Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/go6L0Wqbhdb8Am2C4zCFFH0mEpY.roa
File:                     go6L0Wqbhdb8Am2C4zCFFH0mEpY.roa (raw, json)
Hash identifier:          QGjho85qjQH+RGEOQdLK0zEgRy3PZVU9h0X2ii2kdNw=
Subject key identifier:   82:8E:8B:D1:6A:9B:85:D6:FC:02:6D:82:E3:30:85:14:7D:26:12:96
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       0186EB88AA7A30E987D5DB302F536CF2E8CD
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/go6L0Wqbhdb8Am2C4zCFFH0mEpY.roa
Signing time:             Thu 16 Mar 2023 17:47:27 +0000
ROA not before:           Thu 16 Mar 2023 17:47:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60117
IP address blocks:        194.87.116.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:eb:88:aa:7a:30:e9:87:d5:db:30:2f:53:6c:f2:e8:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Mar 16 17:47:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=828e8bd16a9b85d6fc026d82e33085147d261296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:24:ac:40:7f:fc:d3:dc:4a:a6:54:fd:1c:b1:
                    99:a8:2d:8f:42:3b:87:e3:90:4f:28:93:a5:90:8b:
                    41:2a:a7:85:7c:d7:3f:a0:f2:08:ef:4c:8d:2c:82:
                    04:cd:2c:3f:00:29:c6:d2:0b:fd:02:38:2c:6f:6a:
                    5e:bc:6c:3f:09:75:1a:58:e6:aa:fd:a3:98:c8:5a:
                    40:3b:da:6f:c7:8e:d7:33:5a:27:f6:97:be:4c:57:
                    08:7b:d9:87:b3:8e:45:78:6c:c3:17:cd:23:96:cf:
                    f4:9b:98:8b:fd:a7:d2:2a:07:f3:c4:b2:4c:f8:d0:
                    e1:ed:f1:4c:63:f4:28:a8:9d:82:72:ae:91:d2:ff:
                    e8:9b:3d:a6:65:aa:57:07:64:24:97:83:0b:2c:99:
                    47:80:b3:4f:de:91:b4:5f:57:e0:8d:2f:bf:2c:90:
                    77:9d:7e:8f:f9:f6:8a:b8:8e:56:bc:56:64:35:0b:
                    75:5c:15:e4:25:ea:ca:7a:0a:fd:56:43:56:e8:53:
                    a5:87:6d:8d:20:d3:72:9f:ef:12:82:e1:ec:32:32:
                    e1:d3:c9:77:10:33:42:d6:04:5c:33:9b:40:a9:ac:
                    7d:f4:75:0f:b1:9b:31:c7:45:bf:31:54:2c:a6:80:
                    4a:48:7b:1a:d7:dd:28:b6:fb:ea:cb:d3:6b:26:3b:
                    6a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:8E:8B:D1:6A:9B:85:D6:FC:02:6D:82:E3:30:85:14:7D:26:12:96
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/go6L0Wqbhdb8Am2C4zCFFH0mEpY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.87.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:51:3b:31:d2:20:38:5f:31:6a:88:65:20:0b:bf:36:f1:98:
         97:56:90:7d:44:f3:08:42:fc:fc:ab:65:84:91:2e:8b:55:40:
         7a:1f:b0:43:21:08:ad:44:2a:e6:26:07:66:22:b6:29:8b:09:
         cb:76:87:f3:0e:91:da:31:cc:7a:87:cc:db:8d:ec:27:ee:0c:
         f7:e1:50:0e:a9:dc:a8:f7:ab:35:85:70:3a:a3:b7:e5:05:87:
         58:fc:65:d0:a6:3f:a0:bd:9a:42:37:c5:ee:41:9c:06:21:cd:
         fa:ae:72:bd:12:61:3e:be:70:9d:8a:d8:b6:e0:78:dc:7f:26:
         1b:a7:04:d9:ce:14:dd:ad:3f:46:ab:f6:9d:b1:da:8b:31:a5:
         d7:9a:a4:93:5f:7e:0e:ea:7a:88:4e:3c:75:39:1b:87:b1:35:
         b5:71:78:cd:c3:19:f9:78:6a:52:d7:ca:a7:2e:93:ba:37:45:
         b5:20:c7:db:9d:4f:07:61:22:19:f1:cc:52:c9:e9:b5:8c:a1:
         4e:13:6b:62:a3:ee:ae:53:88:05:a1:e9:90:a5:6f:e8:47:e0:
         46:a5:e0:b0:b8:e6:49:80:47:8c:18:ef:35:99:8b:93:03:5a:
         db:94:ae:f6:5d:8e:63:d1:87:7a:4b:20:4c:f5:de:b5:a7:f6:
         a7:7a:c0:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:09 2023 by rpki-client on console-fra.rpki-client.org