Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/iHaOifKGidujA2KgYIZuszJ0AmE.roa
File:                     iHaOifKGidujA2KgYIZuszJ0AmE.roa (raw, json)
Hash identifier:          u7PYAmGNPlOWGbBZXuKAArZ3ymdhGCavCOJIyQ9S4ZU=
Subject key identifier:   88:76:8E:89:F2:86:89:DB:A3:03:62:A0:60:86:6E:B3:32:74:02:61
Certificate issuer:       /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial:       01899B3B11452A67C6D61770985AC312826B
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/iHaOifKGidujA2KgYIZuszJ0AmE.roa
Signing time:             Fri 28 Jul 2023 06:41:26 +0000
ROA not before:           Fri 28 Jul 2023 06:41:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209854
IP address blocks:        93.152.210.0/24 maxlen: 24
                          93.152.212.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:9b:3b:11:45:2a:67:c6:d6:17:70:98:5a:c3:12:82:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
        Validity
            Not Before: Jul 28 06:41:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=88768e89f28689dba30362a060866eb332740261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7a:e4:dc:bf:6c:52:8f:72:1d:84:8f:b8:c2:
                    1b:13:be:b5:f8:a8:44:6d:5f:3b:1b:84:1b:f3:71:
                    a8:d3:e9:fd:5a:8a:68:bf:75:7d:8e:2f:1d:ee:01:
                    2a:ae:20:41:a6:f9:84:a1:2f:e1:c5:2e:90:44:ee:
                    51:23:b7:9b:b7:41:cd:63:61:2f:ba:85:cd:36:11:
                    d9:83:60:ab:e7:97:0b:5f:4e:c3:33:45:06:41:d5:
                    77:27:cd:a2:cb:44:65:68:fe:46:08:91:d7:39:9b:
                    74:57:18:cf:5d:7f:93:75:94:79:79:75:86:d0:c9:
                    15:7b:f7:f3:9f:50:a8:c3:e6:af:a9:1f:60:db:d0:
                    2c:70:3e:b9:66:e5:32:7e:e6:28:bc:ef:6f:12:f5:
                    ef:e2:06:fc:06:46:1a:54:5b:57:85:06:58:51:91:
                    51:d5:39:c1:3f:7d:2a:c8:89:08:39:4b:fd:8b:7d:
                    a6:b1:ce:9c:a8:66:78:e1:98:c1:3b:59:ad:b7:2e:
                    84:22:81:3b:0f:07:ae:39:15:cc:8a:07:16:65:11:
                    af:10:e1:ed:4b:ae:ff:97:98:11:12:22:fc:e3:01:
                    4a:f9:bc:56:10:db:de:9c:d3:25:e3:34:4f:58:d9:
                    a6:db:e8:76:00:2d:97:4a:f3:48:9b:e8:a9:9e:2c:
                    3a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:76:8E:89:F2:86:89:DB:A3:03:62:A0:60:86:6E:B3:32:74:02:61
            X509v3 Authority Key Identifier:
                keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/iHaOifKGidujA2KgYIZuszJ0AmE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.152.210.0/24
                  93.152.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:cf:0f:b2:b6:0c:f2:a1:da:ba:2a:3a:ca:61:a7:2f:b9:0b:
         78:ea:91:d7:bf:5f:be:f7:1b:61:51:f3:de:f5:6b:f2:7d:90:
         d6:01:bc:a4:9b:c8:95:6a:0b:48:20:5b:7a:15:62:fd:88:ae:
         b1:b9:53:45:e5:15:c0:33:31:30:28:28:fc:61:d0:58:fb:fe:
         4a:3b:36:f7:cb:22:66:4d:ae:dc:3f:c3:ee:09:aa:84:2e:4a:
         77:1c:65:40:c5:e6:e3:d2:0a:59:6c:26:87:af:f4:87:0e:9b:
         f0:35:48:0b:a8:30:f4:c4:15:a1:0a:4e:28:30:b4:c2:8a:d8:
         fb:0c:e3:04:3b:2f:5d:e3:77:85:a1:65:d2:1b:4a:ed:d6:78:
         db:49:a7:42:1a:10:61:d1:fa:2d:32:59:5e:5c:23:35:52:f5:
         61:c7:dc:c6:48:79:c9:43:85:1e:75:0c:6f:9a:74:df:78:60:
         1c:18:0c:5c:25:e2:4c:39:5c:46:3d:5e:2e:2a:26:a9:12:52:
         da:d2:24:a4:fc:a8:ab:1a:d6:70:a6:29:bf:a2:6a:41:9c:07:
         f6:0e:04:96:b3:f1:e0:97:1a:6d:4a:58:cd:77:b4:d8:22:f0:
         fc:5c:a3:e6:ea:36:b4:a3:1b:6c:d6:d7:74:6d:00:de:42:83:
         42:cd:58:85
-----BEGIN CERTIFICATE-----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Generated at Wed Sep 20 09:53:34 2023 by rpki-client on console-ams.rpki-client.org