Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/Tl9e52pAwgPZXH32h_3LrCcj4oM.roa
File:                     Tl9e52pAwgPZXH32h_3LrCcj4oM.roa (raw, json)
Hash identifier:          aYMw6ln6qnVejf4PEgts15WUL1YEp9JK1eYJraaVGxw=
Subject key identifier:   4E:5F:5E:E7:6A:40:C2:03:D9:5C:7D:F6:87:FD:CB:AC:27:23:E2:83
Certificate issuer:       /CN=efe01974743a3b3a28f7a64e2d871bf1e5e5f6e5
Certificate serial:       018CC64A161EADCF6690E3BFA8B89A4A0D6E
Authority key identifier: EF:E0:19:74:74:3A:3B:3A:28:F7:A6:4E:2D:87:1B:F1:E5:E5:F6:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/Tl9e52pAwgPZXH32h_3LrCcj4oM.roa
Signing time:             Mon 01 Jan 2024 18:29:53 +0000
ROA not before:           Mon 01 Jan 2024 18:29:53 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     13190
IP address blocks:        185.117.164.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Sat 20 Jan 2024 08:20:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c6:4a:16:1e:ad:cf:66:90:e3:bf:a8:b8:9a:4a:0d:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efe01974743a3b3a28f7a64e2d871bf1e5e5f6e5
        Validity
            Not Before: Jan  1 18:29:53 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4e5f5ee76a40c203d95c7df687fdcbac2723e283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c7:ad:3a:f3:7f:bf:2f:cb:11:ba:b0:e4:1f:
                    9f:92:47:51:3c:90:c8:19:8d:70:45:4d:eb:cb:36:
                    b2:d0:bb:95:e5:67:31:aa:ee:4a:ea:7f:e2:00:f1:
                    ed:c5:ec:bf:5d:71:08:5a:da:3b:67:08:4b:73:dc:
                    7d:cf:02:9a:5c:53:94:97:d3:35:97:09:1c:b5:7c:
                    3f:6f:af:70:83:ec:40:c5:cb:47:c9:45:2a:bb:14:
                    94:86:67:96:a4:2e:92:e8:59:62:cc:22:1e:2f:85:
                    01:fb:b7:36:fe:d3:f5:48:ef:52:36:74:53:c2:5a:
                    07:65:17:07:0d:b4:39:2d:10:5a:97:70:ba:2a:72:
                    84:87:44:c5:cf:e0:29:28:b2:af:8f:14:2d:c5:75:
                    e6:cb:be:38:98:ba:de:98:64:b5:d8:bd:49:64:a6:
                    87:43:9a:e5:fb:66:5b:08:66:3e:f7:12:52:f7:e8:
                    b3:3a:0d:7e:af:ad:7e:0e:d1:e9:92:6e:4e:ee:10:
                    f9:ce:9e:8f:c7:54:7c:6c:e2:80:b2:d0:91:16:c3:
                    eb:f9:c5:c9:8b:8f:f7:a2:66:9a:98:ef:7e:7d:39:
                    d0:b6:7b:c4:22:94:1d:5e:fc:0f:40:c6:a1:c9:54:
                    40:4b:c9:9c:07:7a:72:07:3e:08:97:07:ab:9e:01:
                    e3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:5F:5E:E7:6A:40:C2:03:D9:5C:7D:F6:87:FD:CB:AC:27:23:E2:83
            X509v3 Authority Key Identifier:
                keyid:EF:E0:19:74:74:3A:3B:3A:28:F7:A6:4E:2D:87:1B:F1:E5:E5:F6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/Tl9e52pAwgPZXH32h_3LrCcj4oM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9438b7-39a2-4c95-af1a-cdb1fdc9d57d/1/7-AZdHQ6Ozoo96ZOLYcb8eXl9uU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.117.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:3b:0a:da:92:20:59:55:99:09:a1:02:c0:05:f3:f3:0d:85:
         b4:98:6d:f7:48:fe:a4:14:58:2e:0c:e4:bf:a8:f4:cd:c0:5b:
         d8:c3:66:f0:96:0e:4e:19:8e:b3:aa:b3:97:8a:b5:2c:c2:6d:
         2d:f3:70:09:b1:89:b4:18:da:cd:05:a4:9b:3e:a1:bb:86:76:
         1c:1a:e2:37:cf:38:4f:7e:76:10:c2:9b:da:82:0a:c3:46:7a:
         cd:e4:29:44:0b:5a:7e:b8:12:ec:e4:db:e8:b3:c2:67:c8:d2:
         fa:65:1c:f0:6d:89:e3:3a:c6:3c:f9:4a:92:a0:bb:43:c9:6c:
         a1:1a:f4:eb:7a:02:df:c7:a3:ba:58:bc:a4:09:a4:8a:1f:6e:
         64:dd:7a:0b:7e:ec:78:aa:28:0b:51:65:be:37:66:32:88:e4:
         42:68:98:ea:bf:88:93:df:7c:3e:ff:28:7b:bb:2d:06:81:3f:
         94:d7:d4:26:92:66:9f:96:75:5d:ef:7f:66:4a:84:fe:21:a0:
         75:c7:b9:35:85:81:83:6e:00:03:dc:81:c7:d3:7e:69:c1:59:
         e3:0f:9e:26:52:8e:69:5d:70:c1:64:27:7c:39:7c:c9:52:c2:
         c7:00:3a:d0:af:27:69:4a:89:d6:6a:60:f7:11:dd:53:53:b6:
         b1:e2:13:a9
-----BEGIN CERTIFICATE-----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Generated at Sat Jan 20 09:42:46 2024 by rpki-client on console-fra.rpki-client.org