Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Ddbo_g9_gw5uJlLMnEX3KRl8j3U.roa
File:                     Ddbo_g9_gw5uJlLMnEX3KRl8j3U.roa (raw, json)
Hash identifier:          sSP0dOpuoNQ8Vr6+gSvoNNeKD9IsFBg/nWNIZ7O3kHo=
Subject key identifier:   0D:D6:E8:FE:0F:7F:83:0E:6E:26:52:CC:9C:45:F7:29:19:7C:8F:75
Certificate issuer:       /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial:       01891AA08EC00C34370AD3D9933BC1908D61
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Ddbo_g9_gw5uJlLMnEX3KRl8j3U.roa
Signing time:             Mon 03 Jul 2023 07:21:17 +0000
ROA not before:           Mon 03 Jul 2023 07:21:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35372
IP address blocks:        188.119.66.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:1a:a0:8e:c0:0c:34:37:0a:d3:d9:93:3b:c1:90:8d:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
        Validity
            Not Before: Jul  3 07:21:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0dd6e8fe0f7f830e6e2652cc9c45f729197c8f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c1:09:82:83:95:df:41:d2:79:46:d4:25:e2:
                    ea:cb:87:76:0a:73:e2:1b:cd:2e:14:e5:bb:b7:a0:
                    6a:07:ea:f8:c6:ec:b0:34:b5:14:cb:9e:38:d5:8f:
                    54:c8:65:4f:0f:27:44:5f:70:6f:73:59:92:dd:78:
                    9d:26:4b:00:7a:35:fa:84:51:93:2c:1e:de:50:c7:
                    0c:17:ce:96:02:05:9d:2e:81:79:47:b9:55:50:82:
                    55:7c:a4:eb:8b:58:6c:3a:9b:20:9b:58:26:a7:e3:
                    9f:4a:95:ce:e4:cc:02:04:89:88:31:32:db:a3:ef:
                    c4:66:e1:eb:92:4e:6d:08:07:8b:c7:a9:ff:0e:c0:
                    ec:49:70:30:59:0d:55:f0:6b:00:35:75:8f:de:f8:
                    bb:8f:16:75:d0:b8:fd:de:c3:6a:bf:a4:9e:59:5a:
                    79:5d:47:54:e9:d9:2d:f4:e1:59:bc:18:c4:8c:c0:
                    1a:fb:82:ac:b4:0a:d3:33:a3:81:b7:bb:ba:51:41:
                    fb:2a:16:eb:37:56:f9:d6:24:d1:a7:f0:c8:68:3b:
                    1a:02:b2:41:a0:84:85:40:23:0f:b8:1f:ea:f9:11:
                    2d:9d:03:c1:36:f6:a8:61:e7:4f:35:76:70:fb:9a:
                    81:38:4d:ed:7e:72:92:16:61:52:f1:01:0e:82:08:
                    f8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D6:E8:FE:0F:7F:83:0E:6E:26:52:CC:9C:45:F7:29:19:7C:8F:75
            X509v3 Authority Key Identifier:
                keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Ddbo_g9_gw5uJlLMnEX3KRl8j3U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.119.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:c9:86:04:75:de:1d:d5:8d:d6:8c:5a:cf:32:73:2d:71:49:
         bc:41:f3:ec:f1:a6:05:2c:5a:6b:80:2c:3a:48:6f:c3:78:e6:
         9e:00:7b:8b:2f:e3:65:64:4c:2e:9b:69:6f:19:3a:b0:23:6a:
         ba:3c:35:44:40:63:7e:4c:f4:f1:fb:2c:16:db:59:33:f8:ab:
         74:5f:07:80:92:1f:fe:63:9c:6d:0b:15:a1:74:11:8b:b7:d1:
         e1:c5:e8:3f:d3:a3:eb:9f:1d:a4:db:bc:80:98:e3:93:29:88:
         06:6a:2f:71:9e:16:51:0e:04:f8:35:65:69:67:69:e0:ad:61:
         f1:b1:75:a6:37:98:ef:fb:f3:6a:1a:37:ed:ef:a2:ba:02:3e:
         c2:72:11:c1:a3:c2:c6:5e:be:f2:08:92:cc:01:79:17:ab:55:
         3b:00:fd:53:3a:6b:a0:c6:62:c4:82:7e:14:ed:49:dd:04:34:
         4a:bf:7e:f6:67:31:df:a3:5d:de:55:e0:19:60:18:29:65:d3:
         b3:28:fa:5a:aa:d3:52:9b:ba:e9:72:5d:7e:a0:14:92:eb:a9:
         38:aa:40:a0:17:11:f0:b9:cf:f9:c1:d9:bb:91:0d:65:26:fd:
         a1:30:3e:2c:43:5c:f3:00:94:bf:f9:17:49:84:4b:46:02:1c:
         97:a4:47:e9
-----BEGIN CERTIFICATE-----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Generated at Fri Aug 4 22:58:18 2023 by rpki-client on console-fra.rpki-client.org