Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/7OpsypLP0G7IGwN09LG1WPdPWNc.roa
File:                     7OpsypLP0G7IGwN09LG1WPdPWNc.roa (raw, json)
Hash identifier:          KaiW6Uh/QycDc3kkZDqA/m/sZOJnZ+dNrormlHNi/K0=
Subject key identifier:   EC:EA:6C:CA:92:CF:D0:6E:C8:1B:03:74:F4:B1:B5:58:F7:4F:58:D7
Certificate issuer:       /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial:       01889201B8E421A38070278FFB4E2E816F21
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/7OpsypLP0G7IGwN09LG1WPdPWNc.roa
Signing time:             Tue 06 Jun 2023 18:39:26 +0000
ROA not before:           Tue 06 Jun 2023 18:39:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     137409
IP address blocks:        86.106.97.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:92:01:b8:e4:21:a3:80:70:27:8f:fb:4e:2e:81:6f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
        Validity
            Not Before: Jun  6 18:39:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ecea6cca92cfd06ec81b0374f4b1b558f74f58d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b7:79:de:bf:5c:8c:12:09:65:21:40:4f:bd:
                    c2:6e:48:5b:ba:bf:c2:6c:09:07:21:58:7e:74:00:
                    6e:b6:ce:8a:b4:a9:66:6a:1e:44:cb:2b:70:83:0e:
                    b0:90:8e:c5:be:81:8c:d6:7a:b3:7c:a2:e7:ee:68:
                    b4:7c:b7:3d:e0:8e:e9:5a:79:da:67:ed:6f:7c:b7:
                    36:7a:10:95:ce:7b:43:99:f2:ee:a8:e6:3c:c4:5a:
                    97:89:8a:de:18:a0:b3:9b:bd:0b:d6:c6:92:5c:ab:
                    72:0c:73:1a:4b:9c:a5:81:fc:16:fd:d1:32:41:f7:
                    df:7e:c2:34:d2:8c:a4:27:b8:4b:b9:b7:77:f7:96:
                    e7:55:02:04:bb:cf:3f:1f:85:22:d6:0c:18:ca:b6:
                    df:1d:1a:96:9d:96:06:ec:fc:1f:4f:a1:a7:78:8a:
                    2e:91:45:59:14:33:a6:9c:cb:ae:90:e4:a0:6f:4f:
                    d7:f4:a2:63:f0:a1:03:6a:ac:36:a9:b6:b2:f3:21:
                    bd:8e:85:61:26:1a:6c:db:fa:26:f1:c3:df:55:1f:
                    f8:a6:2e:68:2b:04:89:03:6e:5c:29:13:c0:a6:a1:
                    ff:20:cb:1c:6f:e4:36:c3:70:39:c7:2e:74:e3:70:
                    f0:9f:fe:09:82:c0:3c:77:69:c6:83:d8:81:94:9b:
                    0c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:EA:6C:CA:92:CF:D0:6E:C8:1B:03:74:F4:B1:B5:58:F7:4F:58:D7
            X509v3 Authority Key Identifier:
                keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/7OpsypLP0G7IGwN09LG1WPdPWNc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  86.106.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:21:46:f8:18:98:f5:30:c2:e8:fd:fc:bf:65:75:64:e7:51:
         44:52:58:4c:ff:fe:9e:af:1f:93:ef:34:35:19:18:c3:a1:8b:
         dc:5f:96:b3:5b:23:f9:d0:02:e4:c9:51:a8:ee:9f:98:4a:75:
         8e:11:45:7c:8d:ce:8c:4f:97:c7:68:f3:4b:27:2f:ca:82:42:
         c1:44:42:cd:da:ff:93:18:82:9a:50:66:a2:5c:3b:35:08:1f:
         e8:58:08:db:b2:9f:22:0c:c0:3f:fa:5b:01:92:1d:1e:a5:e8:
         ff:3f:23:2b:e2:e5:b6:e8:c6:0e:96:eb:13:11:d7:bb:4a:74:
         2d:96:f3:74:02:8e:c5:2a:9a:fa:e9:6a:f9:78:86:62:9e:cd:
         18:28:96:3b:4c:24:c8:02:25:29:62:cc:40:fa:c1:81:a8:cf:
         d2:9c:3c:93:98:35:15:e1:e5:86:2d:19:bb:76:04:ca:10:5c:
         46:0e:48:b0:d4:a1:39:db:2e:01:5a:8f:e3:86:a5:bc:b6:c2:
         67:e8:cc:a3:af:9f:83:ce:c7:31:b8:a6:03:48:d9:51:b6:41:
         0d:c4:94:a0:6a:94:c0:1f:a6:d9:e3:3c:92:a0:5f:38:43:66:
         99:8b:27:4e:07:2f:49:38:62:f1:6a:c3:d7:dd:bb:58:0d:c4:
         75:1d:02:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:54 2023 by rpki-client on console-ams.rpki-client.org