Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/enh-yUyrFKhhLJCTMm28mDqfv-M.roa
File:                     enh-yUyrFKhhLJCTMm28mDqfv-M.roa (raw, json)
Hash identifier:          eredylyK4XSIxHfL6JFivIh4jsUo+WCfk9S1vdLTUvs=
Subject key identifier:   7A:78:7E:C9:4C:AB:14:A8:61:2C:90:93:32:6D:BC:98:3A:9F:BF:E3
Certificate issuer:       /CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
Certificate serial:       0187A867B47F7D5AD7E15E34C40CF5C887A5
Authority key identifier: 76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/enh-yUyrFKhhLJCTMm28mDqfv-M.roa
Signing time:             Sat 22 Apr 2023 09:59:41 +0000
ROA not before:           Sat 22 Apr 2023 09:59:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200482
IP address blocks:        46.162.21.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:a8:67:b4:7f:7d:5a:d7:e1:5e:34:c4:0c:f5:c8:87:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642fd3f336ce6ee99e61fa977049a6c6a923e4a
        Validity
            Not Before: Apr 22 09:59:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7a787ec94cab14a8612c9093326dbc983a9fbfe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:56:f7:6c:03:5c:7e:51:d7:71:f6:12:41:11:
                    a4:d6:38:07:98:58:40:80:5d:1f:dd:ea:9c:f9:f1:
                    12:32:6c:51:d2:14:72:67:a4:99:1a:4b:a3:d7:73:
                    d4:63:99:4f:48:32:b7:71:d4:3d:1e:2b:cd:c1:86:
                    12:3a:a1:c0:57:e0:90:49:34:58:ba:51:16:39:5d:
                    81:b7:fe:95:89:72:fb:f4:2f:f4:59:cc:98:7f:0f:
                    e5:e1:48:1d:8e:b1:ed:a4:21:05:b3:cd:11:cd:6c:
                    f8:da:6b:bd:b1:90:62:3f:10:ca:ca:dc:46:99:65:
                    c4:c8:f5:5a:dc:cd:0a:7f:e4:ad:ad:a4:b2:88:2c:
                    0d:d3:6e:55:69:27:35:fe:20:98:53:39:56:ef:3a:
                    00:bf:59:72:26:f9:e1:7e:03:4a:8d:d0:4f:e7:eb:
                    42:2e:0c:65:34:80:d4:7f:49:4d:88:ca:dc:6f:77:
                    44:64:4d:69:fc:07:fa:0f:22:fa:f5:dc:a4:a1:de:
                    89:35:23:84:b0:2d:c9:69:d0:1c:4d:8b:d5:8a:31:
                    79:26:e1:86:bd:22:bb:48:70:35:ee:e2:67:47:cc:
                    76:e3:de:98:40:5a:76:5a:91:2f:aa:d1:be:b3:05:
                    35:6e:ba:9b:04:c7:d4:00:a0:7e:35:a6:21:8d:85:
                    e0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:78:7E:C9:4C:AB:14:A8:61:2C:90:93:32:6D:BC:98:3A:9F:BF:E3
            X509v3 Authority Key Identifier:
                keyid:76:42:FD:3F:33:6C:E6:EE:99:E6:1F:A9:77:04:9A:6C:6A:92:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkL9PzNs5u6Z5h-pdwSabGqSPko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/enh-yUyrFKhhLJCTMm28mDqfv-M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/924546-d9c7-4a0d-ae00-62c43ac7c02f/1/dkL9PzNs5u6Z5h-pdwSabGqSPko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.162.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:92:69:23:48:d3:69:56:bf:70:cc:2d:2d:56:df:e8:36:22:
         dd:6b:02:06:ba:35:5d:27:95:73:8f:17:6b:86:0d:3b:2f:df:
         05:7c:18:5e:5f:f7:08:5c:50:e6:5d:ea:59:95:1e:91:73:46:
         81:c8:d3:f2:00:fa:e8:b0:20:7a:bb:6b:1f:8c:e7:18:1d:dc:
         e4:97:66:2f:55:1c:b6:8e:3c:0c:52:22:9b:99:8c:ff:7d:98:
         4f:1e:ac:21:aa:4f:ce:61:d1:c7:60:d2:bd:20:0c:d0:b3:7f:
         75:df:b5:6a:5c:c5:b0:e0:2d:b0:48:6f:81:3b:3b:c5:dc:df:
         92:40:a6:f7:4d:fd:fd:78:2b:0c:3f:75:67:db:4d:cf:1a:a3:
         93:d7:a2:f8:b0:c2:c4:12:26:4c:aa:aa:c9:87:fc:d7:36:9e:
         74:90:c2:b6:d6:8a:c5:85:27:bd:f6:9f:52:f7:ec:ba:0e:84:
         96:b7:c9:ce:7d:87:8c:11:39:39:1b:78:00:e9:b8:ba:20:32:
         94:d6:69:fb:7a:9f:30:ef:0e:c4:92:4d:9d:eb:d0:7d:d9:da:
         82:c4:90:33:4c:06:c6:98:a1:88:1a:8b:38:a5:98:31:23:19:
         39:9e:c2:55:c6:92:83:e3:00:3f:cc:53:98:55:ad:c6:cf:fc:
         b4:d5:47:5a
-----BEGIN CERTIFICATE-----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Generated at Sun Aug 20 18:05:06 2023 by rpki-client on console-fra.rpki-client.org