Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f72e47-42ab-43ca-a6f3-f8e0640e53d8/1/mB_vCRv5dj0pyznhlhVYflLR7Yc.roa
File:                     mB_vCRv5dj0pyznhlhVYflLR7Yc.roa (raw, json)
Hash identifier:          EfpzqIIXBE1pzy0HJtDGWYW5JgP+G2Klme/ZeCGue1Q=
Subject key identifier:   98:1F:EF:09:1B:F9:76:3D:29:CB:39:E1:96:15:58:7E:52:D1:ED:87
Certificate issuer:       /CN=07d0ba368232da095070a9fc7572465858f7af13
Certificate serial:       01856F300E722539DB0F895A2D908CA0C9F4
Authority key identifier: 07:D0:BA:36:82:32:DA:09:50:70:A9:FC:75:72:46:58:58:F7:AF:13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9C6NoIy2glQcKn8dXJGWFj3rxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/f72e47-42ab-43ca-a6f3-f8e0640e53d8/1/mB_vCRv5dj0pyznhlhVYflLR7Yc.roa
Signing time:             Sun 01 Jan 2023 21:14:58 +0000
ROA not before:           Sun 01 Jan 2023 21:14:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        188.244.126.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:30:0e:72:25:39:db:0f:89:5a:2d:90:8c:a0:c9:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d0ba368232da095070a9fc7572465858f7af13
        Validity
            Not Before: Jan  1 21:14:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=981fef091bf9763d29cb39e19615587e52d1ed87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7a:16:3b:b2:a7:eb:b3:d5:11:ef:13:38:8b:
                    9c:9c:7d:af:51:f7:76:cf:70:91:d7:f3:6f:71:c3:
                    ac:4f:ab:9a:54:0e:36:07:5f:97:50:40:e4:b4:10:
                    38:7a:09:ba:53:74:cf:3e:50:f8:39:b7:46:2f:e5:
                    f2:d2:8c:80:3f:2d:4d:50:e2:b7:1a:a6:73:e9:35:
                    0d:83:b0:e4:24:f5:6c:17:31:99:03:72:64:cf:15:
                    6a:74:59:59:d4:13:30:a5:2e:83:b2:dc:c5:a7:db:
                    f9:e0:40:3a:d2:2d:40:2f:1d:6b:02:fe:50:d3:21:
                    27:39:17:0b:af:98:b9:37:49:73:cf:89:fe:e4:3c:
                    53:9f:76:92:8e:c0:61:ea:c1:f3:07:54:ae:7b:80:
                    82:fd:69:96:f9:1e:47:48:88:63:1e:88:cb:d3:83:
                    93:83:06:ab:1c:80:b0:be:47:77:1f:8c:dd:0a:67:
                    f2:b8:41:5d:00:62:fd:a6:b7:b5:6a:89:74:6c:8e:
                    3d:c2:cb:ed:c6:2c:73:75:2a:0a:58:c5:b6:d0:79:
                    4d:e2:4f:96:7d:6f:99:6c:cc:5d:6e:d6:d8:78:be:
                    87:33:20:dd:3b:8b:22:9d:49:c6:08:8f:ca:09:c2:
                    7f:fb:80:aa:01:44:a3:61:a5:19:2f:9b:9c:09:04:
                    59:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:1F:EF:09:1B:F9:76:3D:29:CB:39:E1:96:15:58:7E:52:D1:ED:87
            X509v3 Authority Key Identifier:
                keyid:07:D0:BA:36:82:32:DA:09:50:70:A9:FC:75:72:46:58:58:F7:AF:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9C6NoIy2glQcKn8dXJGWFj3rxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f72e47-42ab-43ca-a6f3-f8e0640e53d8/1/mB_vCRv5dj0pyznhlhVYflLR7Yc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f72e47-42ab-43ca-a6f3-f8e0640e53d8/1/B9C6NoIy2glQcKn8dXJGWFj3rxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.244.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:59:a5:8a:53:5e:e3:55:33:66:0a:a2:57:aa:42:e8:a5:e1:
         75:ec:ce:9f:08:f6:39:30:9f:2f:25:31:42:ec:a8:56:14:26:
         e8:c6:46:cc:94:79:2d:9f:b4:1b:69:7c:14:52:d4:1d:18:d8:
         9f:77:fe:7b:b0:77:3a:c4:d3:93:d8:5a:4c:38:da:1d:6e:15:
         62:a5:80:35:92:28:7d:aa:b0:3b:57:2b:f1:d9:61:33:b8:17:
         1e:e2:3c:73:d0:05:cc:c1:3e:71:a4:f6:3a:d0:81:73:93:eb:
         f0:03:09:0c:e7:c3:29:66:e9:d9:05:e5:18:9f:6b:db:30:cd:
         8b:44:89:41:3c:8f:64:dc:25:23:69:25:8b:7b:b0:32:f1:0e:
         9b:49:78:df:fc:40:bc:7a:59:9f:3e:5d:e5:7c:61:b4:1e:bf:
         c5:0b:06:6a:4b:c9:5d:a7:e7:8e:a3:d5:c8:5e:e8:b8:3e:05:
         74:46:86:56:0c:0b:50:89:e4:0b:29:1b:f8:db:c4:ac:e0:0a:
         9b:f6:92:9a:7d:b7:c4:78:1b:8c:42:e9:f0:f2:90:3e:58:9b:
         6f:07:ac:61:eb:76:19:14:65:a2:75:ef:38:dd:0c:cc:3e:0a:
         63:eb:b3:cc:cc:7e:a6:c2:2e:31:81:bd:88:09:66:3a:c4:e2:
         be:47:06:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:40 2023 by rpki-client on console-fra.rpki-client.org