Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/d64woVAJrtpQRtyX05zp3rHQhmQ.roa
File:                     d64woVAJrtpQRtyX05zp3rHQhmQ.roa (raw, json)
Hash identifier:          T53nsAXDyNMsLG0rQSlhHUh5LKtDLP+zXeBaEfEpaeE=
Subject key identifier:   77:AE:30:A1:50:09:AE:DA:50:46:DC:97:D3:9C:E9:DE:B1:D0:86:64
Certificate issuer:       /CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
Certificate serial:       0185BA62390E1E8954BFD27C46DCBD7134E9
Authority key identifier: F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/d64woVAJrtpQRtyX05zp3rHQhmQ.roa
Signing time:             Mon 16 Jan 2023 11:41:17 +0000
ROA not before:           Mon 16 Jan 2023 11:41:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     12874
IP address blocks:        91.205.82.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:ba:62:39:0e:1e:89:54:bf:d2:7c:46:dc:bd:71:34:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f457c020cdc22b68da26a469f6ffa6b448370d1d
        Validity
            Not Before: Jan 16 11:41:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=77ae30a15009aeda5046dc97d39ce9deb1d08664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:46:63:a6:f7:f6:97:03:22:3a:22:f7:20:b0:
                    bb:15:a4:3d:00:5c:33:f3:03:7f:a3:40:30:ef:83:
                    f3:6e:53:79:0c:7e:8b:12:61:22:3f:c0:c4:a2:8b:
                    91:97:d4:db:da:5e:3e:83:d3:78:0d:dc:9e:3b:35:
                    6b:90:48:07:bc:b2:a1:e2:42:a5:ab:11:57:61:48:
                    ee:26:30:07:da:d3:35:35:b6:3c:7a:89:ae:92:e9:
                    76:be:4a:9a:3c:2f:30:4d:30:57:17:71:9c:45:ec:
                    e6:93:57:d2:c3:b6:18:f7:81:11:ba:4e:1e:54:75:
                    5b:46:fa:83:62:de:a2:93:b0:76:ac:3a:63:26:21:
                    f6:b5:bd:3b:97:f1:8d:6c:cf:39:e1:2b:4b:70:bd:
                    35:65:6e:ce:67:b2:fa:1b:c2:29:32:79:7d:14:50:
                    c1:b6:0d:61:9a:fc:b5:46:0b:ec:b9:9d:18:b5:76:
                    67:ea:89:15:7f:12:50:92:91:1a:22:d3:ad:a2:f7:
                    e1:65:7f:ec:f4:0e:f7:8e:50:78:5f:6c:2e:fb:07:
                    ea:f5:da:3f:79:d2:e2:54:5a:cc:5f:67:fa:44:6d:
                    e0:a5:38:5b:f4:85:17:19:18:76:9b:d6:b2:1e:e9:
                    93:6f:0a:b9:f8:00:40:66:62:99:51:cb:88:af:e6:
                    31:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:AE:30:A1:50:09:AE:DA:50:46:DC:97:D3:9C:E9:DE:B1:D0:86:64
            X509v3 Authority Key Identifier:
                keyid:F4:57:C0:20:CD:C2:2B:68:DA:26:A4:69:F6:FF:A6:B4:48:37:0D:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FfAIM3CK2jaJqRp9v-mtEg3DR0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/d64woVAJrtpQRtyX05zp3rHQhmQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e0cb06-deca-495d-acc0-7bafd43e7862/1/9FfAIM3CK2jaJqRp9v-mtEg3DR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.205.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:36:17:9f:55:66:f2:5b:01:40:15:8c:a0:68:d4:48:c4:6c:
         af:21:d9:a7:7c:13:ab:1b:2f:f0:0a:4a:77:f7:da:18:8a:61:
         f3:25:4c:e5:35:8d:b0:f9:81:d8:88:1c:61:70:d8:b8:78:d9:
         0f:ed:dc:8f:82:33:c7:57:7d:48:55:ba:d1:d1:bd:02:f9:f3:
         c9:e7:8e:92:fe:49:46:94:f0:a0:66:64:2c:ee:5c:59:d8:97:
         c5:14:3e:bb:c7:22:a0:96:aa:46:c4:be:85:ba:2c:da:38:5b:
         34:d0:17:a7:bf:9c:e1:0a:aa:20:4c:f7:07:f4:b1:ca:97:fa:
         ba:5e:f3:40:b2:23:9e:5c:03:40:a8:59:e2:9e:ec:1d:4d:ba:
         de:50:b4:cb:93:20:b2:85:23:e3:00:26:dc:8e:58:7d:19:6e:
         45:82:d1:2d:b9:18:33:a1:3d:17:aa:ef:3f:e8:db:73:53:59:
         57:da:88:ce:ee:18:2b:b8:32:a2:af:9f:36:45:db:59:d3:de:
         2e:f7:5a:d4:a7:97:e2:3c:24:c1:f3:03:a9:97:11:79:57:74:
         f4:06:f2:48:8b:0e:ae:a9:bd:64:f8:e8:29:51:a2:82:9d:94:
         69:6c:96:16:9c:c5:28:2a:52:6d:a3:f9:35:4f:7c:fe:e3:59:
         51:21:60:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:06 2023 by rpki-client on console-fra.rpki-client.org