Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/vOmOoJeWf09nDVqUUaR7z2Cu7RY.roa
File:                     vOmOoJeWf09nDVqUUaR7z2Cu7RY.roa (raw, json)
Hash identifier:          /Y0cN94Rf2Us8jR3q+QyXgYnXlNoM5s/jrOZSa2RQ+Q=
Subject key identifier:   BC:E9:8E:A0:97:96:7F:4F:67:0D:5A:94:51:A4:7B:CF:60:AE:ED:16
Certificate issuer:       /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial:       01867E5C35C3E6E5F6D99C90FA54D2DB98D1
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/vOmOoJeWf09nDVqUUaR7z2Cu7RY.roa
Signing time:             Thu 23 Feb 2023 13:00:17 +0000
ROA not before:           Thu 23 Feb 2023 13:00:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        87.248.130.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 18 Apr 2023 07:23:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:7e:5c:35:c3:e6:e5:f6:d9:9c:90:fa:54:d2:db:98:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
        Validity
            Not Before: Feb 23 13:00:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bce98ea097967f4f670d5a9451a47bcf60aeed16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b2:b4:ec:2b:18:16:28:44:32:04:ee:80:77:
                    00:0c:f9:d0:9b:cf:7d:19:73:73:08:88:8d:5e:02:
                    d7:b2:da:5d:9e:9d:d7:90:61:e0:ce:55:7b:07:5c:
                    50:47:51:39:7e:0c:f3:1b:47:7c:fe:55:2f:f9:14:
                    30:b9:a8:7e:3f:51:66:85:00:2f:a5:5a:93:8e:c9:
                    34:2b:5b:9b:76:d8:b0:6e:be:c3:cf:b9:e3:bc:22:
                    0f:7d:ea:15:c7:bf:a7:55:e6:11:0b:64:b2:d8:57:
                    ed:6c:e1:a2:7c:ea:83:8a:cd:72:b4:76:47:b5:3c:
                    ad:00:00:d9:21:0c:cf:d8:e5:2a:6f:21:d0:09:aa:
                    04:fa:e0:24:f3:ce:2a:34:dc:ef:f7:59:3a:d6:49:
                    86:4e:e5:0c:7c:6f:70:6f:57:63:ba:8a:5a:04:d4:
                    10:7e:ed:f3:da:85:50:da:35:16:56:05:85:90:90:
                    7d:a7:fd:12:f8:87:8e:8f:bd:1f:de:ed:c4:42:96:
                    6a:b7:39:95:b6:35:03:e2:41:15:5c:24:46:23:50:
                    cb:6c:6d:43:21:b2:e3:6e:7e:45:90:a5:3a:02:e2:
                    62:de:9c:eb:c7:f6:44:61:c3:e1:94:fa:2d:c6:e7:
                    e9:de:fb:ef:12:4a:1c:ab:f9:11:b3:3a:6b:eb:86:
                    bc:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E9:8E:A0:97:96:7F:4F:67:0D:5A:94:51:A4:7B:CF:60:AE:ED:16
            X509v3 Authority Key Identifier:
                keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/vOmOoJeWf09nDVqUUaR7z2Cu7RY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.248.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:84:a3:78:a2:f0:7f:10:79:97:f6:07:94:f4:0b:d3:1f:c0:
         c5:23:2c:1a:90:3a:50:ce:9f:b1:b2:8e:d1:5d:fc:cc:43:b9:
         17:a9:36:7e:31:ac:e5:83:7f:62:77:41:75:05:e3:6e:65:87:
         48:f4:96:e4:1b:a8:86:32:54:f9:aa:92:da:51:a5:a4:bf:8a:
         7c:b7:39:ce:46:03:96:c2:31:36:1b:96:04:4e:6c:91:66:bd:
         e9:2a:b0:10:b4:fe:03:74:87:e4:e4:98:75:de:6f:1a:07:b0:
         28:c7:7f:10:d0:61:d9:bd:1b:f3:ac:88:5e:ba:0b:2c:53:77:
         45:a5:3a:db:33:9d:02:7d:3d:12:69:6f:55:e1:be:36:77:8a:
         3e:82:00:88:63:f9:d7:d5:a9:6e:5a:87:64:99:cc:97:86:6e:
         14:10:44:22:de:69:2d:f1:44:cb:bc:01:5e:24:a3:b3:e8:83:
         e0:1d:b3:a7:4a:2b:3e:85:1f:1d:57:ac:43:37:ad:37:81:cd:
         d1:13:ac:55:c3:05:73:ac:7e:ce:c2:b0:db:ad:cf:b5:09:4e:
         1f:8a:f5:ca:74:a2:91:d4:d8:56:c8:78:80:9b:81:54:7c:9c:
         68:c6:94:3b:6b:23:79:60:02:f9:5f:cf:ff:9a:b5:1c:06:72:
         ce:a7:95:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:35 2024 by rpki-client on console-fra.rpki-client.org