Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/YuQdJOqXGCmBkLLm9f-Fn3ICC1g.roa
File:                     YuQdJOqXGCmBkLLm9f-Fn3ICC1g.roa (raw, json)
Hash identifier:          l6F7s7q05cwl92N6eOWv9RrqSq2lUyDZXpl+DtvoBwI=
Subject key identifier:   62:E4:1D:24:EA:97:18:29:81:90:B2:E6:F5:FF:85:9F:72:02:0B:58
Certificate issuer:       /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial:       018A87995F1D27B9F7D985524F419C2BF019
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/YuQdJOqXGCmBkLLm9f-Fn3ICC1g.roa
Signing time:             Tue 12 Sep 2023 04:14:50 +0000
ROA not before:           Tue 12 Sep 2023 04:14:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        185.220.146.0/23 maxlen: 24
                          91.237.119.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:87:99:5f:1d:27:b9:f7:d9:85:52:4f:41:9c:2b:f0:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
        Validity
            Not Before: Sep 12 04:14:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=62e41d24ea9718298190b2e6f5ff859f72020b58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:98:c0:be:90:31:24:78:1b:98:12:53:1f:0e:
                    60:9b:14:4a:d6:3e:6f:03:71:de:d1:9a:ee:31:71:
                    e3:0a:f6:eb:a1:52:55:97:35:97:c3:17:09:e3:8f:
                    d1:67:ed:2e:99:ba:3f:21:af:1d:42:b5:06:7b:e5:
                    59:e4:1c:8c:42:ac:aa:83:ad:90:e6:d2:f6:55:45:
                    d6:04:66:19:df:f2:e4:a3:92:92:34:b2:4e:d0:b1:
                    5c:fe:c4:7e:73:e2:e3:6e:da:53:3d:b2:87:ba:7b:
                    10:68:95:2a:d5:72:50:52:a1:32:c9:e1:ab:fa:8b:
                    1d:40:75:8d:98:ba:0b:31:4d:ed:68:23:b2:09:f4:
                    8c:b4:3d:34:10:5d:29:fc:80:ba:c1:50:b8:74:48:
                    40:d1:32:c6:99:83:5c:7a:e2:26:49:4e:da:a1:8a:
                    84:8d:2c:f0:a0:42:32:0e:e7:93:07:07:b9:66:57:
                    25:f6:23:d4:77:6c:b2:bf:dc:09:87:ad:78:84:3f:
                    52:f1:01:01:87:8a:28:6e:16:2d:b3:3d:2b:fa:56:
                    3c:e6:bf:80:83:9c:5d:df:97:ee:35:88:56:37:07:
                    a6:ec:01:9a:7d:4f:53:20:21:63:69:cb:66:1f:50:
                    6c:2f:30:9a:f6:08:38:d9:2d:4c:04:3e:2e:c1:4f:
                    f9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E4:1D:24:EA:97:18:29:81:90:B2:E6:F5:FF:85:9F:72:02:0B:58
            X509v3 Authority Key Identifier:
                keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/YuQdJOqXGCmBkLLm9f-Fn3ICC1g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.237.119.0/24
                  185.220.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d3:16:20:a0:0b:f6:ed:1d:65:55:75:2b:e9:14:26:c2:49:19:
         ea:2c:e9:a3:9c:e7:04:62:3b:3f:4d:ed:b4:11:77:ef:de:a2:
         34:bf:e1:10:a1:ac:14:62:8e:bc:d1:64:78:f5:f4:0a:c0:b3:
         ed:5b:98:3c:3a:02:ec:2e:bc:24:7a:a8:ff:cf:28:65:af:92:
         85:2f:f5:ca:94:c3:28:67:23:fa:ab:06:0c:d6:36:ce:f0:99:
         82:6d:15:78:1c:19:48:0a:2c:98:02:6d:07:12:48:0f:c3:cd:
         15:e6:3a:ef:30:b1:86:fb:86:10:b7:33:ee:5e:80:b1:12:25:
         5f:b4:36:52:2a:88:6c:02:50:ae:24:e9:69:d3:c3:3e:ed:34:
         25:ab:d5:77:29:e5:e3:cb:a2:35:6a:09:42:9a:7b:50:8d:7a:
         8c:dc:3d:6a:a0:91:24:41:45:83:71:e3:2a:f5:ab:f8:d7:52:
         82:19:4d:76:fb:18:23:0a:3b:b4:15:dc:cd:96:0d:f9:72:e6:
         75:69:8d:62:4d:a4:b9:76:71:66:dd:98:ec:fc:d7:49:5f:d8:
         2d:c3:fb:76:22:7d:89:49:91:44:d9:84:b3:07:bc:73:b2:2d:
         0f:5e:65:05:90:66:09:26:d7:83:22:c1:4c:53:9f:05:31:3c:
         d9:2b:d4:d6
-----BEGIN CERTIFICATE-----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Generated at Wed Sep 13 04:12:05 2023 by rpki-client on console-fra.rpki-client.org