Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cv_EdR683_MEDYJRHsLigHDOS2g.roa
File:                     cv_EdR683_MEDYJRHsLigHDOS2g.roa (raw, json)
Hash identifier:          FYBLorv7OcgdFB3iF3tueS8CDGNJUS0cU0Jk2kkVv+8=
Subject key identifier:   72:FF:C4:75:1E:BC:DF:F3:04:0D:82:51:1E:C2:E2:80:70:CE:4B:68
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       0188B5B081E33880513E951B757DD5147488
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cv_EdR683_MEDYJRHsLigHDOS2g.roa
Signing time:             Tue 13 Jun 2023 16:57:03 +0000
ROA not before:           Tue 13 Jun 2023 16:57:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7411
IP address blocks:        194.58.155.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:b5:b0:81:e3:38:80:51:3e:95:1b:75:7d:d5:14:74:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Jun 13 16:57:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=72ffc4751ebcdff3040d82511ec2e28070ce4b68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:94:89:b3:1e:c7:0f:d2:dc:f9:d9:a7:47:2f:
                    06:f2:b4:2c:51:02:3b:80:04:c5:9d:b1:07:c9:7a:
                    8b:d3:33:f2:df:be:00:f5:39:f4:0e:07:15:20:3e:
                    5e:9a:14:55:33:82:4a:15:04:8d:8f:cb:67:01:8a:
                    30:a0:8f:ed:36:2f:b4:a6:e5:2e:ec:c8:1c:27:4e:
                    13:16:6a:fd:d8:5d:3b:49:fe:66:47:c0:5b:ed:1d:
                    87:2a:24:18:1e:e3:ef:97:46:c1:12:1c:30:2d:bc:
                    3b:ff:9f:83:18:10:6e:df:1e:f4:ae:87:b0:2a:9c:
                    c2:14:a3:62:a4:02:d5:1a:0a:2d:09:38:4b:38:50:
                    33:64:a7:25:df:5d:04:b4:2d:b8:31:97:fd:cf:fe:
                    47:78:62:d9:22:60:96:69:0d:f6:59:4c:ed:4e:99:
                    54:a4:49:c2:70:91:22:91:51:84:0e:18:74:09:d7:
                    db:b3:24:05:13:03:e2:eb:76:c6:b9:2f:57:83:cf:
                    a7:1e:20:de:1a:e4:a4:4f:63:c3:77:42:c0:df:e5:
                    61:8f:d8:27:02:40:55:56:fe:c9:ad:45:8d:05:8b:
                    00:80:cd:42:d6:75:bc:9a:cf:8e:50:f5:63:7d:16:
                    3a:fa:cb:1e:b5:a3:e0:ec:1c:15:c1:c7:c1:aa:35:
                    55:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:FF:C4:75:1E:BC:DF:F3:04:0D:82:51:1E:C2:E2:80:70:CE:4B:68
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/cv_EdR683_MEDYJRHsLigHDOS2g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.58.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:b5:53:73:a4:6d:52:92:fc:0e:15:39:0a:ee:b5:d5:71:d8:
         fb:87:81:9a:1d:78:76:30:12:7e:f0:96:fa:be:4a:80:8c:45:
         74:ca:79:2a:bf:e3:ad:21:f3:d4:59:d2:f2:7e:0c:5b:21:1d:
         2a:3a:15:f6:c9:81:36:3f:7a:97:62:2d:3d:d4:c8:13:f2:30:
         1b:b9:35:bc:8e:46:a3:0a:c6:d2:35:09:45:47:0a:8f:3a:5f:
         8b:d2:b0:2b:9c:ce:9a:52:cc:1d:de:21:97:c9:d1:2c:da:dd:
         94:e6:7e:ef:5a:66:08:73:a3:ff:02:f9:2a:a0:dc:08:08:f0:
         7f:3a:f8:8a:a7:84:71:ff:69:d7:39:f9:ec:7b:ad:95:a1:6a:
         18:0c:4c:55:29:88:68:12:98:b0:de:63:3a:a7:95:cf:26:f4:
         ed:56:03:6f:13:f2:13:d2:17:fc:0d:b9:ea:e1:80:e8:85:2e:
         e1:64:25:4c:b7:83:53:62:eb:f0:39:da:e8:1a:41:1e:3a:35:
         c6:fe:cb:f5:e7:48:d2:41:ce:20:a1:dd:1c:1c:ca:48:c7:ce:
         91:f2:cc:68:02:3d:cb:88:85:62:9b:bd:66:b0:ef:73:a5:7a:
         52:c7:11:9e:10:63:11:79:b2:4a:54:f9:9c:49:78:8f:72:e2:
         5b:e5:aa:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:08 2023 by rpki-client on console-fra.rpki-client.org