Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/7GOELtjNbDiwAQwOQIJVOdU-M98.roa
File:                     7GOELtjNbDiwAQwOQIJVOdU-M98.roa (raw, json)
Hash identifier:          +f1HbXTRBmjFZgdAq0nxi32bdFFEAIOoSpRhZK5fn48=
Subject key identifier:   EC:63:84:2E:D8:CD:6C:38:B0:01:0C:0E:40:82:55:39:D5:3E:33:DF
Certificate issuer:       /CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Certificate serial:       018896C6A93C3FBDE73769C161D335D4E711
Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/7GOELtjNbDiwAQwOQIJVOdU-M98.roa
Signing time:             Wed 07 Jun 2023 16:53:01 +0000
ROA not before:           Wed 07 Jun 2023 16:53:01 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        46.28.40.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:96:c6:a9:3c:3f:bd:e7:37:69:c1:61:d3:35:d4:e7:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5
        Validity
            Not Before: Jun  7 16:53:01 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ec63842ed8cd6c38b0010c0e40825539d53e33df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:88:f8:7f:04:bd:3f:81:b9:ae:0f:53:96:6c:
                    c2:49:4a:fc:31:34:a3:0e:f0:64:ff:0b:cc:60:5b:
                    d5:2d:75:6f:df:56:89:58:8b:51:a1:02:ba:7f:c1:
                    a2:76:d9:2c:b2:ea:32:b8:7d:09:e2:9a:2f:de:b2:
                    89:ac:db:cd:1e:e6:ad:3a:94:0a:99:ca:86:02:6f:
                    49:ff:7c:49:2a:58:61:76:f0:c1:88:e5:88:69:00:
                    b0:c4:f0:0a:61:cc:7d:85:98:da:09:82:0e:f2:1b:
                    80:13:02:4a:7e:14:8d:02:f3:5a:34:27:53:55:eb:
                    90:e6:2e:25:47:51:6f:87:ea:2d:56:b0:f5:49:d3:
                    e2:d2:45:0c:a2:cb:09:f3:c6:2c:0c:a4:af:2a:91:
                    8c:bd:be:59:42:52:69:9b:c5:e9:d2:ca:ab:bb:75:
                    da:b2:35:0c:8c:48:f1:9b:e6:93:50:2c:f8:3e:a6:
                    31:f9:03:74:aa:f5:bb:5e:f9:37:0a:5f:c1:45:09:
                    da:c9:4d:d3:aa:b0:97:0f:1f:84:43:c1:7e:64:b6:
                    38:55:61:be:c6:e9:cb:ab:3b:cb:0b:dc:6f:ab:c8:
                    a3:c0:b1:70:42:3e:14:6f:da:a3:a8:0a:fc:3f:2b:
                    5a:d2:d2:89:59:52:41:36:b1:30:49:b3:c0:de:41:
                    e8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:63:84:2E:D8:CD:6C:38:B0:01:0C:0E:40:82:55:39:D5:3E:33:DF
            X509v3 Authority Key Identifier:
                keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/7GOELtjNbDiwAQwOQIJVOdU-M98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.28.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c1:e1:33:5c:db:83:8a:ae:66:0a:87:af:e6:08:aa:5f:4d:34:
         1c:4a:5d:bc:ac:fe:49:3c:02:72:09:8c:64:69:d4:10:7a:0b:
         78:ab:5d:15:df:96:03:f9:29:3f:c3:3a:87:64:4f:79:9f:c7:
         2e:5e:5d:5e:86:c1:72:6f:2b:e9:3d:d0:4d:71:ad:aa:e1:ae:
         0e:4d:c9:63:81:65:9a:c0:4d:ab:5f:cf:90:ff:2f:ce:f4:0f:
         a1:8d:39:db:86:51:9c:4d:55:de:8d:3f:d3:7e:51:d1:dc:71:
         60:ee:20:06:6d:89:7d:18:71:db:1f:c1:bb:7f:3b:7d:0e:68:
         7c:7d:13:2f:a2:10:8e:9e:73:f5:1d:f3:c8:c7:9a:db:5a:2d:
         97:96:5c:7b:48:f4:63:ab:91:07:55:47:27:38:3a:8d:5e:7d:
         ff:b9:ef:e8:f9:c2:11:4e:32:df:46:aa:3b:01:a9:8b:81:b1:
         3a:7f:13:fa:a0:e1:e4:f0:f5:53:f6:58:0f:09:69:a0:eb:56:
         00:0c:30:4a:74:0b:ba:5a:92:6b:3d:d3:03:90:94:2e:ac:ee:
         7c:3d:df:b6:84:3e:ed:58:57:20:2b:1b:0c:17:d5:e0:63:ad:
         10:5f:78:85:e9:d9:5d:95:d9:86:c2:8d:0b:bd:7e:09:c5:8d:
         d2:d9:c6:98
-----BEGIN CERTIFICATE-----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Generated at Thu Sep 21 08:44:08 2023 by rpki-client on console-ams.rpki-client.org