Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/Uz0S-PbcsWBGT9UpaRcFnIW2-bI.roa
File:                     Uz0S-PbcsWBGT9UpaRcFnIW2-bI.roa (raw, json)
Hash identifier:          tW4x9q35fGyN7szhkcIsc2bCdWiIm3Cbi9TfrNnDMqw=
Subject key identifier:   53:3D:12:F8:F6:DC:B1:60:46:4F:D5:29:69:17:05:9C:85:B6:F9:B2
Certificate issuer:       /CN=411dea53467b6c7143eb23d284569a8183b2e82f
Certificate serial:       0188E79C42510689403C06FF5C66145C9437
Authority key identifier: 41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/Uz0S-PbcsWBGT9UpaRcFnIW2-bI.roa
Signing time:             Fri 23 Jun 2023 09:35:57 +0000
ROA not before:           Fri 23 Jun 2023 09:35:57 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212238
IP address blocks:        84.239.42.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e7:9c:42:51:06:89:40:3c:06:ff:5c:66:14:5c:94:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411dea53467b6c7143eb23d284569a8183b2e82f
        Validity
            Not Before: Jun 23 09:35:57 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=533d12f8f6dcb160464fd5296917059c85b6f9b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9e:0b:1a:61:56:a3:29:96:0b:f0:16:2c:6e:
                    cb:4d:70:3b:2e:ae:fd:d7:bb:5b:96:ac:bb:f9:d1:
                    e0:51:d4:a3:ca:df:da:d2:d0:12:ba:d8:2e:cd:78:
                    73:36:0b:0e:0f:a7:da:b2:12:9e:01:54:af:67:4e:
                    07:6b:ec:5f:d0:9a:2c:d2:fd:4b:da:e5:f7:46:9b:
                    fb:2e:7a:3e:b8:dd:12:70:4c:83:11:3c:0a:b5:d8:
                    c6:77:55:f3:cd:43:f9:b2:6e:45:80:ec:57:c7:2a:
                    ac:05:02:33:55:46:79:66:bb:16:31:20:02:d2:31:
                    42:c4:c3:c6:00:c5:ca:eb:ee:16:5d:3f:55:ec:19:
                    46:03:55:11:5a:d9:38:f7:25:ad:5b:f0:2c:1b:43:
                    d0:c6:83:e8:92:26:c4:d3:bb:72:be:6b:4d:be:e0:
                    5d:ba:4e:94:07:89:35:5c:4a:bf:a2:bd:cc:96:15:
                    96:aa:54:3c:07:de:95:b8:7d:d2:05:4a:02:56:65:
                    03:30:b3:60:d5:bc:d3:8f:65:b8:26:9c:be:dc:5b:
                    e6:22:fd:bb:51:ec:6b:f0:cd:ab:35:50:c9:4b:4a:
                    fa:71:da:ec:08:d9:db:11:c3:9f:7e:84:63:e0:9f:
                    84:03:33:62:56:d4:f1:be:55:d1:ad:44:b5:46:aa:
                    d7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:3D:12:F8:F6:DC:B1:60:46:4F:D5:29:69:17:05:9C:85:B6:F9:B2
            X509v3 Authority Key Identifier:
                keyid:41:1D:EA:53:46:7B:6C:71:43:EB:23:D2:84:56:9A:81:83:B2:E8:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QR3qU0Z7bHFD6yPShFaagYOy6C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/Uz0S-PbcsWBGT9UpaRcFnIW2-bI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/eacce5-e4dd-4d9f-8ec1-47120b9069b7/1/QR3qU0Z7bHFD6yPShFaagYOy6C8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.239.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:a8:75:84:12:74:d4:d8:27:18:47:3b:4b:f7:42:1d:7b:a2:
         ff:2e:2e:40:29:b6:0c:ff:39:b4:39:f9:93:e1:af:0c:f2:6b:
         21:11:49:8a:f6:1f:ca:fe:cc:ee:c1:f5:15:33:11:da:06:01:
         d4:95:9f:3e:fd:6b:4b:20:d6:db:84:ea:93:1c:de:30:4e:b6:
         e1:ce:c3:db:d1:96:04:12:90:24:f9:67:93:33:52:3f:43:cb:
         2b:b1:32:bf:54:da:cb:27:ba:e0:57:0f:8f:2c:a2:be:36:8a:
         3b:46:de:9b:b9:81:e4:d5:fb:e7:16:2a:34:dc:ec:8e:9a:03:
         cd:75:51:da:7d:43:0e:2f:4e:94:23:ef:37:4e:d9:90:32:84:
         f1:d1:8e:0d:56:43:16:86:05:20:6d:6b:73:e6:9f:58:e0:a4:
         37:0f:0f:93:f2:0b:c1:f0:ad:9d:91:c3:47:32:ba:6c:fa:f7:
         fc:b8:74:67:45:80:03:5a:76:c4:90:27:24:92:11:34:49:6f:
         20:f8:9b:30:14:4c:19:19:e5:a4:2e:50:d5:70:a8:fe:20:33:
         f5:ac:b1:ab:3b:cd:38:9b:1d:b0:0e:03:7e:11:f6:5b:d7:1b:
         af:8d:eb:a5:d6:be:bf:f6:a2:67:91:96:bd:9f:15:a9:c4:9d:
         49:db:13:e3
-----BEGIN CERTIFICATE-----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Generated at Mon Oct 2 13:24:29 2023 by rpki-client on console-ams.rpki-client.org