Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/mgd3VD7WJpc8Ny_IHH_XUUkyXI4.roa
File:                     mgd3VD7WJpc8Ny_IHH_XUUkyXI4.roa (raw, json)
Hash identifier:          +H0bz+kPBXNa7sa6U9IdCJJuBxQGPGnbJdeqTh7Ykkw=
Subject key identifier:   9A:07:77:54:3E:D6:26:97:3C:37:2F:C8:1C:7F:D7:51:49:32:5C:8E
Certificate issuer:       /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial:       018A80B7EE597AF83BA306B9F84AA7859F4B
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/mgd3VD7WJpc8Ny_IHH_XUUkyXI4.roa
Signing time:             Sun 10 Sep 2023 20:10:52 +0000
ROA not before:           Sun 10 Sep 2023 20:10:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     2856
IP address blocks:        92.41.255.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:80:b7:ee:59:7a:f8:3b:a3:06:b9:f8:4a:a7:85:9f:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
        Validity
            Not Before: Sep 10 20:10:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9a0777543ed626973c372fc81c7fd75149325c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:43:4f:bd:7a:75:19:ef:30:91:be:55:db:e2:
                    b9:8f:c7:4a:73:9c:7f:1f:f8:af:c1:de:8b:59:2f:
                    4f:c8:0e:49:46:b3:f8:83:db:45:ab:13:66:e9:f5:
                    44:cc:04:e6:e1:34:6d:28:9f:44:ad:69:4a:a6:e6:
                    42:47:1a:e4:1e:7f:cb:e8:9b:f2:92:34:c3:1e:f8:
                    00:40:3e:9f:e4:bd:f1:59:89:70:1f:fc:e5:24:0e:
                    d2:48:b4:fb:71:7f:d8:04:67:55:9f:3c:99:d7:05:
                    ff:cd:cd:86:60:7a:b9:d4:cc:40:fe:b5:e2:23:64:
                    c0:12:4c:3a:35:b5:99:13:a5:c3:3b:7e:f7:b8:2d:
                    2d:1f:89:7a:2a:de:9c:a5:0c:09:5f:5e:4f:d3:c0:
                    54:1d:74:8e:ec:90:eb:f7:c1:e6:34:1f:04:d9:28:
                    6f:ee:53:14:bc:1e:50:f3:5c:4f:c9:35:d8:a4:3f:
                    62:47:a2:c9:b7:fe:9f:ed:ac:64:90:1d:00:9c:c2:
                    30:40:93:be:9e:41:48:50:76:98:c6:83:da:34:70:
                    86:61:59:44:99:9c:ae:5c:81:fa:b4:bc:7d:63:cd:
                    f3:17:8d:d9:27:44:d1:42:ee:95:fc:38:8c:ae:c0:
                    9f:2c:7d:e2:16:d1:c4:8d:cb:90:b2:98:0f:31:17:
                    17:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:07:77:54:3E:D6:26:97:3C:37:2F:C8:1C:7F:D7:51:49:32:5C:8E
            X509v3 Authority Key Identifier:
                keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/mgd3VD7WJpc8Ny_IHH_XUUkyXI4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.41.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:24:a1:9b:a6:48:db:0c:32:cb:7b:33:6d:02:56:2d:99:26:
         7e:e5:1b:16:6f:af:6b:d7:1e:c9:81:eb:37:bd:77:77:dc:43:
         84:36:88:7c:04:8b:99:81:85:f5:a7:e6:7f:b8:fc:30:07:df:
         0a:30:bc:c9:cb:be:46:e0:49:33:91:11:4f:56:fe:1b:0e:dd:
         02:58:84:22:12:5a:12:1f:35:37:04:62:79:d8:dc:e6:49:98:
         9d:f7:bf:8f:90:19:b0:12:cb:25:b3:76:80:fe:21:98:61:41:
         67:72:8d:1d:a9:ac:f5:9b:0c:f3:c4:9e:b0:ea:fd:31:20:7e:
         8d:80:16:59:ad:54:95:08:18:77:5b:d5:46:84:03:29:d7:c6:
         99:b3:a5:9d:f2:66:38:f9:95:c5:5e:89:bb:2c:e2:92:ac:94:
         17:89:94:9b:38:db:61:9b:64:6e:30:09:f6:a9:4c:42:ac:5b:
         7b:68:cc:fa:70:c1:c0:e9:b3:bb:2f:a1:e6:81:3c:09:b9:ff:
         48:4b:01:a0:5c:fb:6d:87:38:45:73:a4:ce:20:8e:0c:0b:d8:
         2c:18:6a:49:e6:88:7e:86:4b:fa:b9:2c:cb:b5:96:db:17:0d:
         44:da:16:dd:15:de:c6:26:ee:1f:5e:50:ba:9d:8b:4a:ea:1e:
         60:04:ca:e8
-----BEGIN CERTIFICATE-----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Generated at Sun Sep 10 21:06:23 2023 by rpki-client on console-fra.rpki-client.org