Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/EouCuAa_w48RtbwrwLjproEGbsQ.roa
File:                     EouCuAa_w48RtbwrwLjproEGbsQ.roa (raw, json)
Hash identifier:          rq4W/JbKvy4ITITGHH9/2fE8blMeAAQBC+KjQXenbQM=
Subject key identifier:   12:8B:82:B8:06:BF:C3:8F:11:B5:BC:2B:C0:B8:E9:AE:81:06:6E:C4
Certificate issuer:       /CN=70f9b16adf2fd31988859922b4457481dd7eef40
Certificate serial:       0186C15C8BF650434D73C3EBBE2668DA5E58
Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/EouCuAa_w48RtbwrwLjproEGbsQ.roa
Signing time:             Wed 08 Mar 2023 13:15:13 +0000
ROA not before:           Wed 08 Mar 2023 13:15:13 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206446
IP address blocks:        141.226.245.0/24 maxlen: 24
                          141.226.241.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:c1:5c:8b:f6:50:43:4d:73:c3:eb:be:26:68:da:5e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40
        Validity
            Not Before: Mar  8 13:15:13 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=128b82b806bfc38f11b5bc2bc0b8e9ae81066ec4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:27:54:83:5e:ad:28:bd:b3:00:7b:b6:07:2f:
                    4e:74:7f:10:c4:8b:29:b5:a9:6e:f0:cf:0f:4c:53:
                    e5:a6:85:6c:c5:99:ff:94:4f:68:c7:75:ee:cd:9a:
                    3a:1a:db:78:29:24:7a:ce:e8:de:f5:c4:3b:ee:fc:
                    e9:8d:d7:25:96:f0:1a:85:8d:eb:f3:d5:f3:af:96:
                    3f:b5:13:a3:3f:f6:d7:51:00:23:90:24:e5:b1:16:
                    69:eb:2c:d7:3f:1f:51:6c:63:91:fe:23:0e:a3:4a:
                    11:f5:64:0d:2e:0b:90:a2:59:4f:fc:84:78:07:f1:
                    cf:8a:97:56:c2:fb:b3:4a:20:5d:d6:82:3f:84:d2:
                    33:5f:9b:a0:83:d9:3f:a4:f2:3b:ee:34:69:7d:52:
                    3d:16:f4:6e:54:b1:9b:0d:07:c9:72:2d:e2:3e:49:
                    f8:64:d7:56:16:c9:fe:97:a5:6b:af:72:02:d1:a5:
                    e5:55:a6:33:ad:66:c7:16:d7:0f:6d:b6:8b:16:91:
                    bc:06:62:f1:2f:2d:80:86:c0:11:81:80:f0:7c:92:
                    d6:75:5f:7b:ee:72:e3:e0:11:1c:4a:a8:b7:97:fd:
                    8d:d8:12:c1:13:52:a5:e1:15:be:46:4f:27:19:c3:
                    e1:c2:52:9f:b1:ca:4a:1a:63:94:b8:1c:dc:c2:e0:
                    9a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:8B:82:B8:06:BF:C3:8F:11:B5:BC:2B:C0:B8:E9:AE:81:06:6E:C4
            X509v3 Authority Key Identifier:
                keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/EouCuAa_w48RtbwrwLjproEGbsQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.226.241.0/24
                  141.226.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:ad:03:ed:6e:64:b3:a2:ff:1f:2b:85:be:e9:13:33:b3:f2:
         58:29:bb:95:d1:09:77:4a:0a:8c:de:f8:60:57:6b:36:6b:24:
         0a:8c:6d:e5:8b:4c:ac:9b:28:08:90:fc:e3:ac:48:f4:57:4d:
         fa:64:c6:e1:ee:c7:c3:1f:e6:b6:b4:dc:12:44:54:5e:3b:8b:
         0a:6a:a7:47:f7:d7:06:5e:30:1b:2c:7c:2a:b3:2e:ea:dd:f0:
         d8:9a:79:6c:4d:02:e6:b5:45:24:c0:e6:c6:d5:a6:40:6e:ea:
         10:76:b2:03:2d:44:75:29:1f:5e:ff:d5:72:76:f5:46:a5:6b:
         4e:98:fb:d7:53:5e:a0:e1:65:28:c6:05:38:96:72:44:92:48:
         d4:0d:e4:17:4a:6e:b4:19:6d:ed:10:16:5e:4a:8b:7a:43:04:
         d7:d9:2b:57:b3:8a:ca:96:6a:98:49:00:12:27:f9:75:a8:83:
         01:ab:6c:23:6b:c2:47:6a:5d:dd:cc:43:43:d8:45:22:7f:1a:
         f0:be:2d:45:1d:1d:4b:5b:b3:f8:ba:63:c5:0a:d2:49:26:ad:
         47:57:87:9f:2d:79:40:25:70:91:3d:d7:80:81:eb:62:e7:dc:
         8b:cb:bc:6c:88:10:cd:96:c4:c1:28:c2:f3:7f:40:05:27:4a:
         86:ea:8a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 24 14:09:29 2023 by rpki-client on console-ams.rpki-client.org