Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/wsWdFqPF8PZeaLSvPUdb62Huyjc.roa
File:                     wsWdFqPF8PZeaLSvPUdb62Huyjc.roa (raw, json)
Hash identifier:          2DRqBiFcqAcoBT8mMX4vVEoYQ+9k8jJNZ4M/XEhiNjU=
Subject key identifier:   C2:C5:9D:16:A3:C5:F0:F6:5E:68:B4:AF:3D:47:5B:EB:61:EE:CA:37
Certificate issuer:       /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial:       018798E08651DEF3C89E90BB7DDEDD478020
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/wsWdFqPF8PZeaLSvPUdb62Huyjc.roa
Signing time:             Wed 19 Apr 2023 09:37:43 +0000
ROA not before:           Wed 19 Apr 2023 09:37:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49022
IP address blocks:        185.105.238.0/24 maxlen: 24
                          45.139.8.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:98:e0:86:51:de:f3:c8:9e:90:bb:7d:de:dd:47:80:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
        Validity
            Not Before: Apr 19 09:37:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=c2c59d16a3c5f0f65e68b4af3d475beb61eeca37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d4:b5:bb:37:97:7b:84:fa:18:20:0f:cf:48:
                    41:4d:2c:59:03:e4:87:16:2c:06:69:21:0e:68:51:
                    86:0f:6d:1b:7d:d4:2d:b0:d4:07:7c:79:fe:ec:26:
                    39:82:ed:aa:67:d0:e8:37:9d:88:5a:b1:b1:c2:01:
                    c6:a7:87:d8:80:07:df:7e:a9:08:80:82:36:f6:78:
                    d9:a3:bc:fd:24:97:0e:a5:4d:0e:dc:5c:f6:28:34:
                    69:95:53:4c:f5:24:69:97:28:ab:0c:14:95:71:7a:
                    69:c7:6f:dd:99:07:42:67:dd:7f:1d:a1:21:b3:68:
                    37:65:11:9b:4d:78:43:92:0c:4a:07:94:4e:e1:c2:
                    54:30:7e:f4:76:82:71:bb:74:c8:bc:46:c7:80:78:
                    68:f3:de:91:43:bf:f9:c2:26:2f:30:78:cd:64:d2:
                    6f:5d:29:6c:f4:93:8f:41:3c:fd:e7:9e:5f:f5:b6:
                    80:6a:f0:21:dd:a3:57:f3:1a:e1:bb:1c:33:a6:89:
                    4e:96:f3:3a:3e:67:58:35:88:dd:d8:e4:bd:5a:bd:
                    ab:a4:73:e5:2f:1b:da:b9:8e:8b:d6:ae:37:24:aa:
                    62:4b:d9:d4:cb:84:e9:a9:2b:2c:4b:06:97:23:3a:
                    66:22:ce:e3:bc:36:b2:12:9a:36:12:05:b2:7f:8c:
                    fa:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:C5:9D:16:A3:C5:F0:F6:5E:68:B4:AF:3D:47:5B:EB:61:EE:CA:37
            X509v3 Authority Key Identifier:
                keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/wsWdFqPF8PZeaLSvPUdb62Huyjc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.139.8.0/24
                  185.105.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:14:5d:28:aa:f2:13:69:8b:8a:8e:4a:59:0d:ec:20:b2:01:
         1f:ac:80:0d:8e:1a:96:25:23:68:c2:1a:75:ae:f3:0d:eb:6c:
         6e:4a:3a:50:97:52:dc:b5:92:49:6e:c1:06:c4:93:88:94:9a:
         97:42:fd:81:0d:19:86:4d:f7:30:25:2b:75:21:f7:67:40:26:
         4e:61:19:25:75:02:f5:4b:88:d6:56:df:1e:90:99:10:ee:d0:
         8a:82:a9:8e:ee:17:04:17:a6:73:12:21:43:b2:16:f1:d6:0a:
         38:dc:f8:07:99:bb:66:a1:5d:0b:25:9e:59:90:a6:8f:2d:80:
         e5:70:8b:03:d7:2e:a5:c6:29:eb:c1:54:11:69:c9:76:26:53:
         e0:22:c2:4b:9b:39:75:82:77:94:83:c3:10:96:e8:70:ea:ac:
         70:ec:15:2b:f7:0c:68:ea:68:2f:44:ca:fc:d1:c5:f1:dc:53:
         2b:17:36:4e:39:eb:fb:36:20:bd:da:89:42:c1:0e:0b:d4:c7:
         f7:2f:53:55:23:cf:f1:69:1b:2a:3b:69:7d:81:a1:fc:74:6f:
         b4:66:58:c6:57:a5:31:65:0c:12:ab:5e:39:75:ca:ea:1a:11:
         2c:6d:09:2e:61:99:8e:44:06:d6:08:00:cd:92:ca:bc:5e:ae:
         3e:94:fc:05
-----BEGIN CERTIFICATE-----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Generated at Mon Sep 25 19:59:00 2023 by rpki-client on console-ams.rpki-client.org