Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/IvR0EBksq7VbfEcbxoYAppjvTa0.roa
File:                     IvR0EBksq7VbfEcbxoYAppjvTa0.roa (raw, json)
Hash identifier:          I9yU8CSxGPSvDkefMnDATtiVIcdFgISTfRqTP3xvi9Q=
Subject key identifier:   22:F4:74:10:19:2C:AB:B5:5B:7C:47:1B:C6:86:00:A6:98:EF:4D:AD
Certificate issuer:       /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial:       0185707985199131833CACB5E4BBF14639A1
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/IvR0EBksq7VbfEcbxoYAppjvTa0.roa
Signing time:             Mon 02 Jan 2023 03:14:50 +0000
ROA not before:           Mon 02 Jan 2023 03:14:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     63023
IP address blocks:        193.228.169.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:79:85:19:91:31:83:3c:ac:b5:e4:bb:f1:46:39:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
        Validity
            Not Before: Jan  2 03:14:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=22f47410192cabb55b7c471bc68600a698ef4dad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d0:e7:93:73:22:ea:7e:75:37:27:94:c0:57:
                    18:74:96:dd:de:66:7e:a2:08:1d:03:bf:2d:01:62:
                    85:1c:42:c5:2e:cd:91:12:36:cc:1c:02:ee:41:c2:
                    e3:e3:f4:f2:41:09:46:a9:1c:ca:79:79:ad:44:57:
                    1e:a3:a5:98:c0:0c:07:e9:e5:bd:fa:e9:66:89:23:
                    cf:d2:98:d2:ff:a4:e5:f0:ae:4a:de:01:b8:3f:eb:
                    49:19:2a:59:63:d8:4b:ec:e0:bc:5b:0d:a2:ce:a4:
                    59:1c:08:c2:fc:9e:c5:f6:5b:e4:14:f7:22:03:bb:
                    7e:da:ac:91:56:09:fe:f0:d3:8d:37:2f:3a:e5:5d:
                    8b:2f:99:38:49:f8:a9:e2:9e:5e:d9:f9:75:28:f7:
                    a7:6c:3f:82:e2:8c:cc:c9:61:9b:0f:84:84:1f:d0:
                    4a:0e:4f:94:d2:92:65:8a:d1:5f:64:90:a5:e2:8b:
                    50:62:1f:05:03:55:d3:dd:38:7d:3a:38:30:0c:05:
                    69:9a:cc:5d:53:69:08:2f:6f:cb:1a:5b:49:4d:cd:
                    b1:35:7a:e2:2e:6b:e9:e2:fc:07:a6:89:06:4f:91:
                    80:e0:62:f3:e0:ce:67:50:fc:1e:1e:4a:9f:4c:50:
                    3c:83:b9:dd:aa:7c:97:71:c8:da:02:26:38:14:74:
                    76:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F4:74:10:19:2C:AB:B5:5B:7C:47:1B:C6:86:00:A6:98:EF:4D:AD
            X509v3 Authority Key Identifier:
                keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/IvR0EBksq7VbfEcbxoYAppjvTa0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.228.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:37:36:9d:67:9c:a2:d7:0b:91:76:ac:62:4f:fa:23:00:eb:
         22:b2:64:87:37:dd:2c:65:e9:41:25:5b:8f:47:1d:15:38:5a:
         da:11:b5:74:ea:2c:23:21:fe:0f:42:bf:3f:55:83:5c:82:ef:
         fb:75:09:71:14:ce:4e:16:a1:1c:e3:f9:22:1d:f2:40:fd:46:
         a1:51:1c:b1:99:ad:99:b2:ee:93:0e:5f:68:77:87:f6:47:bf:
         bf:a9:70:17:04:48:c3:62:1a:14:c0:65:39:97:44:6a:37:8d:
         99:c2:41:81:2e:85:b2:65:93:b8:c0:23:46:f2:5d:bc:3a:3e:
         e1:31:ca:ff:6e:55:31:5d:e4:87:87:8a:bb:55:67:f0:17:48:
         76:42:28:f3:f8:c4:c4:99:b0:b1:ee:56:c3:89:92:4b:ea:e8:
         e7:78:aa:0c:ce:20:48:f0:31:4d:76:2c:c9:01:8e:ed:9f:33:
         03:57:00:19:c9:65:37:06:89:55:c2:85:e0:09:8d:5a:dc:f1:
         19:71:f4:18:64:8b:46:b3:74:d3:1a:d7:b8:6b:0a:98:d6:73:
         fe:a2:93:ea:2e:ac:71:2e:6c:d2:08:29:78:1f:38:61:5b:3c:
         f6:1b:62:0a:56:1c:ac:64:74:de:68:d4:fa:12:f8:ac:36:11:
         18:9d:ed:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:26 2023 by rpki-client on console-ams.rpki-client.org