Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/8JDuvlArh_fJq_mJtW_Qswbf8Ro.roa
File:                     8JDuvlArh_fJq_mJtW_Qswbf8Ro.roa (raw, json)
Hash identifier:          2kPSc0bzGTlBgbMErpXHOUdzHMTyUpeHRObWNfMjnBo=
Subject key identifier:   F0:90:EE:BE:50:2B:87:F7:C9:AB:F9:89:B5:6F:D0:B3:06:DF:F1:1A
Certificate issuer:       /CN=a0af3d8551fbdd3b62f4ffdfd59cad4161e4471e
Certificate serial:       01896FD9B8CDD957DE20FA52FB697CF0F8E6
Authority key identifier: A0:AF:3D:85:51:FB:DD:3B:62:F4:FF:DF:D5:9C:AD:41:61:E4:47:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oK89hVH73Tti9P_f1ZytQWHkRx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/8JDuvlArh_fJq_mJtW_Qswbf8Ro.roa
Signing time:             Wed 19 Jul 2023 20:31:26 +0000
ROA not before:           Wed 19 Jul 2023 20:31:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210644
IP address blocks:        185.80.91.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:6f:d9:b8:cd:d9:57:de:20:fa:52:fb:69:7c:f0:f8:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0af3d8551fbdd3b62f4ffdfd59cad4161e4471e
        Validity
            Not Before: Jul 19 20:31:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f090eebe502b87f7c9abf989b56fd0b306dff11a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:78:ab:e3:70:6d:b2:80:ed:2e:02:38:97:87:
                    2c:62:fd:37:27:a7:7c:39:ac:ae:f0:b3:3e:48:ad:
                    e2:cb:fe:27:43:c2:e4:11:36:f9:b5:35:a5:60:2d:
                    c8:84:71:6b:7a:e3:34:3f:f1:b8:fe:54:5a:af:e4:
                    2d:9c:c8:fd:97:02:70:f0:96:97:5e:61:a6:0d:f5:
                    bb:e5:ed:ae:6b:4e:39:87:ff:e6:7d:b2:23:32:74:
                    53:6a:45:c2:03:86:36:d1:96:d1:11:af:21:b6:a9:
                    7d:44:7c:1e:c8:70:3a:f0:c2:ad:17:6e:01:67:d9:
                    c4:0e:c5:74:f9:a1:23:95:86:90:2b:8b:97:d3:97:
                    ef:76:67:e5:fe:2a:ab:04:d2:ab:ac:68:35:1c:62:
                    af:5f:7d:0a:8e:76:c2:fe:40:80:9f:7c:13:a9:64:
                    f5:7e:25:b2:c9:13:20:fc:5b:6a:ce:ab:4c:52:6c:
                    5b:a0:19:44:f6:63:a9:d4:06:08:a2:6e:b3:ff:20:
                    ad:77:6d:e3:e0:b9:bf:bb:46:75:fb:79:7b:b4:6d:
                    95:2e:31:83:26:ea:9d:3b:23:26:ad:9a:70:2d:cd:
                    45:d5:51:a7:f9:d8:24:4e:e4:51:45:f1:36:9b:b3:
                    91:39:f2:4c:94:4d:64:5d:65:0b:d5:b6:e3:8c:a8:
                    de:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:90:EE:BE:50:2B:87:F7:C9:AB:F9:89:B5:6F:D0:B3:06:DF:F1:1A
            X509v3 Authority Key Identifier:
                keyid:A0:AF:3D:85:51:FB:DD:3B:62:F4:FF:DF:D5:9C:AD:41:61:E4:47:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oK89hVH73Tti9P_f1ZytQWHkRx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/8JDuvlArh_fJq_mJtW_Qswbf8Ro.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c566c7-3cac-45a9-82a1-04b09057522f/1/oK89hVH73Tti9P_f1ZytQWHkRx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.80.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:56:02:dd:d6:91:84:7e:36:75:83:84:f0:08:79:79:5d:8a:
         b5:cd:55:f8:9b:de:3c:ce:22:f5:b2:d2:e2:f4:1c:d2:b1:33:
         93:01:ac:02:0d:6d:69:ca:51:79:2d:a1:76:0c:a1:11:38:f1:
         12:1c:af:cc:7d:b9:83:33:e2:35:0b:89:31:d9:58:6e:8f:e3:
         a9:6a:24:ec:46:b6:6f:aa:bf:11:91:e7:d9:c6:7b:f8:4d:1d:
         d9:15:4b:4c:75:f0:4b:1a:1e:f8:9c:7d:32:c6:64:59:a0:78:
         22:fb:30:91:f4:92:56:e6:6d:fe:ff:4d:d5:78:8c:bf:e3:af:
         76:7a:6b:70:77:22:ee:5c:f1:6d:96:f3:d4:c8:b2:ac:26:9f:
         62:16:f0:34:c1:e8:16:f5:4f:25:15:83:b0:e1:47:65:ec:b0:
         ef:54:ea:93:0d:31:80:c8:e7:64:2e:08:cf:90:a3:08:3f:63:
         fd:b1:b1:4b:8d:8b:6d:d6:47:e7:92:b1:2f:05:8d:b3:32:73:
         67:b0:97:9a:5c:0f:01:b4:a4:8a:84:97:82:77:09:cf:91:fb:
         e6:2a:c7:19:62:50:0b:a5:b6:e9:1f:79:96:84:81:86:52:5c:
         1c:2a:65:d0:e5:51:bf:f3:59:54:3d:44:b6:d9:c2:9e:a5:d5:
         d2:81:43:06
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlv2bjN2VfeIPpS+2l88PjmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYWYzZDg1NTFmYmRkM2I2MmY0ZmZkZmQ1OWNhZDQxNjFl
NDQ3MWUwHhcNMjMwNzE5MjAzMTI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDkwZWViZTUwMmI4N2Y3YzlhYmY5ODliNTZmZDBiMzA2ZGZmMTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnir43BtsoDtLgI4l4csYv03J6d8
Oayu8LM+SK3iy/4nQ8LkETb5tTWlYC3IhHFreuM0P/G4/lRar+QtnMj9lwJw8JaX
XmGmDfW75e2ua045h//mfbIjMnRTakXCA4Y20ZbREa8htql9RHweyHA68MKtF24B
Z9nEDsV0+aEjlYaQK4uX05fvdmfl/iqrBNKrrGg1HGKvX30KjnbC/kCAn3wTqWT1
fiWyyRMg/FtqzqtMUmxboBlE9mOp1AYIom6z/yCtd23j4Lm/u0Z1+3l7tG2VLjGD
JuqdOyMmrZpwLc1F1VGn+dgkTuRRRfE2m7OROfJMlE1kXWUL1bbjjKjeHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPCQ7r5QK4f3yav5ibVv0LMG3/EaMB8GA1UdIwQY
MBaAFKCvPYVR+907YvT/39WcrUFh5EceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0s4OWhWSDczVHRpOVBfZjFaeXRRV0hrUng0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9jNTY2YzctM2NhYy00NWE5LTgyYTEt
MDRiMDkwNTc1MjJmLzEvOEpEdXZsQXJoX2ZKcV9tSnRXX1Fzd2JmOFJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9jNTY2YzctM2NhYy00NWE5LTgyYTEtMDRiMDkwNTc1MjJm
LzEvb0s4OWhWSDczVHRpOVBfZjFaeXRRV0hrUng0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVBbMA0G
CSqGSIb3DQEBCwUAA4IBAQCHVgLd1pGEfjZ1g4TwCHl5XYq1zVX4m948ziL1stLi
9BzSsTOTAawCDW1pylF5LaF2DKEROPESHK/MfbmDM+I1C4kx2Vhuj+OpaiTsRrZv
qr8RkefZxnv4TR3ZFUtMdfBLGh74nH0yxmRZoHgi+zCR9JJW5m3+/03VeIy/4692
emtwdyLuXPFtlvPUyLKsJp9iFvA0wegW9U8lFYOw4Udl7LDvVOqTDTGAyOdkLgjP
kKMIP2P9sbFLjYtt1kfnkrEvBY2zMnNnsJeaXA8BtKSKhJeCdwnPkfvmKscZYlAL
pbbpH3mWhIGGUlwcKmXQ5VG/81lUPUS22cKepdXSgUMG
-----END CERTIFICATE-----
Generated at Sun Sep 10 10:13:35 2023 by rpki-client on console-fra.rpki-client.org