Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/tgDKO3POuSOCbUM3N9gxIbTstck.roa
File:                     tgDKO3POuSOCbUM3N9gxIbTstck.roa (raw, json)
Hash identifier:          rjx5jhpwjlRVvisM8teHhbRRV3HH+hAEIcFjoLk6pdg=
Subject key identifier:   B6:00:CA:3B:73:CE:B9:23:82:6D:43:37:37:D8:31:21:B4:EC:B5:C9
Certificate issuer:       /CN=ec5ada0dc900a13c83b70ac3f587fb8c2e1df030
Certificate serial:       01856ED4D3B1BCB79A8DBD55586FFE741668
Authority key identifier: EC:5A:DA:0D:C9:00:A1:3C:83:B7:0A:C3:F5:87:FB:8C:2E:1D:F0:30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/tgDKO3POuSOCbUM3N9gxIbTstck.roa
Signing time:             Sun 01 Jan 2023 19:35:19 +0000
ROA not before:           Sun 01 Jan 2023 19:35:19 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     0
IP address blocks:        194.110.58.0/23 maxlen: 24
                          194.110.57.0/24 maxlen: 24
                          178.218.148.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:d4:d3:b1:bc:b7:9a:8d:bd:55:58:6f:fe:74:16:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec5ada0dc900a13c83b70ac3f587fb8c2e1df030
        Validity
            Not Before: Jan  1 19:35:19 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b600ca3b73ceb923826d433737d83121b4ecb5c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:27:1f:03:4e:d2:e3:30:f7:cf:16:ab:f2:03:
                    a1:03:2d:11:37:67:c9:c9:2a:15:49:d3:f3:54:33:
                    54:86:fa:2f:e0:06:c6:01:db:a1:e0:3b:5a:db:57:
                    38:4b:2b:a3:a2:79:27:6f:3b:dc:62:db:50:26:5f:
                    d1:f7:5c:4f:33:8f:c5:e7:9d:2a:bd:a3:7e:43:c1:
                    b3:77:b5:02:40:25:dd:1c:62:c0:bc:af:4c:ca:7c:
                    f6:90:65:af:77:9d:5c:ca:b0:e7:c4:4a:1e:78:03:
                    b3:6e:51:c6:66:27:43:dc:a8:d3:79:95:0c:1a:98:
                    2b:47:04:85:65:99:60:1d:59:c9:0d:6e:a0:fe:64:
                    1a:48:f0:90:8f:3d:e5:ef:6a:6d:88:db:e9:f1:2e:
                    2b:ed:14:8e:d1:33:89:31:2f:7b:b6:df:2e:a7:fc:
                    60:35:3d:25:b7:6a:fa:d8:01:b6:e5:bb:55:17:86:
                    2b:69:89:0a:58:b5:68:73:94:df:63:e0:ba:3b:86:
                    77:8f:a2:5f:a4:b1:42:46:6c:f4:4d:7b:28:2e:9d:
                    b8:0b:f0:5d:55:05:83:ef:8b:5f:c7:ce:75:9a:96:
                    b2:01:31:8c:bc:9c:a5:38:5f:00:60:c2:3d:f5:7f:
                    c4:39:89:cd:e3:79:3e:12:fc:40:aa:e2:fe:66:da:
                    e4:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:00:CA:3B:73:CE:B9:23:82:6D:43:37:37:D8:31:21:B4:EC:B5:C9
            X509v3 Authority Key Identifier:
                keyid:EC:5A:DA:0D:C9:00:A1:3C:83:B7:0A:C3:F5:87:FB:8C:2E:1D:F0:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/tgDKO3POuSOCbUM3N9gxIbTstck.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.218.148.0/22
                  194.110.57.0-194.110.59.255

    Signature Algorithm: sha256WithRSAEncryption
         63:23:9b:52:db:8e:5e:a3:c9:c4:aa:a5:30:4f:70:a6:97:31:
         8c:d5:84:66:5d:3a:f6:a3:70:1f:4e:54:40:ac:78:09:59:e5:
         db:cb:c6:a6:08:07:d5:3b:f2:ec:20:60:b7:cf:0b:63:76:f1:
         52:f2:cc:7e:54:bb:17:8f:6e:64:3c:e1:fe:dc:35:05:d9:12:
         a7:11:ea:60:27:0f:64:2e:a1:24:67:25:aa:9a:52:6e:bb:66:
         8b:5c:4c:45:cf:4b:e9:ff:b3:69:79:b6:26:3a:ad:44:13:13:
         24:09:ed:f8:61:83:68:ab:41:db:d4:aa:2c:7a:2c:c6:db:4a:
         8b:65:bc:2b:a4:aa:54:88:1e:7c:16:ac:33:a3:09:1d:7b:c6:
         4e:33:ff:d2:c3:9a:5b:08:35:e7:9e:1f:14:e0:41:fb:bc:11:
         d8:03:5d:43:4a:c1:f3:1e:a0:5f:b8:f3:ce:d0:5b:e0:fd:1c:
         86:c7:05:c5:ad:b9:cc:ef:1c:09:36:8b:a8:18:74:58:d0:46:
         b3:5d:b9:7f:95:98:82:1e:e8:4e:96:23:2c:6a:20:55:7d:e3:
         c9:34:48:bd:28:c4:5f:bf:98:89:b3:d3:3a:a9:45:b8:a4:a1:
         02:b6:82:eb:22:8a:0e:49:d1:f2:75:61:d5:37:d8:cd:b4:2a:
         64:a7:4f:38
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:44 2023 by rpki-client on console-ams.rpki-client.org