Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/WJrqQdvebo74Dz4o-nuIJyvW1DQ.roa
File:                     WJrqQdvebo74Dz4o-nuIJyvW1DQ.roa (raw, json)
Hash identifier:          M/jMfP8IJVuNlGfkQZF3BpHRsKhvlR6J3xTrnIurGpM=
Subject key identifier:   58:9A:EA:41:DB:DE:6E:8E:F8:0F:3E:28:FA:7B:88:27:2B:D6:D4:34
Certificate issuer:       /CN=e6f1dedaf4dbda60da990d685650e68c888c6100
Certificate serial:       01891FE5F480B7E20252B827E195A52E154D
Authority key identifier: E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/WJrqQdvebo74Dz4o-nuIJyvW1DQ.roa
Signing time:             Tue 04 Jul 2023 07:55:11 +0000
ROA not before:           Tue 04 Jul 2023 07:55:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199967
IP address blocks:        185.230.228.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:1f:e5:f4:80:b7:e2:02:52:b8:27:e1:95:a5:2e:15:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6f1dedaf4dbda60da990d685650e68c888c6100
        Validity
            Not Before: Jul  4 07:55:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=589aea41dbde6e8ef80f3e28fa7b88272bd6d434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b0:12:db:24:2c:d8:20:2e:cf:d1:f7:9d:f7:
                    19:1c:0b:f8:c8:0f:0f:7a:26:41:41:ea:b9:0f:c8:
                    10:d7:1b:b5:23:2e:08:45:ee:37:c8:f4:08:41:9e:
                    5c:90:0f:3e:74:73:fa:60:97:22:9f:a7:11:1a:83:
                    8b:38:93:27:37:60:12:1f:39:65:43:2b:93:56:29:
                    2c:ff:0b:c2:b2:d9:00:19:fd:bb:65:3e:a4:5f:e0:
                    a3:33:f5:c2:66:99:6f:53:c2:fd:e7:7e:4d:ea:56:
                    f7:bd:f1:9e:a5:52:02:23:36:34:29:7c:eb:64:26:
                    7a:52:25:e0:db:9b:0b:cf:92:e0:16:b1:13:bc:c7:
                    e8:29:c7:a4:5c:d1:09:96:76:d8:1b:49:99:6a:33:
                    94:e6:c5:d5:4f:f5:4d:5d:f1:1c:e1:b5:08:e4:02:
                    36:23:e3:79:54:c0:87:27:ef:0b:a4:d8:b0:1f:30:
                    ad:a3:e1:a8:43:96:2c:c1:c8:bc:8d:fc:80:4b:e8:
                    f2:dd:3d:3a:47:66:9c:a9:3f:57:7e:0b:35:2c:6c:
                    e7:be:03:e1:e5:f4:62:54:76:83:95:08:a1:0d:bd:
                    cd:91:21:36:0b:36:18:44:2a:50:70:a2:f4:37:5c:
                    05:05:9f:9b:ec:c8:7d:48:3d:c3:8a:ce:10:ba:b1:
                    64:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:9A:EA:41:DB:DE:6E:8E:F8:0F:3E:28:FA:7B:88:27:2B:D6:D4:34
            X509v3 Authority Key Identifier:
                keyid:E6:F1:DE:DA:F4:DB:DA:60:DA:99:0D:68:56:50:E6:8C:88:8C:61:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5vHe2vTb2mDamQ1oVlDmjIiMYQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/WJrqQdvebo74Dz4o-nuIJyvW1DQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/23ba46-fc7a-4b97-8b4f-231657829ef5/1/5vHe2vTb2mDamQ1oVlDmjIiMYQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.230.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:f9:71:72:cf:5f:47:83:9f:a8:07:25:01:bc:e1:23:0f:2c:
         58:52:c8:c7:b5:d5:92:02:4e:bf:7e:0a:ef:31:23:e1:6d:15:
         ff:fe:07:90:89:8e:c8:58:b9:9f:f4:5c:ca:0d:80:9b:24:f7:
         05:6b:5e:37:8d:4d:b6:53:1a:93:7c:7b:81:51:7a:b6:44:b5:
         65:e5:b1:82:44:1d:59:20:91:c9:09:5b:19:3c:4b:b1:36:61:
         5d:f8:78:40:ba:0b:ca:3b:e4:e3:1b:53:a6:c6:7f:16:fd:5b:
         ce:de:f6:33:c5:ae:26:67:fa:9c:8c:9b:8d:a1:bd:84:5f:38:
         2b:27:5c:8b:46:05:78:53:c6:39:16:5a:b0:e3:00:e2:5b:2a:
         0c:fd:63:23:7d:0b:49:11:e7:86:c6:2f:d8:52:83:e7:da:61:
         e4:26:75:02:ee:54:1f:40:62:2f:41:40:5c:41:76:a2:d1:8f:
         07:8c:5d:f7:61:d4:ab:4c:64:2a:a2:c3:4e:de:30:44:a5:5e:
         00:cf:e3:db:2b:d8:9f:d2:1c:5b:b6:03:32:d4:83:0a:58:1a:
         de:33:b6:82:76:31:53:69:92:95:6a:5e:c0:ac:2c:64:92:01:
         36:39:02:5b:19:4a:46:31:65:74:54:e9:74:58:12:a1:35:2d:
         de:c5:5c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:27 2023 by rpki-client on console-ams.rpki-client.org