Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/acSesLuyyLJe1ePRiJwQKQ7FrII.roa
File:                     acSesLuyyLJe1ePRiJwQKQ7FrII.roa (raw, json)
Hash identifier:          3s66qJHRWvK+jcrWXzHZQ/AM/toO6pdgBT2tAzKK/80=
Subject key identifier:   69:C4:9E:B0:BB:B2:C8:B2:5E:D5:E3:D1:88:9C:10:29:0E:C5:AC:82
Certificate issuer:       /CN=db0ae651defb0666c22b2e5d7add5653487076af
Certificate serial:       0185738FC0C96DE49CCAB18C98F4E7EE5EFF
Authority key identifier: DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/acSesLuyyLJe1ePRiJwQKQ7FrII.roa
Signing time:             Mon 02 Jan 2023 17:37:58 +0000
ROA not before:           Mon 02 Jan 2023 17:37:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        193.105.212.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:8f:c0:c9:6d:e4:9c:ca:b1:8c:98:f4:e7:ee:5e:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db0ae651defb0666c22b2e5d7add5653487076af
        Validity
            Not Before: Jan  2 17:37:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=69c49eb0bbb2c8b25ed5e3d1889c10290ec5ac82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e3:a8:1f:ca:f0:31:85:e8:17:69:3e:57:c6:
                    3a:e6:85:2a:c9:47:b0:3d:9b:38:6b:8a:42:fe:42:
                    b0:51:9b:33:49:d6:27:10:66:4d:8e:54:db:f3:03:
                    2a:5c:4d:fd:31:85:03:d3:52:e7:66:ac:57:0e:92:
                    e6:2c:0c:23:e7:ca:3e:82:97:91:e3:b3:8a:76:a5:
                    8f:f8:f4:31:9b:bc:f2:11:d8:4b:11:f0:a3:15:4d:
                    15:5f:e3:48:89:bc:80:52:76:61:38:80:c5:a5:9c:
                    df:6d:ed:72:c7:2f:6f:e1:7c:6b:0d:46:5f:a7:7e:
                    1b:a2:c9:e4:5e:f2:5d:38:c1:de:19:19:04:66:72:
                    b2:8e:b4:6e:99:3c:b2:03:c3:0d:1f:aa:ed:cf:e0:
                    0e:16:4f:b4:84:f6:11:21:22:fb:64:84:73:06:62:
                    59:86:c1:80:8d:c5:88:ff:82:09:4e:de:0c:fe:4c:
                    d1:f6:61:93:5c:73:06:f2:4d:91:c6:56:6e:15:ec:
                    67:b7:5d:2d:02:ff:02:aa:a5:6d:36:6b:64:bf:ea:
                    22:d4:f0:cd:e6:22:44:60:3c:70:4f:57:b7:ae:81:
                    c0:fe:6d:87:ae:ee:d7:7d:8d:0b:b5:8f:22:3f:05:
                    26:43:74:15:4e:24:b7:cd:55:9f:25:30:15:6e:fe:
                    9e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C4:9E:B0:BB:B2:C8:B2:5E:D5:E3:D1:88:9C:10:29:0E:C5:AC:82
            X509v3 Authority Key Identifier:
                keyid:DB:0A:E6:51:DE:FB:06:66:C2:2B:2E:5D:7A:DD:56:53:48:70:76:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2wrmUd77BmbCKy5det1WU0hwdq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/acSesLuyyLJe1ePRiJwQKQ7FrII.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f0b09b-86b3-48b5-b71b-e0aa86d250e3/1/2wrmUd77BmbCKy5det1WU0hwdq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:7e:69:1c:d0:04:97:2a:e2:e3:61:64:27:5a:c6:4d:4b:4d:
         24:6d:73:0e:f8:39:dc:6c:25:2a:c0:bc:a0:6a:37:65:63:e3:
         f7:76:25:d0:76:f8:57:63:5b:f1:16:6d:b4:a8:de:ea:0c:14:
         bb:53:70:11:66:f7:6c:74:d0:72:04:06:94:c3:3b:39:3a:91:
         6f:49:63:0c:ea:4b:9e:4f:ce:b8:88:b2:4e:b1:3e:1c:77:4f:
         cf:55:e6:1f:e3:85:69:2f:81:aa:5e:a1:4b:09:a8:89:5c:f5:
         1a:e8:c6:3f:bc:53:58:4e:6f:5c:19:0e:b3:93:da:f3:39:57:
         ba:71:08:83:8e:f8:5f:7f:0d:e9:cd:b9:61:ed:78:4e:06:7c:
         0a:09:88:fa:38:bd:15:5d:bf:90:e7:1b:16:53:f1:8d:cd:a3:
         0e:cc:43:29:97:1d:12:3a:fa:04:42:fc:b7:de:95:fa:70:5e:
         9f:73:44:4a:d5:6a:87:4b:d9:28:8d:f6:54:18:b5:45:90:26:
         46:b2:9c:a1:71:38:46:79:77:79:7b:e3:e5:e2:bf:81:64:94:
         d7:18:8a:29:3b:e4:51:ef:84:c3:a9:34:7b:36:35:65:21:d0:
         77:37:b7:d4:5e:26:e7:b5:65:a9:3c:5a:ae:99:3f:2e:ee:fc:
         df:ff:c8:6e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzj8DJbeScyrGMmPTn7l7/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiMGFlNjUxZGVmYjA2NjZjMjJiMmU1ZDdhZGQ1NjUzNDg3
MDc2YWYwHhcNMjMwMTAyMTczNzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWM0OWViMGJiYjJjOGIyNWVkNWUzZDE4ODljMTAyOTBlYzVhYzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOOoH8rwMYXoF2k+V8Y65oUqyUew
PZs4a4pC/kKwUZszSdYnEGZNjlTb8wMqXE39MYUD01LnZqxXDpLmLAwj58o+gpeR
47OKdqWP+PQxm7zyEdhLEfCjFU0VX+NIibyAUnZhOIDFpZzfbe1yxy9v4XxrDUZf
p34bosnkXvJdOMHeGRkEZnKyjrRumTyyA8MNH6rtz+AOFk+0hPYRISL7ZIRzBmJZ
hsGAjcWI/4IJTt4M/kzR9mGTXHMG8k2RxlZuFexnt10tAv8CqqVtNmtkv+oi1PDN
5iJEYDxwT1e3roHA/m2Hru7XfY0LtY8iPwUmQ3QVTiS3zVWfJTAVbv6eswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGnEnrC7ssiyXtXj0YicECkOxayCMB8GA1UdIwQY
MBaAFNsK5lHe+wZmwisuXXrdVlNIcHavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMndybVVkNzdCbWJDS3k1ZGV0MVdVMGh3ZHE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9mMGIwOWItODZiMy00OGI1LWI3MWIt
ZTBhYTg2ZDI1MGUzLzEvYWNTZXNMdXl5TEplMWVQUmlKd1FLUTdGcklJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9mMGIwOWItODZiMy00OGI1LWI3MWItZTBhYTg2ZDI1MGUz
LzEvMndybVVkNzdCbWJDS3k1ZGV0MVdVMGh3ZHE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWnUMA0G
CSqGSIb3DQEBCwUAA4IBAQAifmkc0ASXKuLjYWQnWsZNS00kbXMO+DncbCUqwLyg
ajdlY+P3diXQdvhXY1vxFm20qN7qDBS7U3ARZvdsdNByBAaUwzs5OpFvSWMM6kue
T864iLJOsT4cd0/PVeYf44VpL4GqXqFLCaiJXPUa6MY/vFNYTm9cGQ6zk9rzOVe6
cQiDjvhffw3pzblh7XhOBnwKCYj6OL0VXb+Q5xsWU/GNzaMOzEMplx0SOvoEQvy3
3pX6cF6fc0RK1WqHS9kojfZUGLVFkCZGspyhcThGeXd5e+Pl4r+BZJTXGIopO+RR
74TDqTR7NjVlIdB3N7fUXibntWWpPFqumT8u7vzf/8hu
-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:51 2024 by rpki-client on console-ams.rpki-client.org