Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Oe6xAyvJeuxmFW_vCLtSbY1CbW8.roa
File:                     Oe6xAyvJeuxmFW_vCLtSbY1CbW8.roa (raw, json)
Hash identifier:          tSgwyyojkPJxqN8Tc4DbPbqTJJSvmaPuYqPFPmlhAPI=
Subject key identifier:   39:EE:B1:03:2B:C9:7A:EC:66:15:6F:EF:08:BB:52:6D:8D:42:6D:6F
Certificate issuer:       /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial:       0189EABBBCBA98D53360AEEBA132A54FD37C
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Oe6xAyvJeuxmFW_vCLtSbY1CbW8.roa
Signing time:             Sat 12 Aug 2023 17:11:59 +0000
ROA not before:           Sat 12 Aug 2023 17:11:59 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        5.180.49.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:ea:bb:bc:ba:98:d5:33:60:ae:eb:a1:32:a5:4f:d3:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
        Validity
            Not Before: Aug 12 17:11:59 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=39eeb1032bc97aec66156fef08bb526d8d426d6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b8:77:1d:ca:35:9e:03:82:86:05:f9:40:81:
                    d3:1d:5d:44:76:09:5f:51:28:0b:54:b6:27:23:6c:
                    f9:0c:a6:7e:53:0b:be:b9:38:8f:86:15:00:6d:72:
                    14:70:e5:d1:67:ea:89:cd:49:7d:14:80:ee:ef:9d:
                    64:9f:84:32:64:71:6a:4d:46:6d:5a:c0:28:09:29:
                    eb:aa:ff:ff:a6:cf:fb:fa:5d:f9:3c:30:9c:ff:93:
                    98:c0:6f:43:26:a5:46:6c:ef:18:dc:c6:f7:5b:79:
                    a7:65:e3:7f:56:83:b9:4b:b7:fd:18:45:78:71:c1:
                    b7:8c:f4:5b:ef:b9:9d:5f:76:ba:bd:eb:cd:ce:d5:
                    30:34:73:d7:6b:17:4d:f0:89:b8:30:0c:a8:2a:42:
                    7f:36:2e:d4:1f:6d:ef:ae:31:a4:1d:a1:f3:79:11:
                    cd:b0:c7:2d:4d:2a:f3:76:b6:aa:34:fe:09:8d:4a:
                    c7:7b:65:27:8a:aa:b8:f5:e5:d1:b4:0c:6a:3c:7f:
                    60:1e:40:19:54:cd:6d:f2:32:e4:31:a4:e4:dd:c8:
                    7b:e9:d8:1e:cc:0c:0e:08:1e:c4:08:e6:13:08:e6:
                    1c:dc:3a:69:0e:45:6d:5a:74:a2:73:63:96:45:d6:
                    ce:cb:b8:d4:4c:09:0b:ee:8a:19:38:0e:61:02:b3:
                    8a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:EE:B1:03:2B:C9:7A:EC:66:15:6F:EF:08:BB:52:6D:8D:42:6D:6F
            X509v3 Authority Key Identifier:
                keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Oe6xAyvJeuxmFW_vCLtSbY1CbW8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.180.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:56:72:b8:82:ca:12:49:78:85:5d:26:a1:09:31:0d:e4:fe:
         ba:1b:c3:3e:52:b3:52:e1:09:b1:cf:81:05:3c:a8:08:2b:06:
         54:63:37:3f:4c:7e:84:55:da:e9:af:e1:d4:ca:3a:71:aa:47:
         93:c7:bd:3a:45:7d:37:05:fb:02:42:e4:b4:4e:b1:bd:cc:ac:
         5b:d8:c8:54:26:ca:76:cd:64:fd:89:97:8d:59:8d:24:e2:98:
         ec:bb:ea:30:b5:32:2d:53:f1:b5:12:fb:9c:1e:37:c8:17:17:
         2c:9f:2a:34:6a:14:05:5c:97:d0:10:38:02:d9:35:ff:a2:a6:
         a1:b2:c4:d6:e9:a1:89:f4:20:9e:63:08:87:55:49:c3:ea:15:
         a2:19:7a:48:d1:ec:3b:2c:24:37:08:16:43:d4:c6:b7:1f:d1:
         08:ef:fe:d0:b8:3e:6f:3d:c5:aa:5b:f5:b1:98:9e:88:56:35:
         88:a4:f6:7e:09:d2:a6:77:a5:16:5f:67:62:8f:5c:2f:43:61:
         f1:22:69:55:32:a7:aa:b3:ba:0b:be:fe:db:c5:6a:1b:7b:8e:
         45:07:49:02:a8:d6:eb:53:ea:92:02:77:c2:28:69:17:7e:36:
         5f:0f:b8:b2:52:b8:c5:e0:9d:4e:fb:dd:8a:6c:83:dd:99:b4:
         a2:16:be:5e
-----BEGIN CERTIFICATE-----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Generated at Sat Sep 2 19:22:10 2023 by rpki-client on console-ams.rpki-client.org