Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/DMcCWRLXOm8ADRjmakDcw-T8mnk.roa
File:                     DMcCWRLXOm8ADRjmakDcw-T8mnk.roa (raw, json)
Hash identifier:          0KOX5+HTx3rRlOjUwwfDuKe3gfuerrvLoZlyRpmqs9g=
Subject key identifier:   0C:C7:02:59:12:D7:3A:6F:00:0D:18:E6:6A:40:DC:C3:E4:FC:9A:79
Certificate issuer:       /CN=e85b83c87c4a3d8315025379f72987520bb5d046
Certificate serial:       0185711E53735892CF26881F910EE22CEAA8
Authority key identifier: E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/DMcCWRLXOm8ADRjmakDcw-T8mnk.roa
Signing time:             Mon 02 Jan 2023 06:14:50 +0000
ROA not before:           Mon 02 Jan 2023 06:14:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     58269
IP address blocks:        94.30.181.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:1e:53:73:58:92:cf:26:88:1f:91:0e:e2:2c:ea:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e85b83c87c4a3d8315025379f72987520bb5d046
        Validity
            Not Before: Jan  2 06:14:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0cc7025912d73a6f000d18e66a40dcc3e4fc9a79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4f:3b:35:16:1a:10:03:83:06:e6:83:4a:d6:
                    cb:30:aa:0c:48:a7:42:ff:c1:a8:43:58:29:a8:75:
                    0c:6f:39:d6:cb:27:d1:d1:e0:40:28:83:34:1b:4f:
                    33:f6:cd:ee:d6:af:7f:f8:22:9e:91:7c:e9:75:38:
                    d6:8b:6c:14:62:e9:fb:f2:dd:af:b2:5c:1d:e3:cb:
                    c2:23:68:5e:31:d9:76:b6:c5:b7:9a:ce:a3:6c:c1:
                    3c:24:72:16:06:c3:8b:a5:9a:db:d7:53:fb:a4:1e:
                    08:60:78:9a:8e:a6:40:0d:32:a4:d9:7f:ae:93:c2:
                    2d:a5:90:bb:70:10:bc:8c:4e:c6:4b:b6:a5:25:8f:
                    77:ad:2c:05:f3:e2:93:4e:17:96:79:7d:c9:f9:a7:
                    52:59:80:0d:73:3d:67:25:d1:ac:7b:6f:f9:60:39:
                    79:27:f5:fe:38:9b:a9:7e:d4:a3:17:4c:8b:2b:3a:
                    3c:fc:eb:4b:79:98:31:2e:b3:21:91:3b:65:ed:23:
                    36:28:f3:48:37:ef:c4:f4:4f:19:53:8e:dd:73:a6:
                    71:b1:71:f1:a4:ab:9c:1b:f4:93:b1:78:4a:08:1b:
                    8f:09:bd:8a:df:f6:f1:5b:21:e3:2e:3f:a2:82:bd:
                    5f:ba:52:9d:ab:b4:ff:47:31:0c:bd:dd:48:76:4a:
                    75:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C7:02:59:12:D7:3A:6F:00:0D:18:E6:6A:40:DC:C3:E4:FC:9A:79
            X509v3 Authority Key Identifier:
                keyid:E8:5B:83:C8:7C:4A:3D:83:15:02:53:79:F7:29:87:52:0B:B5:D0:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FuDyHxKPYMVAlN59ymHUgu10EY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/DMcCWRLXOm8ADRjmakDcw-T8mnk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3394e3-736e-4879-b8db-89aaea36285e/1/6FuDyHxKPYMVAlN59ymHUgu10EY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.30.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:c3:30:dd:79:4e:ab:f9:ab:39:59:43:f9:fd:9a:ee:29:d9:
         6e:f3:bb:2a:bd:24:a0:48:11:c6:f0:2e:fe:00:85:e3:06:07:
         52:33:5e:4e:68:46:55:73:cc:35:bb:3a:b5:40:91:9c:61:ac:
         f4:57:72:62:c5:20:be:31:e4:44:aa:c9:1e:a1:86:5b:89:6c:
         77:d8:5c:86:77:5a:ac:ef:db:40:df:31:b6:7a:a1:40:0d:1e:
         1b:5f:ce:73:de:1e:1a:21:a0:75:88:34:d5:9e:68:27:24:55:
         8c:ec:9f:36:fa:4b:84:70:b8:0a:45:9f:99:c2:21:86:be:65:
         e8:c9:96:42:85:27:c4:0f:bb:cb:3c:38:62:e8:03:d0:81:95:
         5b:67:50:47:d6:d7:40:31:fa:98:6b:b8:48:81:55:c4:4d:2f:
         c7:9c:59:26:e2:94:dd:a4:f9:70:50:43:b8:a0:69:41:f9:19:
         d5:89:16:6c:72:af:94:c4:7b:70:38:f1:48:f7:fe:a6:6c:35:
         03:a2:80:cd:c3:62:bc:b1:c5:13:43:43:70:e0:e6:48:98:07:
         a5:94:d4:ad:a7:8f:c6:0b:4a:47:7c:31:34:ad:22:d2:1e:9c:
         36:ef:68:93:13:40:cb:f5:64:32:df:8f:8d:5b:d6:66:96:66:
         2f:4a:11:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxHlNzWJLPJogfkQ7iLOqoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NWI4M2M4N2M0YTNkODMxNTAyNTM3OWY3Mjk4NzUyMGJi
NWQwNDYwHhcNMjMwMTAyMDYxNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwY2M3MDI1OTEyZDczYTZmMDAwZDE4ZTY2YTQwZGNjM2U0ZmM5YTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjk87NRYaEAODBuaDStbLMKoMSKdC
/8GoQ1gpqHUMbznWyyfR0eBAKIM0G08z9s3u1q9/+CKekXzpdTjWi2wUYun78t2v
slwd48vCI2heMdl2tsW3ms6jbME8JHIWBsOLpZrb11P7pB4IYHiajqZADTKk2X+u
k8ItpZC7cBC8jE7GS7alJY93rSwF8+KTTheWeX3J+adSWYANcz1nJdGse2/5YDl5
J/X+OJupftSjF0yLKzo8/OtLeZgxLrMhkTtl7SM2KPNIN+/E9E8ZU47dc6ZxsXHx
pKucG/STsXhKCBuPCb2K3/bxWyHjLj+igr1fulKdq7T/RzEMvd1Idkp1HwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAzHAlkS1zpvAA0Y5mpA3MPk/Jp5MB8GA1UdIwQY
MBaAFOhbg8h8Sj2DFQJTefcph1ILtdBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkZ1RHlIeEtQWU1WQWxONTl5bUhVZ3UxMEVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zMzk0ZTMtNzM2ZS00ODc5LWI4ZGIt
ODlhYWVhMzYyODVlLzEvRE1jQ1dSTFhPbThBRFJqbWFrRGN3LVQ4bW5rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8zMzk0ZTMtNzM2ZS00ODc5LWI4ZGItODlhYWVhMzYyODVl
LzEvNkZ1RHlIeEtQWU1WQWxONTl5bUhVZ3UxMEVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXh61MA0G
CSqGSIb3DQEBCwUAA4IBAQAHwzDdeU6r+as5WUP5/ZruKdlu87sqvSSgSBHG8C7+
AIXjBgdSM15OaEZVc8w1uzq1QJGcYaz0V3JixSC+MeREqskeoYZbiWx32FyGd1qs
79tA3zG2eqFADR4bX85z3h4aIaB1iDTVnmgnJFWM7J82+kuEcLgKRZ+ZwiGGvmXo
yZZChSfED7vLPDhi6APQgZVbZ1BH1tdAMfqYa7hIgVXETS/HnFkm4pTdpPlwUEO4
oGlB+RnViRZscq+UxHtwOPFI9/6mbDUDooDNw2K8scUTQ0Nw4OZImAellNStp4/G
C0pHfDE0rSLSHpw272iTE0DL9WQy34+NW9ZmlmYvShFV
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:00:50 2024 by rpki-client on console.sobornost.net