Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/7F8jfFk7mtQurZVsX3hgoydFvR4.roa
File:                     7F8jfFk7mtQurZVsX3hgoydFvR4.roa (raw, json)
Hash identifier:          gtiqVmicRmsVy/y08LtScYXbt1E0pWdtDoDvxTepjIM=
Subject key identifier:   EC:5F:23:7C:59:3B:9A:D4:2E:AD:95:6C:5F:78:60:A3:27:45:BD:1E
Certificate issuer:       /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial:       018682BF85E8A99335036974864481FE5132
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/7F8jfFk7mtQurZVsX3hgoydFvR4.roa
Signing time:             Fri 24 Feb 2023 09:27:15 +0000
ROA not before:           Fri 24 Feb 2023 09:27:15 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        45.151.97.0/24 maxlen: 24
                          94.137.79.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:82:bf:85:e8:a9:93:35:03:69:74:86:44:81:fe:51:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
        Validity
            Not Before: Feb 24 09:27:15 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ec5f237c593b9ad42ead956c5f7860a32745bd1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f6:7b:60:08:07:04:a5:d1:17:66:e2:3f:2a:
                    55:a5:ad:c6:c5:1f:5c:b2:f2:06:4d:80:7b:a6:c8:
                    62:34:46:88:10:f7:0d:39:89:fa:07:20:98:1e:74:
                    0b:e7:39:03:4f:ae:9b:48:f0:46:40:de:78:cf:c2:
                    ad:ae:9c:34:b8:8c:b6:16:5b:f1:ca:e4:8d:80:c9:
                    d2:d6:4d:ad:87:3b:b5:6b:a4:19:01:6a:62:93:d5:
                    f7:88:64:1a:d2:de:bb:51:a1:86:b6:67:ef:b6:87:
                    fc:89:4d:39:35:11:10:ac:6f:2c:e8:95:df:0c:b8:
                    08:54:62:93:ff:55:d5:4f:5b:a1:82:37:0d:7f:18:
                    e5:9d:ca:8f:04:a6:4c:24:0f:64:7a:4c:67:17:3f:
                    85:b2:ff:e9:19:5f:ec:f0:b3:49:ca:8d:92:5b:cb:
                    7f:69:b4:81:fe:40:d9:44:8c:2e:38:52:be:ee:7b:
                    52:6f:d4:e5:27:2f:d5:78:73:62:fd:c4:58:4f:6f:
                    02:7f:0b:6e:ff:b8:2a:3e:fb:c3:85:7b:eb:1e:77:
                    6f:17:43:66:53:5b:f7:1d:11:6e:8e:b8:ef:ac:a1:
                    90:c4:9c:d4:c5:23:74:2a:a5:26:19:e0:ec:7f:8a:
                    f6:5b:c5:c7:c4:56:b4:87:fd:63:fd:8a:30:21:eb:
                    2c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:5F:23:7C:59:3B:9A:D4:2E:AD:95:6C:5F:78:60:A3:27:45:BD:1E
            X509v3 Authority Key Identifier:
                keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/7F8jfFk7mtQurZVsX3hgoydFvR4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.151.97.0/24
                  94.137.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:60:0f:71:e8:72:78:3d:e6:03:69:d8:77:f6:60:20:7f:ff:
         11:14:2d:59:2b:24:f2:2f:82:42:46:86:46:51:e1:bb:1e:b6:
         fc:c2:49:ca:ee:ec:44:a3:d9:13:3c:1f:b5:71:94:a6:fd:c4:
         42:0c:ee:4f:11:f8:54:e2:19:bd:dc:81:91:98:f5:c5:4a:f9:
         53:38:0e:4e:51:c9:e6:e7:7a:e8:8a:3d:3a:43:7d:15:66:f3:
         14:e8:d4:d6:53:65:7b:08:c7:4d:16:7b:31:ec:e2:cd:5e:41:
         df:37:ee:09:01:74:43:d6:b5:d3:48:e7:75:16:4b:dc:93:ef:
         db:12:2a:f7:c4:b8:5c:58:c1:06:7d:42:90:82:8a:fa:45:16:
         e3:4f:25:9c:34:5f:0e:f6:b9:13:18:b8:50:a1:0b:d2:80:15:
         43:8c:e4:92:dd:04:ac:27:cc:61:1d:7c:fe:be:52:3c:ff:0d:
         29:f0:ee:25:36:38:60:91:81:52:7a:49:c6:76:46:32:cc:c9:
         01:03:fd:c4:06:19:67:b3:77:b7:f1:5e:85:83:0c:a7:32:8b:
         4b:7f:13:79:6b:46:50:6f:81:8f:64:74:80:aa:37:33:2a:d7:
         c2:5b:88:71:52:0a:de:65:7a:ee:d9:d3:b9:bb:f6:6b:ad:b6:
         01:42:76:46
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYaCv4XoqZM1A2l0hkSB/lEyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YWMwYWNiZmRiN2EyNzRlZjM2YzE2ZjU4NjBhZGEyYTI0
NzA2OTcwHhcNMjMwMjI0MDkyNzE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzVmMjM3YzU5M2I5YWQ0MmVhZDk1NmM1Zjc4NjBhMzI3NDViZDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPZ7YAgHBKXRF2biPypVpa3GxR9c
svIGTYB7pshiNEaIEPcNOYn6ByCYHnQL5zkDT66bSPBGQN54z8Ktrpw0uIy2Flvx
yuSNgMnS1k2thzu1a6QZAWpik9X3iGQa0t67UaGGtmfvtof8iU05NREQrG8s6JXf
DLgIVGKT/1XVT1uhgjcNfxjlncqPBKZMJA9kekxnFz+Fsv/pGV/s8LNJyo2SW8t/
abSB/kDZRIwuOFK+7ntSb9TlJy/VeHNi/cRYT28Cfwtu/7gqPvvDhXvrHndvF0Nm
U1v3HRFujrjvrKGQxJzUxSN0KqUmGeDsf4r2W8XHxFa0h/1j/YowIess6QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOxfI3xZO5rULq2VbF94YKMnRb0eMB8GA1UdIwQY
MBaAFImsCsv9t6J07zbBb1hgraKiRwaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMt
ZDRkYmY3MDY2ZmQzLzEvN0Y4amZGazdtdFF1clpWc1gzaGdveWRGdlI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMtZDRkYmY3MDY2ZmQz
LzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZdhAwQA
XolPMA0GCSqGSIb3DQEBCwUAA4IBAQBBYA9x6HJ4PeYDadh39mAgf/8RFC1ZKyTy
L4JCRoZGUeG7Hrb8wknK7uxEo9kTPB+1cZSm/cRCDO5PEfhU4hm93IGRmPXFSvlT
OA5OUcnm53roij06Q30VZvMU6NTWU2V7CMdNFnsx7OLNXkHfN+4JAXRD1rXTSOd1
Fkvck+/bEir3xLhcWMEGfUKQgor6RRbjTyWcNF8O9rkTGLhQoQvSgBVDjOSS3QSs
J8xhHXz+vlI8/w0p8O4lNjhgkYFSeknGdkYyzMkBA/3EBhlns3e38V6FgwynMotL
fxN5a0ZQb4GPZHSAqjczKtfCW4hxUgreZXru2dO5u/ZrrbYBQnZG
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:11 2023 by rpki-client on console-fra.rpki-client.org