Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/q5Mg7qNF-KgP4lm8_FN4AdmIMYM.roa
File:                     q5Mg7qNF-KgP4lm8_FN4AdmIMYM.roa (raw, json)
Hash identifier:          iqtIB/IAE9rHWEgQBQSYdT1Xee3cAk9bI0J5YBvmIyg=
Subject key identifier:   AB:93:20:EE:A3:45:F8:A8:0F:E2:59:BC:FC:53:78:01:D9:88:31:83
Certificate issuer:       /CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Certificate serial:       01856E5D61746C1923E0EC4E83CA90234B43
Authority key identifier: 55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/q5Mg7qNF-KgP4lm8_FN4AdmIMYM.roa
Signing time:             Sun 01 Jan 2023 17:24:51 +0000
ROA not before:           Sun 01 Jan 2023 17:24:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     0
IP address blocks:        185.112.44.0/22 maxlen: 32

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:5d:61:74:6c:19:23:e0:ec:4e:83:ca:90:23:4b:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
        Validity
            Not Before: Jan  1 17:24:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ab9320eea345f8a80fe259bcfc537801d9883183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a6:cf:e6:af:1b:cc:de:e3:c6:ed:8e:8c:e8:
                    e3:58:16:2f:43:9d:8f:d4:f0:28:f8:dd:37:bc:fc:
                    f6:21:68:bd:93:fd:1a:e1:58:51:93:4f:48:91:1d:
                    b6:bd:b1:7c:75:8e:ef:d2:d4:f3:ba:46:26:76:91:
                    f4:8c:37:60:fc:4d:ba:3a:bb:9c:38:58:2e:a6:3f:
                    94:8a:36:c3:5f:b5:4b:cd:7c:f7:0b:88:d3:14:ba:
                    c2:9d:a0:6c:b6:46:c0:dc:1b:6a:2a:9f:bf:14:ed:
                    ee:96:3f:09:2e:65:25:79:b0:86:1f:69:dd:c0:7a:
                    9b:ee:4b:49:19:81:f3:78:42:cd:26:c4:08:ac:7b:
                    58:c5:6a:c8:31:c0:a8:e4:73:fe:e5:af:fd:dd:51:
                    9f:9b:e3:8c:2e:db:2e:70:dd:f2:13:5e:0a:61:f9:
                    97:c2:6d:2b:a1:73:2c:17:5f:31:26:6f:3b:1e:eb:
                    d1:25:ce:2f:3e:46:32:a7:45:bf:15:eb:5d:fd:9c:
                    e2:d0:83:9b:8d:02:4e:21:08:08:4b:f5:f2:48:11:
                    cb:35:c0:46:62:eb:86:6e:6f:39:de:70:3d:59:47:
                    31:24:d1:5f:99:76:fc:25:70:07:f9:ec:04:38:c7:
                    80:34:38:21:d4:d9:d0:84:c6:2d:9e:67:0a:aa:2e:
                    4c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:93:20:EE:A3:45:F8:A8:0F:E2:59:BC:FC:53:78:01:D9:88:31:83
            X509v3 Authority Key Identifier:
                keyid:55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/q5Mg7qNF-KgP4lm8_FN4AdmIMYM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.112.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:f4:19:b3:99:5e:b6:88:48:d2:f7:10:d1:c4:ca:58:01:83:
         6f:a9:de:f0:31:25:40:da:63:53:aa:96:f9:76:41:6d:d2:83:
         75:c5:b7:4d:ca:e3:8e:1c:81:a0:13:07:9d:c1:48:58:16:fa:
         14:2d:6c:ab:bb:1a:b8:12:cb:3b:ec:13:1d:1f:5f:22:5f:ec:
         42:1c:a0:1a:e3:cc:73:13:7d:8f:e4:5e:63:86:ce:81:20:a5:
         a7:2f:75:84:56:81:ed:30:54:91:40:f1:8d:07:97:90:ab:24:
         e3:0f:83:19:8a:e3:ab:3b:a3:96:d4:38:81:11:74:41:57:51:
         60:6e:43:56:bc:4e:12:8f:03:f4:de:29:72:ad:ab:e3:c7:4b:
         6d:c6:4e:6f:fb:1a:a5:cf:1c:b2:ee:e6:4e:4c:0d:57:35:49:
         f5:8a:7b:0c:5d:0b:a0:3c:76:42:2b:01:20:92:d7:b2:c8:4a:
         bc:81:90:06:c6:ee:4f:2a:65:58:53:07:12:c5:e0:23:7c:ff:
         45:8d:06:4e:e5:65:06:0e:88:9d:7c:63:5b:6c:e2:4b:30:21:
         64:ea:34:f7:ab:19:12:52:91:1b:00:a5:06:6a:4f:d9:fc:10:
         21:e7:67:8c:a9:81:00:00:18:32:ba:14:7a:a5:ce:bb:fd:d4:
         9a:c1:ad:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:55 2023 by rpki-client on console-fra.rpki-client.org