Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/ulcheXNLabhdUGIX0diR67187W0.roa
File:                     ulcheXNLabhdUGIX0diR67187W0.roa (raw, json)
Hash identifier:          87hGew9O8glmoPz6Tj+HVQWnUFmEBnRPM2GxgoAflkA=
Subject key identifier:   BA:57:21:79:73:4B:69:B8:5D:50:62:17:D1:D8:91:EB:BD:7C:ED:6D
Certificate issuer:       /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial:       018A98B2828C2A1B953CE1E115BF336D639C
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/ulcheXNLabhdUGIX0diR67187W0.roa
Signing time:             Fri 15 Sep 2023 11:55:50 +0000
ROA not before:           Fri 15 Sep 2023 11:55:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212238
IP address blocks:        83.147.44.0/22 maxlen: 22
                          83.147.12.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:98:b2:82:8c:2a:1b:95:3c:e1:e1:15:bf:33:6d:63:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
        Validity
            Not Before: Sep 15 11:55:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ba572179734b69b85d506217d1d891ebbd7ced6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7c:da:f6:b6:e4:9f:d9:02:a6:b8:ff:fb:90:
                    0a:74:ee:12:78:89:df:49:8d:46:03:65:65:42:94:
                    42:e9:8d:29:7d:93:97:c8:63:ac:03:4a:ec:b7:ed:
                    23:8a:a5:f5:7d:df:fa:79:7e:35:d2:91:d5:4f:56:
                    2c:06:65:1f:cc:e7:07:bc:53:36:f6:12:fa:b6:04:
                    85:61:75:63:d9:6f:10:3f:1e:e1:46:2b:69:89:62:
                    1b:c6:77:63:7d:42:3b:a2:9d:55:5f:90:59:66:93:
                    b0:ee:ed:cb:db:c1:b2:da:d7:2c:01:e2:a1:8e:ca:
                    49:95:b0:d4:05:97:6a:4b:2f:19:e2:e2:4e:12:76:
                    ec:71:91:b0:d8:c2:dd:6e:b7:fd:5c:b0:6e:26:34:
                    5a:32:7d:a9:e4:03:c9:d6:74:2f:42:1c:29:87:e2:
                    56:bf:47:a5:90:5d:14:0a:00:86:5f:21:a7:76:06:
                    15:84:93:8e:47:5d:22:0a:eb:95:cf:77:6e:e4:e4:
                    1e:4b:53:08:e1:b1:7e:ef:18:7c:46:45:95:e0:4b:
                    f5:6e:65:f0:73:eb:dc:1e:d0:ad:7d:5c:4d:ee:6a:
                    61:e5:61:1c:35:80:77:21:ff:42:f3:ee:55:f5:54:
                    35:fd:ee:ad:45:c5:a0:f7:8c:c5:92:da:23:2b:92:
                    0e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:57:21:79:73:4B:69:B8:5D:50:62:17:D1:D8:91:EB:BD:7C:ED:6D
            X509v3 Authority Key Identifier:
                keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/ulcheXNLabhdUGIX0diR67187W0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.147.12.0/24
                  83.147.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c4:0c:ce:45:91:46:5b:fe:4b:03:02:3f:8e:3f:40:47:92:50:
         cb:c4:8e:b2:5f:56:41:db:79:be:81:4a:2f:75:f9:3f:25:3f:
         17:a6:39:ee:72:67:4f:e7:a1:2c:5b:f4:a5:1b:64:b6:ba:a6:
         6b:da:66:18:04:48:14:8b:55:52:a0:ad:f9:57:c8:f1:89:03:
         cb:ac:03:1c:3e:13:9a:03:fc:c0:7a:5f:5b:2c:01:8b:a6:72:
         84:ae:41:8f:9c:6a:25:1d:ed:ae:e4:a7:51:f5:40:35:19:e5:
         22:a1:9e:02:46:5f:dc:67:20:60:b8:c6:e6:dd:23:20:58:c5:
         bf:44:30:39:6b:2a:0e:af:b0:6a:c2:f1:b8:d4:c0:2a:0a:46:
         1c:15:3f:d1:b2:11:1a:87:9d:de:a1:f7:7d:3f:7b:9b:02:ff:
         9d:c8:88:88:0b:7e:5d:15:39:3c:d9:3d:e8:28:de:99:38:af:
         ac:46:8b:48:ab:68:8e:bc:22:ec:a5:80:4e:9f:88:12:35:b7:
         7a:1e:79:93:08:5e:de:78:6c:1b:e7:7f:32:44:ad:dc:08:69:
         a8:83:71:fa:2d:1f:9a:0b:ec:2f:f9:1a:10:2b:68:d1:fd:8b:
         c9:59:c1:73:fe:f1:1c:41:86:c6:f6:fe:1f:25:8c:94:43:2e:
         b0:06:44:f1
-----BEGIN CERTIFICATE-----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Generated at Tue Oct 10 05:04:39 2023 by rpki-client on console-fra.rpki-client.org