Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Zfk4NjUFhiJ8AGpLXsU6i1rtW9g.roa
File:                     Zfk4NjUFhiJ8AGpLXsU6i1rtW9g.roa (raw, json)
Hash identifier:          4Hi5yqW3LLFVHxEpm34ZyceH/w/rvZp0OyLuXFVZbew=
Subject key identifier:   65:F9:38:36:35:05:86:22:7C:00:6A:4B:5E:C5:3A:8B:5A:ED:5B:D8
Certificate issuer:       /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial:       018A3B4C487B2BEFC574358C46083024AFE4
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Zfk4NjUFhiJ8AGpLXsU6i1rtW9g.roa
Signing time:             Mon 28 Aug 2023 08:39:29 +0000
ROA not before:           Mon 28 Aug 2023 08:39:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     197842
IP address blocks:        185.92.47.0/24 maxlen: 24
                          46.37.127.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:3b:4c:48:7b:2b:ef:c5:74:35:8c:46:08:30:24:af:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
        Validity
            Not Before: Aug 28 08:39:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=65f93836350586227c006a4b5ec53a8b5aed5bd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ca:ed:80:6e:8f:bc:3e:73:24:a4:a8:72:07:
                    ed:0c:18:65:f3:b1:76:4a:85:22:bd:a6:92:96:da:
                    55:e0:06:a7:a2:d7:51:71:09:86:d5:c9:5d:6f:4d:
                    3e:87:18:d0:a5:3e:f7:d2:2c:2f:f7:07:aa:31:26:
                    86:95:9f:0f:0f:76:a0:07:79:45:56:ee:6e:93:cd:
                    22:b3:4a:be:61:32:06:c3:69:26:76:ad:fc:31:79:
                    67:07:ef:93:d9:0f:1d:6f:a4:ec:65:98:41:c5:a4:
                    7b:09:31:4a:0b:0e:c1:9a:fb:1d:7b:26:74:4f:7c:
                    1f:7b:ba:86:55:5e:1d:5e:9b:32:35:ca:41:51:bf:
                    6b:35:da:a9:8f:c0:4e:b0:19:26:ac:48:24:98:b0:
                    1c:b8:4b:c6:e3:ad:5e:2a:d9:ce:f3:96:d8:c6:ce:
                    ae:e1:f3:5d:e4:b4:60:1b:55:00:10:ad:c3:81:9e:
                    bd:c5:64:1a:f1:01:b8:4e:df:43:54:1f:dd:52:d5:
                    1d:46:be:cf:a4:21:03:ee:cc:8f:4a:60:b9:39:e0:
                    51:e1:31:ce:d9:eb:2b:b5:f6:ca:ef:cc:d3:41:82:
                    37:5c:1e:1e:56:9f:38:cd:46:21:53:65:ea:e0:25:
                    75:6b:4f:71:94:75:a3:24:60:1c:ab:65:50:ba:9b:
                    3e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:F9:38:36:35:05:86:22:7C:00:6A:4B:5E:C5:3A:8B:5A:ED:5B:D8
            X509v3 Authority Key Identifier:
                keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Zfk4NjUFhiJ8AGpLXsU6i1rtW9g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.37.127.0/24
                  185.92.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:66:b3:51:3d:fd:ba:00:e0:4e:3b:a2:e4:e8:32:26:8b:94:
         bb:ab:2e:67:4d:cc:58:72:83:69:3e:73:92:b6:37:cb:e0:92:
         d4:2d:22:74:67:c2:10:0d:36:0b:67:8d:95:0f:8d:be:aa:24:
         10:18:b5:d5:05:70:27:ae:39:1d:95:de:3c:64:dc:62:0b:7f:
         27:a7:c1:af:67:12:31:a4:5c:20:15:a6:74:05:df:44:a4:27:
         70:b4:33:d3:d6:0b:52:b5:a0:98:8f:fb:82:30:9e:dd:1e:39:
         c9:9a:8c:b2:d4:dd:d6:2d:12:aa:5a:6e:dc:35:f8:ef:18:9c:
         fa:ed:7d:99:c3:d9:99:12:61:6f:d2:b7:21:0c:03:c0:f5:f4:
         2b:4e:8b:e9:56:11:2b:2f:3c:c7:34:c0:bb:60:18:14:fa:74:
         7a:cf:9c:e2:f9:fb:a9:bc:d0:e5:54:27:91:eb:50:98:60:a2:
         61:b6:c8:ac:56:52:9b:77:a8:5f:40:79:6b:18:a0:57:d5:e8:
         ba:90:af:6a:9b:1c:48:c2:38:bf:ad:f0:d2:8e:11:0e:97:39:
         38:60:05:bb:82:8d:9b:d3:98:34:5c:6d:3a:a9:5d:2d:2a:bd:
         e1:7b:44:9d:3f:89:3f:e0:d8:3f:fd:02:36:6a:77:15:0e:36:
         89:06:f4:16
-----BEGIN CERTIFICATE-----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Generated at Mon Oct 16 14:08:49 2023 by rpki-client on console-ams.rpki-client.org