Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/QScogXnPsv73a-dT7IlcI6Wx-zc.roa
File:                     QScogXnPsv73a-dT7IlcI6Wx-zc.roa (raw, json)
Hash identifier:          xl6YytwoteYnEIaNwWxhGhnsvtk4H66yEzYm5Sts0n0=
Subject key identifier:   41:27:28:81:79:CF:B2:FE:F7:6B:E7:53:EC:89:5C:23:A5:B1:FB:37
Certificate issuer:       /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial:       0185EFD23EBDFB79B8183E207FE690B2D5DD
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/QScogXnPsv73a-dT7IlcI6Wx-zc.roa
Signing time:             Thu 26 Jan 2023 20:43:31 +0000
ROA not before:           Thu 26 Jan 2023 20:43:31 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7018
IP address blocks:        188.212.104.0/22 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:ef:d2:3e:bd:fb:79:b8:18:3e:20:7f:e6:90:b2:d5:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
        Validity
            Not Before: Jan 26 20:43:31 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4127288179cfb2fef76be753ec895c23a5b1fb37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:42:9f:e9:4b:9f:5e:25:ac:67:8a:43:4a:6e:
                    ae:d3:3b:20:43:f9:91:c0:d6:9d:59:d3:27:60:40:
                    fb:c9:73:1d:41:7b:06:b2:d4:de:8f:dd:26:f0:e0:
                    64:00:03:85:d7:10:e7:9a:d3:ca:07:4b:2e:ef:65:
                    00:bd:ba:e1:59:50:57:5f:5d:bd:5c:3b:e0:40:74:
                    58:d9:b1:9d:ce:85:a9:b5:97:e1:70:06:0e:42:58:
                    0a:10:90:cd:32:60:6b:d1:76:08:7b:0d:b5:d8:ce:
                    75:ba:91:55:2e:8d:6e:4c:40:f5:58:13:25:e3:22:
                    15:52:90:69:c2:09:45:01:e6:22:14:72:90:f0:90:
                    30:23:5d:cd:59:97:14:e5:bd:09:38:f9:0e:e0:9c:
                    04:cf:49:cd:f2:ce:c1:92:07:57:03:78:67:1a:ff:
                    b4:82:02:5c:55:39:35:c2:4e:c5:89:e3:ea:d7:d3:
                    06:c0:03:62:69:fe:44:71:26:f0:b4:ad:11:9a:56:
                    93:c2:48:6f:e1:5b:64:29:17:49:e6:85:a5:66:40:
                    18:db:8b:ae:6d:22:83:1d:82:21:84:11:42:04:68:
                    e7:2c:32:b2:4f:0a:12:ca:f0:30:59:d8:38:be:57:
                    86:82:66:29:84:34:21:bf:88:33:b3:c0:5f:48:39:
                    c5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:27:28:81:79:CF:B2:FE:F7:6B:E7:53:EC:89:5C:23:A5:B1:FB:37
            X509v3 Authority Key Identifier:
                keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/QScogXnPsv73a-dT7IlcI6Wx-zc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.212.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:23:5c:f2:7f:b4:52:32:df:24:ee:e2:97:c0:23:fd:16:ea:
         4f:fa:ad:27:0b:88:a9:d8:a2:66:f1:3a:b1:3a:83:55:48:0f:
         a9:d3:d6:bf:84:46:c0:bb:1b:ed:2c:2b:fd:d8:58:57:36:a2:
         05:37:4e:00:40:50:26:b3:d5:78:8f:f8:a4:16:44:af:e7:f0:
         67:5c:e4:5f:9d:1d:43:8a:eb:56:98:c7:b3:03:3f:58:fe:28:
         31:ae:b2:a6:34:7d:d5:b1:37:1a:ca:b6:0b:92:31:fb:76:5d:
         3e:c7:cc:86:da:d9:4b:53:71:36:80:50:b1:99:30:ea:fd:da:
         1f:3f:13:3d:7e:af:30:3a:72:e3:de:c1:f3:0a:e0:cd:1e:53:
         e3:3e:ff:60:e3:e8:94:19:e2:9a:72:13:9c:3f:e0:31:dc:d3:
         4d:e0:a7:f9:b7:ed:01:8e:3a:74:04:ba:0c:01:b2:c0:ed:49:
         d4:f8:5a:03:9f:33:6c:5b:9e:ad:3f:69:1f:cb:4f:f8:4f:6e:
         61:27:78:2a:b4:f7:18:de:e4:1d:40:8a:ce:44:37:7c:8b:45:
         38:71:e0:cf:2e:52:23:15:ec:ba:83:55:a4:69:00:ec:e4:07:
         f8:54:18:9f:20:93:da:ea:a2:fc:e6:22:24:0a:40:3e:37:81:
         9a:4c:99:42
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXv0j69+3m4GD4gf+aQstXdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMDBlOTgxOTUzMDYxOTcyYzg5NmJkNmQyNzczOGQwODNh
YWRiMGUwHhcNMjMwMTI2MjA0MzMxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTI3Mjg4MTc5Y2ZiMmZlZjc2YmU3NTNlYzg5NWMyM2E1YjFmYjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0Kf6UufXiWsZ4pDSm6u0zsgQ/mR
wNadWdMnYED7yXMdQXsGstTej90m8OBkAAOF1xDnmtPKB0su72UAvbrhWVBXX129
XDvgQHRY2bGdzoWptZfhcAYOQlgKEJDNMmBr0XYIew212M51upFVLo1uTED1WBMl
4yIVUpBpwglFAeYiFHKQ8JAwI13NWZcU5b0JOPkO4JwEz0nN8s7BkgdXA3hnGv+0
ggJcVTk1wk7FiePq19MGwANiaf5EcSbwtK0RmlaTwkhv4VtkKRdJ5oWlZkAY24uu
bSKDHYIhhBFCBGjnLDKyTwoSyvAwWdg4vleGgmYphDQhv4gzs8BfSDnFiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEEnKIF5z7L+92vnU+yJXCOlsfs3MB8GA1UdIwQY
MBaAFNoA6YGVMGGXLIlr1tJ3ONCDqtsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdEcGdaVXdZWmNzaVd2VzBuYzQwSU9xMnc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84MmE3ZDYtOTJhOS00MjA0LTlhZTAt
OWE0OGVjZjllMTVlLzEvUVNjb2dYblBzdjczYS1kVDdJbGNJNld4LXpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi84MmE3ZDYtOTJhOS00MjA0LTlhZTAtOWE0OGVjZjllMTVl
LzEvMmdEcGdaVXdZWmNzaVd2VzBuYzQwSU9xMnc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvNRoMA0G
CSqGSIb3DQEBCwUAA4IBAQAZI1zyf7RSMt8k7uKXwCP9FupP+q0nC4ip2KJm8Tqx
OoNVSA+p09a/hEbAuxvtLCv92FhXNqIFN04AQFAms9V4j/ikFkSv5/BnXORfnR1D
iutWmMezAz9Y/igxrrKmNH3VsTcayrYLkjH7dl0+x8yG2tlLU3E2gFCxmTDq/dof
PxM9fq8wOnLj3sHzCuDNHlPjPv9g4+iUGeKachOcP+Ax3NNN4Kf5t+0Bjjp0BLoM
AbLA7UnU+FoDnzNsW56tP2kfy0/4T25hJ3gqtPcY3uQdQIrORDd8i0U4ceDPLlIj
Fey6g1WkaQDs5Af4VBifIJPa6qL85iIkCkA+N4GaTJlC
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:04 2023 by rpki-client on console-fra.rpki-client.org