Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/t5Epm7rHmZR-Ss3s2r5XHsc7VBg.roa
File:                     t5Epm7rHmZR-Ss3s2r5XHsc7VBg.roa (raw, json)
Hash identifier:          LciQoPCVemqC8ifMkvWKyrEyIe2y03/GWwbWAOmmEeM=
Subject key identifier:   B7:91:29:9B:BA:C7:99:94:7E:4A:CD:EC:DA:BE:57:1E:C7:3B:54:18
Certificate issuer:       /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial:       0187830FC6DE8EAD8C489E7D8C439288C409
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/t5Epm7rHmZR-Ss3s2r5XHsc7VBg.roa
Signing time:             Sat 15 Apr 2023 03:57:41 +0000
ROA not before:           Sat 15 Apr 2023 03:57:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207633
IP address blocks:        185.110.63.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:83:0f:c6:de:8e:ad:8c:48:9e:7d:8c:43:92:88:c4:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
        Validity
            Not Before: Apr 15 03:57:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b791299bbac799947e4acdecdabe571ec73b5418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2e:1e:36:0c:7a:73:41:2b:ab:82:f8:3d:26:
                    6e:ab:6d:d1:ef:cd:48:f9:e3:b1:bc:2e:0b:10:a4:
                    f9:68:52:e5:0d:a7:63:88:47:44:8d:89:00:63:27:
                    52:bf:f6:a4:49:24:27:85:77:ba:2c:c2:9b:2b:29:
                    3d:34:10:b3:68:c3:01:ed:1b:7a:46:ec:7b:ab:2c:
                    7f:a5:a3:7f:94:66:70:2c:93:af:f6:ff:c8:df:e8:
                    bf:a9:46:37:0f:a1:87:2c:6a:8b:03:f6:5e:87:c2:
                    d8:3d:b2:d5:a7:48:64:bb:48:b1:1a:2b:93:ec:9d:
                    75:ef:29:15:50:07:92:ba:45:36:db:c1:97:14:a1:
                    47:c3:8e:c9:6c:e4:30:5d:74:7d:cd:64:24:97:8b:
                    79:5c:23:e9:1f:b4:92:88:27:45:03:bc:2d:a8:ca:
                    91:6d:b3:ad:9e:0d:88:f2:85:07:cb:ab:3b:d8:d1:
                    d8:93:37:85:7c:a0:fa:5d:37:53:4e:1b:55:23:8f:
                    d7:8d:e0:16:36:ff:64:d9:ed:d4:00:02:73:ee:07:
                    92:ea:b9:81:bd:03:83:fd:a9:54:01:11:1f:77:2e:
                    f7:44:28:15:b2:a4:d8:b1:5b:af:bd:8e:26:88:32:
                    a0:79:fd:71:04:0a:4f:1c:a9:de:00:4e:43:47:a2:
                    6a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:91:29:9B:BA:C7:99:94:7E:4A:CD:EC:DA:BE:57:1E:C7:3B:54:18
            X509v3 Authority Key Identifier:
                keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/t5Epm7rHmZR-Ss3s2r5XHsc7VBg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.110.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:73:55:7c:02:7c:3c:4b:4a:ad:52:91:0f:86:e1:c2:3e:2d:
         ba:b1:6f:df:37:13:30:38:99:da:28:a8:29:e7:7c:a8:d6:4f:
         30:02:f0:6c:e9:40:70:38:5d:88:21:85:42:da:96:0c:ed:a3:
         25:b9:f1:35:22:76:59:f3:46:81:c6:b2:0e:3d:b9:e6:66:83:
         e8:14:cf:9f:a3:2b:5e:b6:fd:09:ca:25:ea:12:0c:76:88:c0:
         a4:d7:88:9c:1f:d5:30:5e:ca:53:57:03:9d:d9:c4:29:57:c7:
         75:4a:4d:b2:9f:f6:d8:92:c8:ec:15:39:04:ab:e3:d5:91:6c:
         cb:3c:97:e8:3c:48:b1:eb:4e:90:6a:56:d6:50:34:12:10:0b:
         4a:13:55:67:0f:d1:00:41:c2:da:4b:e4:ae:5f:8c:3c:d4:45:
         fb:77:8b:38:77:c6:e2:4b:d5:cf:92:9b:a5:9e:ab:79:6b:57:
         a3:86:5d:cf:d3:40:66:ca:0a:07:02:1a:f9:5e:92:26:3c:be:
         14:f6:a9:e6:e8:9a:51:ec:0f:3e:0d:bc:5e:a0:92:1e:fc:f4:
         b0:12:99:de:f8:a8:04:c1:49:81:9c:15:83:1d:68:e7:74:8c:
         79:aa:f4:ec:e9:60:bd:33:c8:29:ea:3d:58:90:4a:bc:af:fa:
         da:fa:7b:b0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYeDD8bejq2MSJ59jEOSiMQJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGViMjA0ZjM1ODAwNDc4ODIyNGUyZmIxOGU0ZDVlNzRi
ZWJmOGQwHhcNMjMwNDE1MDM1NzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzkxMjk5YmJhYzc5OTk0N2U0YWNkZWNkYWJlNTcxZWM3M2I1NDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjS4eNgx6c0Erq4L4PSZuq23R781I
+eOxvC4LEKT5aFLlDadjiEdEjYkAYydSv/akSSQnhXe6LMKbKyk9NBCzaMMB7Rt6
Rux7qyx/paN/lGZwLJOv9v/I3+i/qUY3D6GHLGqLA/Zeh8LYPbLVp0hku0ixGiuT
7J117ykVUAeSukU228GXFKFHw47JbOQwXXR9zWQkl4t5XCPpH7SSiCdFA7wtqMqR
bbOtng2I8oUHy6s72NHYkzeFfKD6XTdTThtVI4/XjeAWNv9k2e3UAAJz7geS6rmB
vQOD/alUAREfdy73RCgVsqTYsVuvvY4miDKgef1xBApPHKneAE5DR6JqQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLeRKZu6x5mUfkrN7Nq+Vx7HO1QYMB8GA1UdIwQY
MBaAFPBOsgTzWABHiCJOL7GOTV50vr+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMt
NWM1ODkyYWZhNDg3LzEvdDVFcG03ckhtWlItU3MzczJyNVhIc2M3VkJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMtNWM1ODkyYWZhNDg3
LzEvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuW4/MA0G
CSqGSIb3DQEBCwUAA4IBAQANc1V8Anw8S0qtUpEPhuHCPi26sW/fNxMwOJnaKKgp
53yo1k8wAvBs6UBwOF2IIYVC2pYM7aMlufE1InZZ80aBxrIOPbnmZoPoFM+foyte
tv0JyiXqEgx2iMCk14icH9UwXspTVwOd2cQpV8d1Sk2yn/bYksjsFTkEq+PVkWzL
PJfoPEix606QalbWUDQSEAtKE1VnD9EAQcLaS+SuX4w81EX7d4s4d8biS9XPkpul
nqt5a1ejhl3P00BmygoHAhr5XpImPL4U9qnm6JpR7A8+DbxeoJIe/PSwEpne+KgE
wUmBnBWDHWjndIx5qvTs6WC9M8gp6j1YkEq8r/ra+nuw
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:38 2023 by rpki-client on console-fra.rpki-client.org