Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/LAoUk8WbO1sDHH2AyLY0Nh1DqH4.roa
File:                     LAoUk8WbO1sDHH2AyLY0Nh1DqH4.roa (raw, json)
Hash identifier:          ARrRRtac1FGGf/mHRpfHtO+Af6FZiNK9oUfQo8LYBgo=
Subject key identifier:   2C:0A:14:93:C5:9B:3B:5B:03:1C:7D:80:C8:B6:34:36:1D:43:A8:7E
Certificate issuer:       /CN=e9e4dc968ed52935a04dee3b229c21ca9bfdbd7e
Certificate serial:       018602B9F968C1275C80516F08C1BF6F6044
Authority key identifier: E9:E4:DC:96:8E:D5:29:35:A0:4D:EE:3B:22:9C:21:CA:9B:FD:BD:7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/LAoUk8WbO1sDHH2AyLY0Nh1DqH4.roa
Signing time:             Mon 30 Jan 2023 12:49:47 +0000
ROA not before:           Mon 30 Jan 2023 12:49:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     52000
IP address blocks:        93.183.100.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:02:b9:f9:68:c1:27:5c:80:51:6f:08:c1:bf:6f:60:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9e4dc968ed52935a04dee3b229c21ca9bfdbd7e
        Validity
            Not Before: Jan 30 12:49:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=2c0a1493c59b3b5b031c7d80c8b634361d43a87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1f:da:16:0c:2e:a9:1f:5a:75:e6:ed:29:81:
                    90:23:72:ee:16:3c:8d:61:8e:4e:fe:ce:3e:53:fe:
                    9c:17:8d:74:ef:fe:69:07:cb:b1:fb:8c:32:c3:a1:
                    02:81:04:e5:a5:6c:82:e2:a3:ed:e4:fa:ee:67:ad:
                    05:51:17:2f:d9:13:86:9d:d8:fa:b1:5c:1b:87:74:
                    f8:e5:3e:8f:86:f2:80:3c:df:02:7e:e6:cb:61:87:
                    24:7f:db:0b:e7:76:eb:f5:4b:ea:9f:41:73:c0:9d:
                    5b:80:c7:a5:1d:b7:4f:44:06:40:6c:01:8a:0b:5e:
                    d6:15:0f:15:84:e9:fe:06:23:62:8f:ce:30:52:e2:
                    0f:b0:5d:a8:e1:b1:44:c7:10:07:fb:ef:8e:06:4a:
                    1a:cb:3c:e3:46:31:49:a7:90:1a:f6:56:0d:d3:83:
                    c0:84:c8:45:5c:97:a9:27:6f:c2:58:bd:2f:16:c1:
                    bc:77:84:11:f6:40:f9:a1:45:39:6a:ea:42:1a:df:
                    c4:11:45:42:5a:b7:e3:7b:cb:74:ca:5c:ec:8c:38:
                    3a:3f:ce:bf:9c:d3:92:42:49:bc:24:6c:e6:2b:d3:
                    45:17:8a:86:cf:a7:2e:a9:ab:06:6b:94:44:09:8b:
                    43:79:a9:4a:99:af:f0:33:5b:16:b6:57:ff:ce:18:
                    c8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:0A:14:93:C5:9B:3B:5B:03:1C:7D:80:C8:B6:34:36:1D:43:A8:7E
            X509v3 Authority Key Identifier:
                keyid:E9:E4:DC:96:8E:D5:29:35:A0:4D:EE:3B:22:9C:21:CA:9B:FD:BD:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/LAoUk8WbO1sDHH2AyLY0Nh1DqH4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.183.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2f:a5:71:4e:b0:76:d5:0d:63:92:a4:35:e2:9e:7d:9e:3a:e1:
         a2:25:7a:4f:58:88:4f:1f:03:8e:29:51:4f:f2:36:0b:f2:8d:
         03:70:df:46:75:b7:1d:fc:91:37:1b:c4:e3:c5:07:23:d8:48:
         0c:22:16:78:a2:fe:0f:96:ad:bc:be:a0:78:06:5f:98:4c:ff:
         82:b2:07:7f:d7:9b:1d:54:6f:f8:5e:cd:26:49:cd:b0:24:70:
         e3:04:39:a4:4b:83:bc:f6:a4:3c:67:f5:9f:96:79:77:db:ad:
         c1:87:96:24:73:4c:56:76:f9:43:c3:b1:c2:f8:11:0b:26:a9:
         a9:5b:10:b7:05:30:0a:74:c9:66:b5:92:40:66:fa:55:cb:a1:
         7a:67:e9:81:65:64:d0:53:49:1e:2b:f3:80:81:1d:50:99:a3:
         09:0f:71:cb:dd:ff:9f:76:63:d0:83:78:11:0f:f9:86:80:f1:
         dc:20:67:da:11:43:2f:35:dd:61:91:09:1f:97:45:b9:e6:5b:
         77:e0:14:0e:3a:8e:02:99:3d:44:99:31:30:27:40:5e:a8:a0:
         5d:e4:ee:ad:42:ac:21:5d:75:b4:10:8a:83:3e:f9:15:fd:b0:
         5b:50:de:43:9b:2a:51:34:9a:a0:13:e8:9d:30:e7:2e:64:59:
         68:87:28:0d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYYCuflowSdcgFFvCMG/b2BEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5ZTRkYzk2OGVkNTI5MzVhMDRkZWUzYjIyOWMyMWNhOWJm
ZGJkN2UwHhcNMjMwMTMwMTI0OTQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzBhMTQ5M2M1OWIzYjViMDMxYzdkODBjOGI2MzQzNjFkNDNhODdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx/aFgwuqR9adebtKYGQI3LuFjyN
YY5O/s4+U/6cF4107/5pB8ux+4wyw6ECgQTlpWyC4qPt5PruZ60FURcv2ROGndj6
sVwbh3T45T6PhvKAPN8CfubLYYckf9sL53br9Uvqn0FzwJ1bgMelHbdPRAZAbAGK
C17WFQ8VhOn+BiNij84wUuIPsF2o4bFExxAH+++OBkoayzzjRjFJp5Aa9lYN04PA
hMhFXJepJ2/CWL0vFsG8d4QR9kD5oUU5aupCGt/EEUVCWrfje8t0ylzsjDg6P86/
nNOSQkm8JGzmK9NFF4qGz6cuqasGa5RECYtDealKma/wM1sWtlf/zhjIfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCwKFJPFmztbAxx9gMi2NDYdQ6h+MB8GA1UdIwQY
MBaAFOnk3JaO1Sk1oE3uOyKcIcqb/b1+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmVUY2xvN1ZLVFdnVGU0N0lwd2h5cHY5dlg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8xYTEzNGYtMDMwYS00M2U3LWIwNDEt
NmM3ODU2ZWY3YjMxLzEvTEFvVWs4V2JPMXNESEgyQXlMWTBOaDFEcUg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8xYTEzNGYtMDMwYS00M2U3LWIwNDEtNmM3ODU2ZWY3YjMx
LzEvNmVUY2xvN1ZLVFdnVGU0N0lwd2h5cHY5dlg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXbdkMA0G
CSqGSIb3DQEBCwUAA4IBAQAvpXFOsHbVDWOSpDXinn2eOuGiJXpPWIhPHwOOKVFP
8jYL8o0DcN9Gdbcd/JE3G8TjxQcj2EgMIhZ4ov4Plq28vqB4Bl+YTP+Csgd/15sd
VG/4Xs0mSc2wJHDjBDmkS4O89qQ8Z/Wflnl3263Bh5Ykc0xWdvlDw7HC+BELJqmp
WxC3BTAKdMlmtZJAZvpVy6F6Z+mBZWTQU0keK/OAgR1QmaMJD3HL3f+fdmPQg3gR
D/mGgPHcIGfaEUMvNd1hkQkfl0W55lt34BQOOo4CmT1EmTEwJ0BeqKBd5O6tQqwh
XXW0EIqDPvkV/bBbUN5DmypRNJqgE+idMOcuZFlohygN
Generated at Mon Aug 21 15:25:15 2023 by rpki-client on console-fra.rpki-client.org