Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/5c0cc9-f761-4e7a-8155-ba9c371e0b66/1/Ja9ewrxX2-4sG0uhJdMR5MUdd-s.roa
File:                     Ja9ewrxX2-4sG0uhJdMR5MUdd-s.roa (raw, json)
Hash identifier:          xcF7fHjhBcK7ga9MyHy+23s1U60NfD9zrO2PzDoOGHk=
Subject key identifier:   25:AF:5E:C2:BC:57:DB:EE:2C:1B:4B:A1:25:D3:11:E4:C5:1D:77:EB
Certificate issuer:       /CN=0a2010093f10810b1b85724ea89e294fcdccfbf2
Certificate serial:       018854467B65816D958128AF7C7CE962901D
Authority key identifier: 0A:20:10:09:3F:10:81:0B:1B:85:72:4E:A8:9E:29:4F:CD:CC:FB:F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CiAQCT8QgQsbhXJOqJ4pT83M-_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/5c0cc9-f761-4e7a-8155-ba9c371e0b66/1/Ja9ewrxX2-4sG0uhJdMR5MUdd-s.roa
Signing time:             Thu 25 May 2023 18:58:05 +0000
ROA not before:           Thu 25 May 2023 18:58:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        46.31.64.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:54:46:7b:65:81:6d:95:81:28:af:7c:7c:e9:62:90:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a2010093f10810b1b85724ea89e294fcdccfbf2
        Validity
            Not Before: May 25 18:58:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=25af5ec2bc57dbee2c1b4ba125d311e4c51d77eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c0:9d:73:bf:fe:71:05:0e:e3:3d:89:77:51:
                    7f:7b:2b:ae:f9:b1:cd:66:1f:e5:d0:0a:1b:83:90:
                    41:24:0f:9f:f1:c1:ab:50:22:d9:1e:8e:ed:a8:76:
                    0b:48:41:7f:d6:49:df:0e:27:a1:e4:5a:fb:40:fd:
                    52:90:99:3d:b7:d2:36:a4:8a:63:0d:4b:6b:f6:07:
                    b3:b6:d2:7c:d4:63:75:e7:54:68:72:a1:6b:18:06:
                    72:ea:c7:e9:38:01:57:f7:d8:52:65:69:0c:2c:e1:
                    cd:80:66:63:75:bf:9b:b3:b7:9a:bb:3f:75:3f:8b:
                    69:0b:34:a7:e7:f7:10:10:1c:28:5c:4e:e6:59:6c:
                    f4:d2:77:76:d4:94:4f:81:eb:b1:5e:e9:2d:43:24:
                    f1:da:7c:bc:18:d1:3b:e3:f2:d3:7c:ec:fb:b2:7c:
                    44:a7:29:53:ad:33:2f:f3:9a:6d:43:39:14:fc:18:
                    f2:4f:59:fc:c6:9a:75:7d:91:b1:8d:8c:06:31:27:
                    63:89:2b:5f:52:c2:aa:e8:73:36:a0:eb:d7:c0:73:
                    a5:10:f1:e2:8c:0a:8c:6f:47:03:ce:1a:9a:9e:84:
                    aa:01:81:99:91:63:9b:25:fc:6b:b9:06:5a:c3:83:
                    d1:30:b7:44:d9:4a:27:8b:f8:ea:d8:49:50:2c:f5:
                    0b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:AF:5E:C2:BC:57:DB:EE:2C:1B:4B:A1:25:D3:11:E4:C5:1D:77:EB
            X509v3 Authority Key Identifier:
                keyid:0A:20:10:09:3F:10:81:0B:1B:85:72:4E:A8:9E:29:4F:CD:CC:FB:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiAQCT8QgQsbhXJOqJ4pT83M-_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5c0cc9-f761-4e7a-8155-ba9c371e0b66/1/Ja9ewrxX2-4sG0uhJdMR5MUdd-s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/5c0cc9-f761-4e7a-8155-ba9c371e0b66/1/CiAQCT8QgQsbhXJOqJ4pT83M-_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  46.31.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:f4:fa:c6:06:44:f3:93:7e:42:60:bd:a6:45:d2:bd:ad:e1:
         d1:7f:5f:17:95:37:ee:dc:dc:1d:9e:64:d6:e6:d8:b6:df:99:
         88:6e:27:44:c5:4d:12:77:de:e7:64:30:ca:97:64:c7:01:d2:
         96:d0:a8:48:9b:57:e6:be:9d:b6:1e:b6:4f:d0:b6:74:eb:72:
         83:26:2d:b0:fd:60:87:d0:bc:4f:86:fb:a5:b6:63:dd:65:41:
         a8:fd:33:dc:3c:8b:9f:9f:30:b8:bf:63:8f:e2:5e:1c:e1:7f:
         05:a1:79:88:f9:03:62:f1:e4:7d:c8:9d:3c:a1:32:bc:84:9e:
         9d:c7:db:1f:5b:5e:5c:95:c5:d0:a2:d4:27:a2:c8:44:12:03:
         5e:49:1e:c7:78:6c:7b:53:50:fe:26:91:20:58:1f:79:96:f4:
         57:f2:c5:88:76:ac:cc:6f:8c:08:1d:c1:31:10:6d:2d:cd:1a:
         c2:7c:ad:38:63:12:60:64:ec:8f:68:32:cb:54:c0:d3:16:37:
         e2:e7:40:f0:a8:d2:b2:e8:eb:17:d6:26:a5:59:00:f6:62:fa:
         82:4a:63:cd:4b:9b:ec:ee:28:22:86:39:65:cc:f5:d5:8a:46:
         c4:ae:77:ff:e4:80:e1:64:1d:22:ca:a4:7f:ed:95:e8:e3:96:
         4c:2d:61:25
-----BEGIN CERTIFICATE-----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Generated at Sun Sep 10 15:02:26 2023 by rpki-client on console-fra.rpki-client.org