Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/hDSnXzgcSTL0X7AshXA8mtUBmWE.roa
File:                     hDSnXzgcSTL0X7AshXA8mtUBmWE.roa (raw, json)
Hash identifier:          EoNCpfa+GF8m632vykan50te8lrwWcTaqpew5hzjOME=
Subject key identifier:   84:34:A7:5F:38:1C:49:32:F4:5F:B0:2C:85:70:3C:9A:D5:01:99:61
Certificate issuer:       /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial:       0188E9232D66C5C4BD8EDA7F832FFC5D4C3A
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/hDSnXzgcSTL0X7AshXA8mtUBmWE.roa
Signing time:             Fri 23 Jun 2023 16:42:56 +0000
ROA not before:           Fri 23 Jun 2023 16:42:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     9123
IP address blocks:        92.63.176.0/22 maxlen: 22

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:e9:23:2d:66:c5:c4:bd:8e:da:7f:83:2f:fc:5d:4c:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
        Validity
            Not Before: Jun 23 16:42:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8434a75f381c4932f45fb02c85703c9ad5019961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:57:a4:6c:49:3f:58:a1:e3:1a:3a:10:82:10:
                    83:af:62:03:6a:ab:e2:c5:95:7f:73:41:ae:fe:26:
                    00:7d:a1:68:9f:9f:c8:69:36:f3:b4:06:82:91:15:
                    c7:a1:7c:42:66:12:9d:d1:04:74:e1:2c:24:e3:9d:
                    00:4f:f4:7f:79:3f:55:4b:12:b9:6f:fb:d0:e1:b8:
                    fc:ab:b8:65:48:33:fa:bb:06:4b:36:35:ec:44:29:
                    00:0b:ad:45:5c:4f:f2:df:c5:1b:a1:ab:87:a4:a5:
                    b1:6e:d6:13:8f:94:dc:cb:15:e5:be:24:f3:56:6f:
                    d3:f4:e8:ad:c1:42:19:5b:a8:ca:cf:59:35:cc:8b:
                    8f:4a:9c:3f:be:80:7f:ac:53:1b:8e:98:54:ed:8b:
                    5e:63:b7:20:83:5d:53:72:7d:01:1a:2b:c6:75:a0:
                    bd:62:bb:d4:3e:49:1a:64:37:ed:7a:fd:03:f0:72:
                    96:bf:ca:29:30:9a:fd:26:93:1c:03:1b:1d:0d:89:
                    b0:a4:9d:d1:3c:92:2f:cc:db:67:f0:4b:f1:e4:45:
                    ad:5e:f0:8b:02:d0:5f:e1:48:8f:3a:f6:69:52:9c:
                    e5:bc:53:38:1e:17:7c:90:b9:1e:e0:99:61:26:32:
                    c9:a5:99:6d:a6:37:46:b7:33:0c:7c:de:c4:e6:e0:
                    6c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:34:A7:5F:38:1C:49:32:F4:5F:B0:2C:85:70:3C:9A:D5:01:99:61
            X509v3 Authority Key Identifier:
                keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/hDSnXzgcSTL0X7AshXA8mtUBmWE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.63.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:c6:a0:f4:84:f6:0b:02:ed:e1:31:fb:c2:92:d2:bf:d1:f4:
         f4:52:b6:3e:af:61:68:8c:84:a1:00:57:f8:87:d9:ca:eb:d4:
         21:fa:d4:14:cb:98:db:9c:27:54:8e:b2:b9:8e:df:95:b2:b6:
         8c:d5:3a:7b:0a:26:e6:5d:9e:24:d1:05:a7:fb:9d:4d:4a:c3:
         dd:49:af:86:4f:4c:b4:75:f6:80:2d:e5:8c:e8:f2:7e:f3:ae:
         11:05:9f:90:65:da:c2:0e:be:bc:01:0b:37:48:30:37:ab:ed:
         09:08:f8:03:8d:31:fa:32:be:4f:c9:b6:a9:c0:d9:ea:c6:a8:
         ac:4b:14:42:f7:83:5b:7a:cd:0b:78:89:77:cd:42:1f:56:92:
         7c:7c:f5:e5:48:0b:e5:87:d6:4d:66:dd:7a:f6:af:ff:77:af:
         6f:39:0b:f8:91:20:b6:7b:73:57:3e:78:aa:56:18:41:25:76:
         02:f5:0b:b1:8d:c6:46:76:6e:8d:d1:e5:3a:5e:64:4d:7f:23:
         56:2e:21:be:91:c3:69:b3:b1:1f:e0:70:92:fe:0e:94:79:c7:
         b8:06:06:bc:92:33:b1:93:86:37:67:fb:2b:2c:4a:5e:d1:99:
         e7:61:ff:7a:59:0f:b9:a9:c9:59:92:1a:f3:58:42:d3:af:7b:
         48:b7:bf:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYjpIy1mxcS9jtp/gy/8XUw6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjMwNjIzMTY0MjU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDM0YTc1ZjM4MWM0OTMyZjQ1ZmIwMmM4NTcwM2M5YWQ1MDE5OTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFekbEk/WKHjGjoQghCDr2IDaqvi
xZV/c0Gu/iYAfaFon5/IaTbztAaCkRXHoXxCZhKd0QR04Swk450AT/R/eT9VSxK5
b/vQ4bj8q7hlSDP6uwZLNjXsRCkAC61FXE/y38UboauHpKWxbtYTj5TcyxXlviTz
Vm/T9OitwUIZW6jKz1k1zIuPSpw/voB/rFMbjphU7YteY7cgg11Tcn0BGivGdaC9
YrvUPkkaZDftev0D8HKWv8opMJr9JpMcAxsdDYmwpJ3RPJIvzNtn8Evx5EWtXvCL
AtBf4UiPOvZpUpzlvFM4Hhd8kLke4JlhJjLJpZltpjdGtzMMfN7E5uBsTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIQ0p184HEky9F+wLIVwPJrVAZlhMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvaERTblh6Z2NTVEwwWDdBc2hYQThtdFVCbVdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXD+wMA0G
CSqGSIb3DQEBCwUAA4IBAQCcxqD0hPYLAu3hMfvCktK/0fT0UrY+r2FojIShAFf4
h9nK69Qh+tQUy5jbnCdUjrK5jt+VsraM1Tp7CibmXZ4k0QWn+51NSsPdSa+GT0y0
dfaALeWM6PJ+864RBZ+QZdrCDr68AQs3SDA3q+0JCPgDjTH6Mr5PybapwNnqxqis
SxRC94Nbes0LeIl3zUIfVpJ8fPXlSAvlh9ZNZt169q//d69vOQv4kSC2e3NXPniq
VhhBJXYC9QuxjcZGdm6N0eU6XmRNfyNWLiG+kcNps7Ef4HCS/g6Uece4Bga8kjOx
k4Y3Z/srLEpe0ZnnYf96WQ+5qclZkhrzWELTr3tIt788
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:49 2023 by rpki-client on console.sobornost.net