Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/mJdlNVDQF7CLhYH_5P9vnvw0-rc.roa
File:                     mJdlNVDQF7CLhYH_5P9vnvw0-rc.roa (raw, json)
Hash identifier:          wlvUoKZWjtPHTR5m/dYmBpCzejXOKxsVodatN5n/kus=
Subject key identifier:   98:97:65:35:50:D0:17:B0:8B:85:81:FF:E4:FF:6F:9E:FC:34:FA:B7
Certificate issuer:       /CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Certificate serial:       0185715E6AB534AE878C8D3262B7EA3D2859
Authority key identifier: 12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/mJdlNVDQF7CLhYH_5P9vnvw0-rc.roa
Signing time:             Mon 02 Jan 2023 07:24:51 +0000
ROA not before:           Mon 02 Jan 2023 07:24:51 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     41292
IP address blocks:        109.121.159.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:5e:6a:b5:34:ae:87:8c:8d:32:62:b7:ea:3d:28:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
        Validity
            Not Before: Jan  2 07:24:51 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9897653550d017b08b8581ffe4ff6f9efc34fab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b8:d0:4b:32:f1:e7:e8:b0:40:61:38:28:fc:
                    9b:eb:34:5b:c5:5b:99:79:fc:dd:64:7e:24:2f:c7:
                    5d:92:ec:8b:fa:4a:30:d6:84:58:95:04:55:f2:59:
                    cb:1f:52:c7:cc:f9:7b:ca:76:2e:2f:5c:ea:54:2b:
                    8d:e5:3e:d0:2c:c1:05:c7:f9:e5:b1:7d:e0:3c:5b:
                    0d:b8:16:3c:1e:9c:7d:8d:fc:51:08:1b:44:d1:0c:
                    2a:36:0d:1c:c0:63:b9:45:bf:0e:f0:70:6a:35:74:
                    54:4c:0e:49:41:02:48:7a:bb:b9:e3:ed:15:6f:20:
                    e1:46:ed:fb:90:d6:0e:0b:1a:73:09:1d:6f:d7:ac:
                    4e:a7:19:cd:78:6d:c9:ca:a2:e0:e7:43:d1:4f:76:
                    e9:c9:3a:7b:0a:b7:00:64:7f:99:1c:ad:f4:9f:96:
                    f5:2b:d2:b1:f0:1d:96:52:5c:52:38:2f:15:ac:a0:
                    d2:26:1c:14:af:a0:95:e9:33:60:79:68:3f:c3:9b:
                    9f:a9:e5:9c:0e:41:9d:b1:8e:30:06:57:70:2d:3d:
                    69:95:0b:8b:16:33:05:2e:3a:ef:eb:86:70:35:a4:
                    34:6d:ba:be:c5:6e:e0:8a:e4:94:75:ba:20:b4:34:
                    01:8a:68:a1:28:d5:de:25:90:cd:51:ab:fe:8f:23:
                    60:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:97:65:35:50:D0:17:B0:8B:85:81:FF:E4:FF:6F:9E:FC:34:FA:B7
            X509v3 Authority Key Identifier:
                keyid:12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/mJdlNVDQF7CLhYH_5P9vnvw0-rc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  109.121.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:b8:9c:91:c0:28:6a:09:65:41:fb:c1:a9:12:b7:f0:9f:69:
         3a:4d:b9:90:30:38:73:f7:a7:6a:05:f5:a2:da:bc:ca:69:a2:
         be:f9:1c:5c:1b:7f:0e:93:dd:ab:07:21:23:11:5d:64:da:22:
         a3:cf:37:e0:6d:71:6b:b3:95:28:6c:c5:25:39:a3:2a:34:b9:
         61:10:fa:fe:af:b5:04:32:25:7a:26:3c:3d:4e:43:d4:d8:83:
         7f:a0:f1:91:fb:a5:94:4f:d1:a0:4b:cd:74:02:ca:8e:f0:4e:
         f0:19:f9:d1:0d:77:40:af:42:f7:78:90:7b:17:24:58:1a:b8:
         49:7e:c7:8e:59:7f:e6:a1:91:24:a6:5e:ef:a3:7a:93:24:8b:
         a1:8c:f2:bb:dc:45:45:85:33:f9:35:08:c6:16:60:50:0b:5b:
         fb:37:90:2f:e7:ce:5a:54:b5:be:2a:e5:e9:54:0b:6e:75:60:
         5b:9c:7f:45:eb:37:61:40:3f:4b:39:ba:5f:65:24:4b:dd:f6:
         8a:ff:c7:fd:7f:a9:3b:ed:a7:b2:53:dc:05:4d:69:47:70:7c:
         a7:af:fa:df:2f:03:55:2b:f2:fa:a2:fe:6e:d1:c0:14:53:08:
         ed:e4:e1:7d:e1:5e:7e:d1:a9:23:34:10:c4:14:e9:34:04:e6:
         1b:28:3d:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxXmq1NK6HjI0yYrfqPShZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyZWY5ZTQ5ZmVjZjI1MDllYjY3NjllZWUyY2RkNGE1MjUz
YjcxYzUwHhcNMjMwMTAyMDcyNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODk3NjUzNTUwZDAxN2IwOGI4NTgxZmZlNGZmNmY5ZWZjMzRmYWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrjQSzLx5+iwQGE4KPyb6zRbxVuZ
efzdZH4kL8ddkuyL+kow1oRYlQRV8lnLH1LHzPl7ynYuL1zqVCuN5T7QLMEFx/nl
sX3gPFsNuBY8Hpx9jfxRCBtE0QwqNg0cwGO5Rb8O8HBqNXRUTA5JQQJIeru54+0V
byDhRu37kNYOCxpzCR1v16xOpxnNeG3JyqLg50PRT3bpyTp7CrcAZH+ZHK30n5b1
K9Kx8B2WUlxSOC8VrKDSJhwUr6CV6TNgeWg/w5ufqeWcDkGdsY4wBldwLT1plQuL
FjMFLjrv64ZwNaQ0bbq+xW7giuSUdbogtDQBimihKNXeJZDNUav+jyNg4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJiXZTVQ0Bewi4WB/+T/b578NPq3MB8GA1UdIwQY
MBaAFBLvnkn+zyUJ62dp7uLN1KUlO3HFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXUtZVNmN1BKUW5yWjJudTRzM1VwU1U3Y2NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS85YzI3YzItZmRiZS00ZTM5LWJhOTIt
MWQ1ZDk0NWEwNWEzLzEvbUpkbE5WRFFGN0NMaFlIXzVQOXZudncwLXJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS85YzI3YzItZmRiZS00ZTM5LWJhOTItMWQ1ZDk0NWEwNWEz
LzEvRXUtZVNmN1BKUW5yWjJudTRzM1VwU1U3Y2NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXmfMA0G
CSqGSIb3DQEBCwUAA4IBAQASuJyRwChqCWVB+8GpErfwn2k6TbmQMDhz96dqBfWi
2rzKaaK++RxcG38Ok92rByEjEV1k2iKjzzfgbXFrs5UobMUlOaMqNLlhEPr+r7UE
MiV6Jjw9TkPU2IN/oPGR+6WUT9GgS810AsqO8E7wGfnRDXdAr0L3eJB7FyRYGrhJ
fseOWX/moZEkpl7vo3qTJIuhjPK73EVFhTP5NQjGFmBQC1v7N5Av585aVLW+KuXp
VAtudWBbnH9F6zdhQD9LObpfZSRL3faK/8f9f6k77aeyU9wFTWlHcHynr/rfLwNV
K/L6ov5u0cAUUwjt5OF94V5+0akjNBDEFOk0BOYbKD0a
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:28:38 2024 by rpki-client on console-fra.rpki-client.org