Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/XVkDGmz5pz89AphyPYVj3_ZFD3A.roa
File:                     XVkDGmz5pz89AphyPYVj3_ZFD3A.roa (raw, json)
Hash identifier:          ZAKuQULvjRz/q+8Mm3JxC+uTQvxJb+6yZeyniGhhZfg=
Subject key identifier:   5D:59:03:1A:6C:F9:A7:3F:3D:02:98:72:3D:85:63:DF:F6:45:0F:70
Certificate issuer:       /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial:       01857079856B40343586332B062A37000A7E
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/XVkDGmz5pz89AphyPYVj3_ZFD3A.roa
Signing time:             Mon 02 Jan 2023 03:14:50 +0000
ROA not before:           Mon 02 Jan 2023 03:14:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     64267
IP address blocks:        193.228.90.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:79:85:6b:40:34:35:86:33:2b:06:2a:37:00:0a:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
        Validity
            Not Before: Jan  2 03:14:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5d59031a6cf9a73f3d0298723d8563dff6450f70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a1:9b:41:91:d3:d3:38:6c:d0:29:52:d3:35:
                    e7:ad:53:24:52:54:33:1e:e7:7d:23:cb:ae:5f:04:
                    89:65:b1:9a:b1:43:1f:0f:c7:8b:b0:51:5b:81:85:
                    1f:43:5f:21:6d:89:a5:de:1d:23:74:1f:fc:dc:b2:
                    1a:90:73:f7:fb:20:31:1c:b2:4b:74:90:21:b1:3b:
                    00:56:07:f4:05:8f:4e:40:81:85:56:10:20:92:8c:
                    42:90:ed:34:7f:5d:22:95:ea:85:36:12:01:f0:ce:
                    86:d5:7b:6e:2f:2e:de:12:4e:ec:e3:3d:1c:b7:4f:
                    4b:1f:ef:8d:a2:e4:aa:34:f6:fa:78:79:06:3e:b9:
                    1c:04:9a:80:f4:1f:5e:4f:72:b9:2e:c1:29:ba:8a:
                    0e:f7:48:a3:eb:83:42:c0:65:d5:20:8b:b0:46:9e:
                    7f:cb:58:7f:d6:0e:a9:f8:7c:0d:f8:7c:6c:97:f3:
                    c3:9c:88:f0:91:1f:0d:99:17:91:fa:c8:a1:7e:de:
                    5d:38:f7:f8:eb:4d:67:2b:32:db:b8:23:4d:d8:88:
                    29:5d:82:51:11:6c:6e:f8:42:39:52:9c:0e:d3:39:
                    9e:11:08:3b:70:44:a4:12:e7:de:2e:cc:4c:ea:b4:
                    f9:31:47:9b:da:22:66:db:e6:2e:14:1e:f3:ba:2e:
                    56:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:59:03:1A:6C:F9:A7:3F:3D:02:98:72:3D:85:63:DF:F6:45:0F:70
            X509v3 Authority Key Identifier:
                keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/XVkDGmz5pz89AphyPYVj3_ZFD3A.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.228.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:0b:82:b9:2f:17:d4:29:4a:42:ea:78:df:a0:d9:8b:a9:44:
         66:30:a5:87:25:30:af:17:43:81:14:13:03:ec:22:b1:8a:4c:
         46:ad:f4:99:fd:6f:22:84:0f:5e:fb:ff:6e:ac:a1:14:85:21:
         c8:c3:91:a3:37:16:81:d6:79:ea:27:06:fb:64:d4:a2:09:c8:
         12:45:cb:eb:ae:f8:6b:8d:39:23:1b:f4:8c:9e:79:4b:9b:34:
         83:d5:29:81:06:6f:4d:38:66:e6:c8:16:86:da:78:68:ca:a7:
         c0:ab:22:7f:d5:ff:64:cb:53:18:ca:cb:42:15:95:7a:cd:8a:
         06:5b:f5:17:3a:bb:92:18:ae:2c:07:21:eb:05:47:ab:73:00:
         0b:f2:c9:0f:27:04:04:a3:10:b9:28:aa:54:1a:4c:f6:11:24:
         3f:1c:51:74:95:34:fb:c9:61:bd:78:65:f4:46:b4:86:a1:40:
         1e:de:9f:20:46:0e:e1:88:89:8e:7b:86:c5:bb:f8:2b:5f:6d:
         6e:91:ee:5d:37:25:1d:76:e9:69:5f:cf:05:06:56:31:9a:6a:
         7c:7c:b9:ce:8b:87:14:e7:22:54:91:25:6b:d4:35:df:86:d2:
         50:38:63:23:dc:c1:e8:e0:34:73:96:a9:a0:10:82:be:1b:2f:
         81:17:8e:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVweYVrQDQ1hjMrBio3AAp+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlZTA1M2NiOWNiNGY0MWMxZTQ3NzNlN2YxNmU4NGJiNTc1
MjIwMzMwHhcNMjMwMTAyMDMxNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDU5MDMxYTZjZjlhNzNmM2QwMjk4NzIzZDg1NjNkZmY2NDUwZjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKGbQZHT0zhs0ClS0zXnrVMkUlQz
Hud9I8uuXwSJZbGasUMfD8eLsFFbgYUfQ18hbYml3h0jdB/83LIakHP3+yAxHLJL
dJAhsTsAVgf0BY9OQIGFVhAgkoxCkO00f10ileqFNhIB8M6G1XtuLy7eEk7s4z0c
t09LH++NouSqNPb6eHkGPrkcBJqA9B9eT3K5LsEpuooO90ij64NCwGXVIIuwRp5/
y1h/1g6p+HwN+Hxsl/PDnIjwkR8NmReR+sihft5dOPf4601nKzLbuCNN2IgpXYJR
EWxu+EI5UpwO0zmeEQg7cESkEufeLsxM6rT5MUeb2iJm2+YuFB7zui5WTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF1ZAxps+ac/PQKYcj2FY9/2RQ9wMB8GA1UdIwQY
MBaAFH7gU8uctPQcHkdz5/FuhLtXUiAzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnVCVHk1eTA5QndlUjNQbjhXNkV1MWRTSURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wNjAwYTQtMTQ2NC00YTdjLWFmNTYt
MThlODZmMGIxZDgxLzEvWFZrREdtejVwejg5QXBoeVBZVmozX1pGRDNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8wNjAwYTQtMTQ2NC00YTdjLWFmNTYtMThlODZmMGIxZDgx
LzEvZnVCVHk1eTA5QndlUjNQbjhXNkV1MWRTSURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAweRaMA0G
CSqGSIb3DQEBCwUAA4IBAQCeC4K5LxfUKUpC6njfoNmLqURmMKWHJTCvF0OBFBMD
7CKxikxGrfSZ/W8ihA9e+/9urKEUhSHIw5GjNxaB1nnqJwb7ZNSiCcgSRcvrrvhr
jTkjG/SMnnlLmzSD1SmBBm9NOGbmyBaG2nhoyqfAqyJ/1f9ky1MYystCFZV6zYoG
W/UXOruSGK4sByHrBUercwAL8skPJwQEoxC5KKpUGkz2ESQ/HFF0lTT7yWG9eGX0
RrSGoUAe3p8gRg7hiImOe4bFu/grX21uke5dNyUddulpX88FBlYxmmp8fLnOi4cU
5yJUkSVr1DXfhtJQOGMj3MHo4DRzlqmgEIK+Gy+BF45L
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:26 2023 by rpki-client on console-ams.rpki-client.org