Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/dwdMZV_gkjWArdUWiChItnBoRuE.roa
File:                     dwdMZV_gkjWArdUWiChItnBoRuE.roa (raw, json)
Hash identifier:          GB1YVRJcIGjmBVbD3j+Bn00hjFqZ7bWXLDTpTY49kRQ=
Subject key identifier:   77:07:4C:65:5F:E0:92:35:80:AD:D5:16:88:28:48:B6:70:68:46:E1
Certificate issuer:       /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial:       0189C63745F8EA898A456A0521D2D095DCC7
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/dwdMZV_gkjWArdUWiChItnBoRuE.roa
Signing time:             Sat 05 Aug 2023 15:00:58 +0000
ROA not before:           Sat 05 Aug 2023 15:00:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200740
IP address blocks:        185.81.219.0/24 maxlen: 24
                          185.81.216.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:c6:37:45:f8:ea:89:8a:45:6a:05:21:d2:d0:95:dc:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
        Validity
            Not Before: Aug  5 15:00:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=77074c655fe0923580add516882848b6706846e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:76:74:bd:a8:e4:e6:76:76:6f:7d:51:b4:c3:
                    c3:c6:74:0f:26:5c:74:6b:0a:9b:19:87:57:d3:bb:
                    19:e7:c1:09:7c:2c:b6:d0:e4:72:ec:c1:2b:c2:89:
                    ba:f2:40:e4:55:c1:34:8b:8b:35:d0:bd:24:4d:cf:
                    37:43:34:d3:e0:cf:f9:85:c0:5b:d0:fb:06:2d:58:
                    15:d8:38:c4:74:aa:ea:12:25:d0:af:3a:de:65:37:
                    ac:4e:b2:d6:5c:80:3b:0f:60:4e:40:a7:47:4b:2d:
                    05:a6:56:5d:24:25:e5:6d:72:c0:75:1b:dd:1a:9a:
                    ba:08:2d:7a:09:78:e2:d1:c2:27:1e:84:e4:e4:f1:
                    12:db:29:70:7e:36:0d:66:f6:60:37:1e:41:14:ad:
                    28:cc:84:d3:d3:3c:54:ca:3e:f8:5f:96:05:56:88:
                    e9:e8:1b:35:95:12:8a:c3:ab:5f:40:41:d4:8a:ff:
                    c9:5f:18:e6:c8:2b:3e:28:a0:00:2f:53:f3:bf:b6:
                    78:66:70:5e:3a:16:96:82:c8:ea:d1:ee:b6:b7:e5:
                    b0:06:54:22:58:10:5e:09:62:25:4b:72:e9:7c:84:
                    65:65:8b:f6:32:85:67:22:cd:08:e6:0a:8b:a0:38:
                    0c:2a:7b:dc:85:95:dd:c7:d3:e1:23:87:ca:86:12:
                    d7:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:07:4C:65:5F:E0:92:35:80:AD:D5:16:88:28:48:B6:70:68:46:E1
            X509v3 Authority Key Identifier:
                keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/dwdMZV_gkjWArdUWiChItnBoRuE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.81.216.0/24
                  185.81.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:c0:e9:bc:fe:c3:01:65:d6:a6:ec:b0:6b:fc:a1:9b:ba:d3:
         b6:8e:9e:8a:fb:7a:8f:e8:80:1d:e5:78:0f:1d:d8:4f:91:cb:
         a5:1d:23:27:ce:2b:3d:e6:27:d6:aa:ba:1f:8d:c8:85:37:9c:
         5e:ef:ed:e0:b8:ca:12:df:7c:d2:79:f6:14:e0:95:da:ab:91:
         76:61:e3:a2:b8:4a:0b:88:1f:81:c9:4c:a6:99:66:26:14:35:
         85:19:c6:ae:c1:99:ef:7e:7f:ee:21:3b:5a:df:57:19:bd:92:
         db:d0:05:61:4c:00:06:65:f7:45:25:55:93:c0:4b:f2:fc:03:
         8f:d3:25:01:79:10:e0:a6:6a:11:5b:57:80:99:a4:9f:e8:22:
         83:8c:90:b6:e6:ac:87:4f:31:91:e1:6b:1d:ad:5e:13:1a:0f:
         62:77:5c:17:46:fb:e3:ee:a3:f6:7b:36:b3:49:df:e5:94:66:
         3b:a3:93:8d:ce:c3:47:86:b7:dd:72:6b:6e:0b:5f:60:7f:c5:
         5d:e4:84:0e:12:05:c1:5a:51:de:b7:79:6f:a1:72:19:88:f1:
         db:4e:42:fb:4f:f6:87:e9:de:c7:36:99:a0:c2:c1:de:1f:56:
         2a:03:71:ed:61:55:66:f9:fe:79:5e:aa:1f:e3:27:db:5e:8f:
         59:f9:0d:4b
-----BEGIN CERTIFICATE-----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Generated at Sat Aug 5 17:17:36 2023 by rpki-client on console-fra.rpki-client.org