Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/ihgxA_DphbngwPXqKjuDwvWcHmI.roa
File:                     ihgxA_DphbngwPXqKjuDwvWcHmI.roa (raw, json)
Hash identifier:          U6wL/3LopZpGgRi2E3qtX9WkIAIH1Yo50E9tIU2miKo=
Subject key identifier:   8A:18:31:03:F0:E9:85:B9:E0:C0:F5:EA:2A:3B:83:C2:F5:9C:1E:62
Certificate issuer:       /CN=f360540925dbcb1a09fb65f3b29003d68f23de6b
Certificate serial:       0186125FBCEF66B2E38CB00875116635A039
Authority key identifier: F3:60:54:09:25:DB:CB:1A:09:FB:65:F3:B2:90:03:D6:8F:23:DE:6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/ihgxA_DphbngwPXqKjuDwvWcHmI.roa
Signing time:             Thu 02 Feb 2023 13:45:09 +0000
ROA not before:           Thu 02 Feb 2023 13:45:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     14618
IP address blocks:        185.169.81.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:12:5f:bc:ef:66:b2:e3:8c:b0:08:75:11:66:35:a0:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f360540925dbcb1a09fb65f3b29003d68f23de6b
        Validity
            Not Before: Feb  2 13:45:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8a183103f0e985b9e0c0f5ea2a3b83c2f59c1e62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:31:bc:93:55:2b:45:7a:b3:7a:9c:7c:28:8b:
                    b7:db:13:83:e6:54:ef:41:a6:f0:aa:72:ce:8a:dd:
                    4a:0d:9a:52:54:cb:c3:b5:34:50:00:a6:e7:ae:44:
                    9b:12:22:1e:71:8d:57:25:8a:50:e8:61:cb:32:87:
                    49:eb:f8:79:06:cc:c9:f5:b3:56:47:42:98:8a:9e:
                    9f:57:1a:c4:e4:49:2b:5f:b4:a2:a1:0c:d1:1d:34:
                    5a:06:5d:3f:bb:be:16:54:79:c6:14:d1:83:52:91:
                    f9:0b:ab:b3:ae:43:52:c0:76:17:0c:b1:97:5f:ba:
                    1e:64:e1:38:03:33:7d:38:f4:3e:8c:ba:d8:c4:72:
                    ff:d4:73:24:bc:0e:7b:28:01:3b:49:64:52:f6:24:
                    8c:d6:9a:9f:31:68:be:af:fa:32:70:67:2d:53:37:
                    dd:24:dd:98:d1:cb:8d:51:45:8b:fb:1a:18:fd:36:
                    f1:b4:30:a5:fb:c3:12:3d:50:40:11:c1:17:1d:10:
                    69:bd:3b:b3:a7:00:76:10:c0:38:cb:18:ce:c9:50:
                    89:34:23:21:b2:50:b2:e4:2a:0c:a3:b3:80:57:da:
                    eb:e8:42:a2:96:18:0f:5b:dc:e6:4c:59:d5:cf:6f:
                    7d:87:d1:de:cc:f5:e4:59:32:e5:ff:4f:5f:74:70:
                    22:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:18:31:03:F0:E9:85:B9:E0:C0:F5:EA:2A:3B:83:C2:F5:9C:1E:62
            X509v3 Authority Key Identifier:
                keyid:F3:60:54:09:25:DB:CB:1A:09:FB:65:F3:B2:90:03:D6:8F:23:DE:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/ihgxA_DphbngwPXqKjuDwvWcHmI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.169.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:93:e0:0e:7a:8f:64:c8:60:af:3c:dc:70:39:59:b7:4d:78:
         6d:cd:ab:29:4d:d1:c4:35:3d:2e:80:c0:4c:70:1a:26:e7:ac:
         38:70:09:c5:11:60:9d:31:1e:63:57:e4:6c:ef:3c:3f:5b:23:
         f3:ad:7b:6b:45:e3:d2:b1:7d:83:70:4c:0f:96:d4:79:f6:cd:
         87:64:9d:72:a6:67:fc:b9:93:aa:04:a8:56:17:cf:12:a3:4e:
         8d:04:c0:58:80:c3:2a:f3:95:55:f4:4f:3b:dc:1b:20:ec:35:
         95:a8:09:f5:bd:8d:f1:39:c3:92:e6:51:b6:62:5a:4d:47:f4:
         28:c3:1c:ac:07:47:4e:54:21:60:47:39:f2:49:9c:18:7e:8e:
         e7:b9:56:f4:ea:e8:18:19:16:b2:66:1c:63:18:46:74:9b:fb:
         bd:13:7e:3d:86:43:3b:31:29:0d:8e:fb:a8:34:c5:a7:e2:50:
         bd:de:d9:81:bc:fd:37:89:2f:9e:3a:ad:93:18:97:52:b8:b6:
         62:4e:37:ed:67:97:22:60:a2:9d:f8:7f:40:3b:82:8b:f3:53:
         dc:50:55:18:4f:8c:dc:c1:bf:73:76:c7:7f:17:a5:29:6c:f2:
         f8:c0:92:97:13:b9:47:ea:ee:e7:f1:17:3d:bd:b6:9f:c1:8d:
         f7:cb:19:b5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYYSX7zvZrLjjLAIdRFmNaA5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNjA1NDA5MjVkYmNiMWEwOWZiNjVmM2IyOTAwM2Q2OGYy
M2RlNmIwHhcNMjMwMjAyMTM0NTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTE4MzEwM2YwZTk4NWI5ZTBjMGY1ZWEyYTNiODNjMmY1OWMxZTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDG8k1UrRXqzepx8KIu32xOD5lTv
QabwqnLOit1KDZpSVMvDtTRQAKbnrkSbEiIecY1XJYpQ6GHLModJ6/h5BszJ9bNW
R0KYip6fVxrE5EkrX7SioQzRHTRaBl0/u74WVHnGFNGDUpH5C6uzrkNSwHYXDLGX
X7oeZOE4AzN9OPQ+jLrYxHL/1HMkvA57KAE7SWRS9iSM1pqfMWi+r/oycGctUzfd
JN2Y0cuNUUWL+xoY/TbxtDCl+8MSPVBAEcEXHRBpvTuzpwB2EMA4yxjOyVCJNCMh
slCy5CoMo7OAV9rr6EKilhgPW9zmTFnVz299h9HezPXkWTLl/09fdHAi8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIoYMQPw6YW54MD16io7g8L1nB5iMB8GA1UdIwQY
MBaAFPNgVAkl28saCftl87KQA9aPI95rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODJCVUNTWGJ5eG9KLTJYenNwQUQxbzhqM21zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy80ZGFlN2YtYmEwZS00Mjc3LTllOTIt
YjRmMDA3ZWY3ZTg2LzEvaWhneEFfRHBoYm5nd1BYcUtqdUR3dldjSG1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy80ZGFlN2YtYmEwZS00Mjc3LTllOTItYjRmMDA3ZWY3ZTg2
LzEvODJCVUNTWGJ5eG9KLTJYenNwQUQxbzhqM21zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAualRMA0G
CSqGSIb3DQEBCwUAA4IBAQAak+AOeo9kyGCvPNxwOVm3TXhtzaspTdHENT0ugMBM
cBom56w4cAnFEWCdMR5jV+Rs7zw/WyPzrXtrRePSsX2DcEwPltR59s2HZJ1ypmf8
uZOqBKhWF88So06NBMBYgMMq85VV9E873Bsg7DWVqAn1vY3xOcOS5lG2YlpNR/Qo
wxysB0dOVCFgRznySZwYfo7nuVb06ugYGRayZhxjGEZ0m/u9E349hkM7MSkNjvuo
NMWn4lC93tmBvP03iS+eOq2TGJdSuLZiTjftZ5ciYKKd+H9AO4KL81PcUFUYT4zc
wb9zdsd/F6UpbPL4wJKXE7lH6u7n8Rc9vbafwY33yxm1
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:54 2023 by rpki-client on console-fra.rpki-client.org