Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/Gk96cyKQvDoBGEM4DtHmFF1HKGw.roa
File:                     Gk96cyKQvDoBGEM4DtHmFF1HKGw.roa (raw, json)
Hash identifier:          ps6iy/RJbJAXATtvpYg8BDueAKSZjPGKnUG950rMWxk=
Subject key identifier:   1A:4F:7A:73:22:90:BC:3A:01:18:43:38:0E:D1:E6:14:5D:47:28:6C
Certificate issuer:       /CN=6832c32d2259013991260d530d9120031aaefcd0
Certificate serial:       018973030F86C20B3BC633B1E516A9564AC3
Authority key identifier: 68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/Gk96cyKQvDoBGEM4DtHmFF1HKGw.roa
Signing time:             Thu 20 Jul 2023 11:15:27 +0000
ROA not before:           Thu 20 Jul 2023 11:15:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        145.46.168.0/24 maxlen: 24
                          145.46.169.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:73:03:0f:86:c2:0b:3b:c6:33:b1:e5:16:a9:56:4a:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6832c32d2259013991260d530d9120031aaefcd0
        Validity
            Not Before: Jul 20 11:15:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1a4f7a732290bc3a011843380ed1e6145d47286c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3e:3f:db:7d:e1:04:03:45:2d:66:b4:2c:62:
                    84:7a:2d:7d:59:f7:78:d8:e1:22:9e:b4:6d:03:6d:
                    6c:78:c4:5e:9c:0b:ce:26:a6:c7:ca:b4:03:40:ac:
                    11:f6:e3:ff:76:9b:8f:08:3d:e3:77:5a:2f:23:1f:
                    4c:f6:e1:c0:28:8a:40:b6:ec:1c:b0:e4:1c:2b:5e:
                    eb:c3:ac:a0:db:02:97:e9:21:aa:dc:71:94:57:28:
                    d6:12:c4:d8:07:d1:75:b9:69:70:e6:7d:90:e7:b0:
                    02:3e:98:33:1f:2c:51:94:75:67:92:7c:c1:a0:b2:
                    9a:ee:6e:74:9c:8d:c1:87:38:05:bc:46:d9:e3:d5:
                    5d:04:8a:b8:cc:5a:87:53:d8:b1:a9:7c:28:8c:79:
                    df:e0:f6:3c:1f:49:08:64:cc:f8:e3:93:ec:f0:04:
                    fd:06:22:2c:7a:10:8b:b9:5d:93:f5:d8:00:71:a4:
                    17:57:4b:13:f7:57:f3:cf:3d:1a:7c:11:af:c1:e2:
                    6c:77:19:99:98:01:2d:9c:b6:0b:8c:01:0a:1c:be:
                    d6:1f:50:4c:0d:0b:98:31:79:3d:97:38:7f:b8:29:
                    5a:ef:36:20:fe:3f:0a:8a:24:2b:8a:96:96:76:7e:
                    c9:b6:1f:46:4e:a0:38:1c:ac:a2:b3:7a:48:67:dd:
                    47:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:4F:7A:73:22:90:BC:3A:01:18:43:38:0E:D1:E6:14:5D:47:28:6C
            X509v3 Authority Key Identifier:
                keyid:68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/Gk96cyKQvDoBGEM4DtHmFF1HKGw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  145.46.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:59:3b:42:fd:68:fd:70:ec:1c:93:19:19:f0:10:ea:17:a7:
         d9:27:5d:a9:fe:0d:be:5e:14:ab:8e:01:d7:83:71:f5:fd:1a:
         c5:54:fe:f2:3e:d9:89:c6:64:32:8e:66:d0:3b:6d:ed:d4:21:
         ab:82:e1:5f:03:b3:6e:1f:0e:37:60:50:dc:58:bd:68:97:53:
         91:42:de:51:bf:0e:b7:5b:da:60:c2:3a:51:7c:95:78:ff:c4:
         5f:65:c8:8b:58:b2:b8:44:c4:e7:01:a6:82:1c:23:b2:f5:21:
         6d:cb:3d:96:e2:b8:d3:b5:7a:a6:47:9c:e3:fd:b6:8c:86:f0:
         a7:0a:e6:a5:77:90:22:a6:a8:ca:35:9d:0a:5d:a4:9e:4a:2e:
         a8:a2:0e:26:bc:cb:ac:2e:af:b7:ba:6b:de:8e:52:c6:c9:0d:
         8a:86:c6:c4:6e:8b:24:c8:64:9a:98:f3:07:d1:72:7c:ee:0b:
         dc:77:d1:30:13:28:7d:5f:00:e5:e2:06:00:7a:8a:c1:2a:88:
         e7:cf:78:26:92:8e:81:da:b9:fb:ba:69:cd:92:ec:f5:4d:5f:
         9c:12:a9:09:ca:51:88:6e:e2:e4:9c:11:3c:9e:77:50:0a:cf:
         fe:a2:d0:c0:67:a0:2b:3f:a7:36:46:90:43:4f:6a:ac:f8:67:
         69:65:ec:35
-----BEGIN CERTIFICATE-----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Generated at Thu Nov 23 10:56:20 2023 by rpki-client on console-ams.rpki-client.org