Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/oZ6e6XmHbAMqRJSZ4uWqnC-4H28.roa
File:                     oZ6e6XmHbAMqRJSZ4uWqnC-4H28.roa (raw, json)
Hash identifier:          A3MLLlVLBEWotiepj9GN0Yuwo5gyP2t3uncatstwYME=
Subject key identifier:   A1:9E:9E:E9:79:87:6C:03:2A:44:94:99:E2:E5:AA:9C:2F:B8:1F:6F
Certificate issuer:       /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial:       01888F7AE52CC822DCC8D4BCF416EF4791DA
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/oZ6e6XmHbAMqRJSZ4uWqnC-4H28.roa
Signing time:             Tue 06 Jun 2023 06:52:55 +0000
ROA not before:           Tue 06 Jun 2023 06:52:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57844
IP address blocks:        194.143.221.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:8f:7a:e5:2c:c8:22:dc:c8:d4:bc:f4:16:ef:47:91:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
        Validity
            Not Before: Jun  6 06:52:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a19e9ee979876c032a449499e2e5aa9c2fb81f6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d3:a2:7b:f1:e8:b5:06:fd:cc:a4:18:f6:92:
                    e5:8b:12:93:ac:da:a2:eb:f0:84:af:a1:23:ee:7c:
                    a9:55:49:6c:3a:fe:77:c7:c1:b0:52:03:e7:44:cd:
                    bc:79:d4:40:1a:98:b3:d8:d5:29:f5:c2:aa:42:be:
                    b2:d3:2e:f1:fe:83:04:18:0d:50:66:85:27:fb:ed:
                    72:dd:86:4d:a4:c4:c3:f2:2d:df:d3:10:cc:93:12:
                    f3:58:a9:9a:90:d4:5c:13:c5:8e:71:67:38:32:81:
                    cc:b4:16:3d:a2:e5:2f:7b:d8:2f:27:10:2a:f2:bf:
                    cc:fe:96:14:69:f8:62:13:a3:1c:5e:f4:8e:e9:71:
                    57:00:b7:10:79:27:0e:9d:c2:61:0c:77:09:b9:00:
                    d1:84:35:5e:fc:82:da:67:d2:cd:60:a2:b5:4a:ff:
                    5e:5c:d5:c5:bd:1e:59:80:a3:04:90:a4:70:41:78:
                    52:f6:6a:ba:70:18:a2:c6:50:e1:ef:90:ea:58:74:
                    00:78:56:5c:35:44:ac:1f:d4:4b:57:e7:0e:87:c3:
                    39:7f:37:91:75:f4:88:df:46:ce:83:f3:b6:10:c3:
                    fd:d4:4d:8b:20:48:cf:9f:62:aa:db:8c:3f:b2:94:
                    d5:1e:97:10:91:2f:f1:f4:54:41:e2:60:3f:8e:13:
                    cc:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:9E:9E:E9:79:87:6C:03:2A:44:94:99:E2:E5:AA:9C:2F:B8:1F:6F
            X509v3 Authority Key Identifier:
                keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/oZ6e6XmHbAMqRJSZ4uWqnC-4H28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.143.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:e4:6a:ba:94:8e:e8:51:8f:0e:9c:47:c3:11:a4:dd:f6:b7:
         25:7d:43:9d:6e:2a:1b:02:8d:2c:3d:5d:16:b9:ef:ef:8a:00:
         b9:25:c8:15:91:4b:b2:41:4b:e7:c3:3f:c5:46:9a:12:9b:a4:
         1c:92:1a:15:49:e2:7c:51:ba:f9:91:0b:eb:ff:d1:e5:d3:12:
         ac:3a:db:bb:90:bd:b2:2b:30:80:ac:1b:87:93:aa:3c:21:4a:
         90:f1:bc:36:4c:e9:2b:eb:de:0f:3f:ba:56:a7:4b:18:ef:ca:
         c0:1c:12:ef:96:3f:b5:98:d5:64:d7:ec:b2:8d:68:0d:7a:c6:
         ca:22:77:d7:97:69:0a:a7:db:c7:45:f0:27:f2:6b:86:97:e3:
         21:9b:58:7e:a1:e6:b1:77:2a:46:4f:0d:99:36:7e:99:96:a4:
         bc:e0:e8:e7:7a:ce:c0:84:3b:30:5a:e3:bf:4d:5e:2b:9f:d2:
         b0:56:35:8e:07:0b:75:bf:59:ed:19:d9:2a:67:4a:94:a9:0c:
         25:7c:70:a3:71:91:f7:6a:ef:f7:12:bc:c9:00:53:1b:7c:2b:
         dd:4a:ad:da:86:46:b0:d2:81:b3:e2:60:ea:4f:fc:e2:21:d4:
         e0:b4:33:4a:73:0e:af:38:65:3f:53:31:73:3e:e9:f6:1d:9a:
         ec:60:c0:c4
-----BEGIN CERTIFICATE-----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Generated at Tue Aug 22 09:20:09 2023 by rpki-client on console-ams.rpki-client.org