C0:59:DA:7F:FA:A7:B7:D3:29:1E:CE:8C:FC:DA
            X509v3 Authority Key Identifier:
                keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/1-iMA183mwFnaf_qnt9MpHs6M_No.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:a0:af:91:f1:72:38:4c:60:c0:85:ef:41:6e:3d:8f:b9:7a:
         0b:93:51:af:f8:f2:fc:ed:db:7d:22:5f:6b:5c:70:4e:a9:04:
         33:c2:a6:8c:b7:bc:4e:1f:bf:ce:f5:06:34:b9:8d:b8:0a:fd:
         50:5a:d5:13:b8:f8:4c:a1:d4:10:bf:52:20:5d:35:b6:f7:c0:
         4b:55:92:07:25:87:bb:3e:28:83:c9:35:b2:85:f1:10:74:96:
         15:3d:4f:cf:83:7c:11:da:af:01:88:7d:be:c6:59:aa:69:16:
         64:5c:3a:c5:ae:26:11:81:88:3f:f0:9e:27:dc:6b:4f:ec:33:
         f0:b0:e7:75:51:5d:0f:a8:54:be:28:68:77:c0:4d:cb:88:b2:
         02:dc:c6:84:df:42:ec:22:b2:74:ae:7c:19:56:77:59:5f:71:
         af:5a:13:61:30:38:f6:80:ed:e4:8a:73:d4:b2:0f:0c:b8:27:
         ed:36:a3:ce:d1:9f:8b:ff:83:7e:80:46:88:ea:78:50:24:8f:
         e0:35:d7:62:0f:80:ef:9c:6a:8c:6c:c5:b2:1b:2c:06:6a:42:
         25:80:19:a5:b6:dd:76:88:a3:2a:44:ff:ad:cf:56:f4:76:ff:
         a9:63:97:8f:cc:dd:d1:6b:b0:dc:5e:3a:eb:5c:16:32:e5:39:
         5c:30:e4:ed
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYh4iR17Nk/dREMkXjnqk8DZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjMwNjAxMTk1NzExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTIzMDBkN2NkZTZjMDU5ZGE3ZmZhYTdiN2QzMjkxZWNlOGNmY2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghBONvJ7+DNp5ng4//candHp6EWZ
WOG/cwna4u5VkGQ9vaDWSIfoDwiRX9EJciaDAsPOHHwuDyZa4uHo6sSQ3TEOH2Ex
AT9mPsf6BB9hJxfYXwIfaI8gc12OFBPrKWWznkfu3kQX6jTy+UbObLDA9E/LhL7X
kOZxETX3dZ456xylmPicKLT6adPHflPyyERAz5cW9lTOiLS2riv+W3TOY3X1yzal
SdktE3b4Q9Doyry9lyM9R2bfkyyhw77cCuY+MDocqyHmzrLVt/f64CAS+MWELeD4
Lz2N7+FZIizfpw8aIQQDGx6n3Tus6LwSDVXmllsBJPQDDKtQEwJYVFVAkQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPojANfN5sBZ2n/6p7fTKR7OjPzaMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvMS1pTUExODNtd0ZuYWZfcW50OU1wSHM2TV9Oby5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYjIvNzA0MDcxLThkYzAtNGVkNi05NDU3LWU4NjEyMWM1OTRk
Zi8xL1l2MjJkbFRmWVlUbjFneEJVT3FWTThMUGx3US5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAW0UjAN
BgkqhkiG9w0BAQsFAAOCAQEAjqCvkfFyOExgwIXvQW49j7l6C5NRr/jy/O3bfSJf
a1xwTqkEM8KmjLe8Th+/zvUGNLmNuAr9UFrVE7j4TKHUEL9SIF01tvfAS1WSByWH
uz4og8k1soXxEHSWFT1Pz4N8EdqvAYh9vsZZqmkWZFw6xa4mEYGIP/CeJ9xrT+wz
8LDndVFdD6hUvihod8BNy4iyAtzGhN9C7CKydK58GVZ3WV9xr1oTYTA49oDt5Ipz
1LIPDLgn7TajztGfi/+DfoBGiOp4UCSP4DXXYg+A75xqjGzFshssBmpCJYAZpbbd
doijKkT/rc9W9Hb/qWOXj8zd0Wuw3F4661wWMuU5XDDk7Q==
-----END CERTIFICATE-----
Generated at Tue Aug 1 14:28:02 2023 by rpki-client on console-ams.rpki-client.org