Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/0e3artqiAs0i_TsFidHAwMky3Bw.roa
File:                     0e3artqiAs0i_TsFidHAwMky3Bw.roa (raw, json)
Hash identifier:          jM4d5+SXJ77Iyp0E+3GdfxXiiB0RC3/vIXUEDP/cvTs=
Subject key identifier:   D1:ED:DA:AE:DA:A2:02:CD:22:FD:3B:05:89:D1:C0:C0:C9:32:DC:1C
Certificate issuer:       /CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
Certificate serial:       01856F42BC8FE356EB2C62B95247752A3843
Authority key identifier: 8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/0e3artqiAs0i_TsFidHAwMky3Bw.roa
Signing time:             Sun 01 Jan 2023 21:35:22 +0000
ROA not before:           Sun 01 Jan 2023 21:35:22 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209287
IP address blocks:        82.199.62.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:42:bc:8f:e3:56:eb:2c:62:b9:52:47:75:2a:38:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c7f325f9aaeb93a83c39e78145c41937d586b77
        Validity
            Not Before: Jan  1 21:35:22 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d1eddaaedaa202cd22fd3b0589d1c0c0c932dc1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:cd:01:29:4c:10:3e:9c:76:ed:6d:09:a2:aa:
                    20:d9:ba:50:e5:51:68:de:e5:36:de:e7:67:b7:65:
                    52:18:71:df:27:79:c3:75:31:62:b6:60:ed:0e:31:
                    99:c1:87:95:36:6e:cb:ce:99:e6:f7:c6:b5:a6:92:
                    c9:fa:59:d1:22:1a:4d:35:78:d2:cc:4a:fa:ed:90:
                    7b:1f:9d:03:22:0d:13:9c:94:81:e2:e9:0b:e4:ee:
                    70:4c:b1:74:cc:41:9d:91:5c:52:27:b7:ca:77:8c:
                    78:c9:d5:89:3e:69:1b:8c:44:b3:f1:65:fb:24:74:
                    b6:64:e2:10:a0:38:24:0a:ab:99:99:7c:80:e8:6c:
                    6d:83:7e:6b:75:49:49:7c:ed:71:25:db:eb:40:2b:
                    f9:b8:1e:0b:a3:fe:2c:08:96:17:f4:3c:34:2d:09:
                    98:82:0b:26:02:36:1a:01:e2:7e:bf:45:e5:4e:d7:
                    93:d0:94:fc:c5:83:c4:8e:04:33:26:72:5c:a4:ba:
                    28:c3:63:84:88:5a:80:bd:00:0f:c8:5f:3d:df:6b:
                    df:41:bb:e5:df:b9:62:b7:5b:d8:56:fa:7a:98:a2:
                    ea:2d:a9:9f:f8:82:cb:2f:ac:7e:b4:8d:d6:c9:52:
                    05:bf:3d:7c:4c:6c:c4:56:15:12:54:68:09:d2:8a:
                    51:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:ED:DA:AE:DA:A2:02:CD:22:FD:3B:05:89:D1:C0:C0:C9:32:DC:1C
            X509v3 Authority Key Identifier:
                keyid:8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/0e3artqiAs0i_TsFidHAwMky3Bw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.199.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:85:4b:16:4b:3b:b6:77:3c:ff:7c:a4:05:c5:3a:ac:8c:69:
         80:02:07:9e:f9:3e:3b:c1:ba:8c:a7:fd:f2:6a:25:9e:93:4e:
         66:50:4a:6e:05:cf:40:ab:42:8b:ad:66:48:7e:f6:ca:ac:f9:
         66:85:a2:e4:06:6c:73:4f:96:1e:b0:d6:cf:62:35:74:37:13:
         a5:4b:0a:25:73:6c:3a:57:dc:6f:2d:c5:98:49:ac:9d:ba:95:
         4c:05:2a:8a:f3:c3:f1:23:e6:bc:58:ca:2b:ac:6b:4e:d0:06:
         ea:f2:28:5a:a3:ef:7a:bf:c7:6d:93:cd:8e:2a:18:13:26:83:
         41:c4:d3:ea:59:08:62:89:8c:54:d8:ce:d8:30:10:b8:95:31:
         72:2a:4a:c1:99:7b:cc:2b:c6:4b:e3:92:b9:37:9a:d6:ed:7a:
         8f:6b:2c:7d:9c:b4:c0:f4:76:cc:3a:ee:2c:2c:5c:f4:38:ec:
         8b:f9:0d:5f:4b:40:d1:c0:5e:15:04:f3:02:31:f6:ee:b2:34:
         18:82:0c:6c:2c:47:70:d6:5f:7c:82:d2:fd:e2:e7:88:b8:cf:
         91:ed:52:28:13:cf:3e:b9:ff:d2:56:ac:5a:4a:b0:03:eb:0d:
         4b:74:60:dc:7a:fe:c0:ff:37:a7:35:8c:15:9d:a5:c2:e7:5a:
         dc:d8:6a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:03:07 2024 by rpki-client on console-ams.rpki-client.org