Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/c6WfAwhGX6kuVBTwI2O0TvawNMY.roa
File:                     c6WfAwhGX6kuVBTwI2O0TvawNMY.roa (raw, json)
Hash identifier:          cMUr3EQMk4nkHJPSNfUTNMMFDnJ21yylBS81srWom4o=
Subject key identifier:   73:A5:9F:03:08:46:5F:A9:2E:54:14:F0:23:63:B4:4E:F6:B0:34:C6
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       0186FD603A3F57C29DBCD8C82B6A8FAA6CEB
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/c6WfAwhGX6kuVBTwI2O0TvawNMY.roa
Signing time:             Mon 20 Mar 2023 04:56:27 +0000
ROA not before:           Mon 20 Mar 2023 04:56:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     150785
IP address blocks:        194.87.233.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:fd:60:3a:3f:57:c2:9d:bc:d8:c8:2b:6a:8f:aa:6c:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Mar 20 04:56:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=73a59f0308465fa92e5414f02363b44ef6b034c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6b:8b:1f:ce:37:67:2e:95:6e:8e:60:bf:84:
                    83:26:ae:b9:4a:bf:48:82:dd:d3:5a:f1:ba:4a:fd:
                    f7:06:43:3c:03:99:a5:c5:89:aa:bf:78:a0:7e:68:
                    96:b9:0e:a2:30:a5:64:d2:28:c0:b8:89:28:48:d7:
                    7c:bc:d8:55:4c:46:74:1a:3a:1f:3f:38:82:d1:da:
                    ed:be:05:c7:56:4d:d7:aa:51:e1:66:22:28:1d:31:
                    36:e9:ec:3e:35:07:79:6d:3f:f8:1c:02:bc:04:73:
                    7f:b7:6a:36:96:f1:60:86:b9:2a:44:99:ff:f2:d8:
                    41:44:54:fc:cc:7c:9c:73:e2:d8:c9:a2:73:b3:08:
                    a2:fb:fe:ea:5e:de:46:8d:62:d4:13:1e:e5:8e:86:
                    ef:88:75:41:4c:bc:c6:9b:4b:87:19:16:ba:55:bc:
                    85:d6:d7:d0:89:38:31:c1:40:59:c1:10:21:65:a5:
                    06:82:58:0c:ab:82:ca:b5:db:6e:54:7d:91:7e:c0:
                    fd:74:30:7d:3b:c3:39:00:2e:93:e9:75:d6:01:bb:
                    39:f6:5c:c2:25:09:f9:f0:72:48:b5:7a:07:4b:af:
                    2b:c0:36:78:bc:7a:eb:63:02:65:48:51:cb:35:9b:
                    b5:e5:d0:51:fe:e2:05:69:57:07:a7:8d:f3:68:4f:
                    f5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A5:9F:03:08:46:5F:A9:2E:54:14:F0:23:63:B4:4E:F6:B0:34:C6
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/c6WfAwhGX6kuVBTwI2O0TvawNMY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.87.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:18:73:6f:4a:34:c0:bd:7f:45:84:69:49:44:5f:ad:00:04:
         32:3d:fe:70:30:9f:b7:cd:76:2b:4f:e0:a5:9d:3e:93:da:21:
         c9:4a:81:3c:37:d8:24:86:0c:c6:d1:e6:29:fd:11:c2:07:66:
         e6:a3:c9:48:ef:18:c3:a4:30:43:ed:cf:66:cd:c6:49:31:f5:
         34:4f:22:a6:cf:42:51:96:db:ed:2c:aa:df:74:b4:c6:f5:6a:
         89:9d:27:82:29:7e:46:ad:ca:80:fb:31:97:ae:2e:1d:56:c4:
         b7:98:83:b0:ae:07:b3:9c:a8:a9:83:53:3c:17:9f:21:ed:80:
         af:37:a5:fb:80:84:98:9b:5c:00:d4:f4:9e:0d:06:f7:32:62:
         c8:90:29:f5:6d:a9:3d:17:b4:6a:46:eb:6e:14:03:6a:5b:b8:
         12:fa:e8:49:91:21:6e:d3:6b:2b:de:e0:8c:43:3d:1c:7b:aa:
         d4:b7:7c:e9:1f:4c:9d:88:60:37:52:5a:85:3d:b8:e3:85:1c:
         13:4c:2e:0f:92:7c:07:bb:2c:5a:93:4e:d7:54:42:09:2e:e9:
         4a:4f:03:28:e0:c6:ed:99:75:4d:0c:66:75:6d:68:7c:06:c7:
         fb:2a:09:38:74:bd:25:99:6a:f9:04:36:8b:81:b7:42:77:5b:
         ad:c1:8d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:02 2023 by rpki-client on console-ams.rpki-client.org