Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/gSLs62mPG6KbTp1F0vns_eWFe_k.roa
File:                     gSLs62mPG6KbTp1F0vns_eWFe_k.roa (raw, json)
Hash identifier:          fqfRq4VakdaFrSAw1FPXIDDH2xsFcTpg8sueCDqda7o=
Subject key identifier:   81:22:EC:EB:69:8F:1B:A2:9B:4E:9D:45:D2:F9:EC:FD:E5:85:7B:F9
Certificate issuer:       /CN=f589823ba14758007cde873af4bf47fd9c39737b
Certificate serial:       01857169A64DF43DAC17E077A51C9948804B
Authority key identifier: F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/gSLs62mPG6KbTp1F0vns_eWFe_k.roa
Signing time:             Mon 02 Jan 2023 07:37:07 +0000
ROA not before:           Mon 02 Jan 2023 07:37:07 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6782
IP address blocks:        195.196.30.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:69:a6:4d:f4:3d:ac:17:e0:77:a5:1c:99:48:80:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f589823ba14758007cde873af4bf47fd9c39737b
        Validity
            Not Before: Jan  2 07:37:07 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8122eceb698f1ba29b4e9d45d2f9ecfde5857bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a0:25:28:e1:26:0a:42:ac:92:52:64:df:28:
                    a9:75:bc:89:e0:b7:df:23:d2:20:f0:4f:3b:2b:f5:
                    c6:ce:ad:7b:54:43:27:09:b1:88:fb:38:a0:78:34:
                    ac:2d:ca:78:af:cd:fe:ee:ab:d7:cb:f7:10:e5:ab:
                    7f:0c:3d:23:b3:e4:23:99:18:fe:e8:18:2a:e4:d4:
                    ad:5e:25:91:96:93:96:3d:0b:1a:c6:ef:4d:70:ce:
                    f0:a8:51:4b:77:89:ea:37:24:ed:a4:47:ad:bf:18:
                    95:d4:09:bd:4b:fa:08:27:df:72:e5:4a:e6:e2:1e:
                    f7:9b:00:1b:81:9b:66:7e:8c:dc:2b:b6:99:70:d0:
                    d6:67:6e:6f:69:10:40:d5:96:69:11:aa:85:12:c8:
                    bb:6a:1a:c3:bb:e8:20:0d:64:75:0c:fe:1e:73:68:
                    6e:d9:50:5e:2c:fb:4b:10:c7:6e:fc:be:1e:8f:1d:
                    4c:19:99:0d:4b:49:25:e8:98:8b:70:65:e1:5e:9c:
                    28:c1:13:5c:cd:f1:b5:bd:f3:d6:80:4e:13:50:d6:
                    6d:66:d6:de:d2:e9:22:92:0c:d0:5d:a8:f2:e9:8b:
                    fc:1e:4f:b9:83:65:cf:6f:43:38:59:98:f5:8f:5b:
                    41:a1:28:7c:e1:58:7c:61:1a:2c:9e:88:01:07:09:
                    67:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:22:EC:EB:69:8F:1B:A2:9B:4E:9D:45:D2:F9:EC:FD:E5:85:7B:F9
            X509v3 Authority Key Identifier:
                keyid:F5:89:82:3B:A1:47:58:00:7C:DE:87:3A:F4:BF:47:FD:9C:39:73:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YmCO6FHWAB83oc69L9H_Zw5c3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/gSLs62mPG6KbTp1F0vns_eWFe_k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ae175a-1c00-4091-a061-9ba4ec31cb6b/1/9YmCO6FHWAB83oc69L9H_Zw5c3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.196.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:0c:cd:42:8d:5b:0a:f2:ab:6c:8c:4b:68:ea:ea:6d:c0:7a:
         f8:75:bb:7a:ce:8b:db:cd:6c:48:ca:7b:f7:07:80:21:a9:cc:
         bc:42:bc:df:24:4d:5f:90:5d:3d:72:b6:63:68:51:86:5a:34:
         6a:78:45:c2:d5:eb:dc:37:c9:f5:b7:0a:63:f4:6d:e7:cf:ef:
         f5:bd:ec:2b:b5:08:cf:0b:b5:d8:91:96:a6:2c:ba:95:99:4b:
         28:0c:d6:76:f4:54:79:f8:b7:9e:03:b0:c9:ab:79:0b:a1:c6:
         a9:4f:31:ad:69:af:31:2f:af:76:9e:73:38:c2:f4:49:ea:82:
         88:91:5b:83:50:b6:0d:71:f0:62:1c:99:09:9f:5d:3b:79:ce:
         0e:cc:c9:3f:54:14:20:5c:14:44:e5:9e:97:96:d5:0a:a9:70:
         bf:c1:01:c9:16:9c:34:53:cd:ab:ed:66:da:e0:8c:de:33:dc:
         e7:b8:49:57:9c:73:e8:9a:0c:39:fb:c1:bc:10:8a:53:6b:cf:
         a0:9c:91:12:1a:ee:9a:19:56:9c:50:bc:bb:f6:fd:dd:92:8a:
         6c:85:63:6d:68:eb:c3:cb:d6:96:53:ac:1b:94:03:3d:2f:54:
         1a:c6:8b:83:6c:93:1a:8c:ed:0b:05:7e:ad:6c:24:06:5a:5f:
         79:71:09:35
-----BEGIN CERTIFICATE-----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Generated at Sun Oct 29 04:11:05 2023 by rpki-client on console-ams.rpki-client.org