Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ddcI80tuo22CVGtRS7EmkIgLSqE.roa
File:                     ddcI80tuo22CVGtRS7EmkIgLSqE.roa (raw, json)
Hash identifier:          Mv2aVAX/Ggf1/zX9qMX/qHiXpWB4sNjaTXxDuCNYT7Y=
Subject key identifier:   75:D7:08:F3:4B:6E:A3:6D:82:54:6B:51:4B:B1:26:90:88:0B:4A:A1
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       018C3B2DEF26F02563A58398C3263BF8AD9F
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ddcI80tuo22CVGtRS7EmkIgLSqE.roa
Signing time:             Tue 05 Dec 2023 18:11:55 +0000
ROA not before:           Tue 05 Dec 2023 18:11:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200482
IP address blocks:        89.43.62.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:3b:2d:ef:26:f0:25:63:a5:83:98:c3:26:3b:f8:ad:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Dec  5 18:11:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=75d708f34b6ea36d82546b514bb12690880b4aa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:07:9d:3b:33:0e:e9:15:e3:d6:55:22:53:d7:
                    4c:cd:bb:94:c5:35:f6:59:d8:bc:6f:2a:12:29:0b:
                    a6:ad:b8:48:2a:e1:8c:01:02:71:93:62:ba:8f:3c:
                    7a:6d:17:7d:fd:40:5f:a1:60:18:b3:e5:a7:29:c8:
                    8c:6d:30:e9:05:76:a6:bb:bf:98:ac:61:ae:27:dc:
                    86:12:51:13:3e:3e:39:3a:f9:b2:80:77:df:03:dd:
                    8b:69:84:1b:f9:13:3d:55:c2:95:ba:5d:3b:24:d1:
                    71:09:8d:25:5d:8d:91:e3:bf:c2:8f:7e:94:54:12:
                    0c:f8:ba:45:bc:cf:e1:93:23:d0:e9:9b:51:22:2a:
                    ce:8e:b5:dc:f4:5b:ab:50:f7:6b:52:72:6a:a8:e7:
                    b6:d9:d5:d8:48:fc:e3:1b:a5:21:8f:be:ac:7e:4a:
                    b8:2e:da:bf:08:de:93:2a:c8:b8:73:33:24:96:b0:
                    4f:6b:19:bf:59:1a:4d:2b:74:b3:b8:ee:43:04:10:
                    83:38:04:c4:0b:16:8f:81:e1:4f:c4:42:89:99:05:
                    5a:50:97:b5:8b:da:f1:24:ac:23:1c:c8:82:21:fe:
                    11:c3:df:4a:fd:b8:32:d8:11:c3:e1:53:b4:c8:7c:
                    09:99:5a:82:5b:24:68:bb:39:49:ef:13:ea:e3:6c:
                    80:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D7:08:F3:4B:6E:A3:6D:82:54:6B:51:4B:B1:26:90:88:0B:4A:A1
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ddcI80tuo22CVGtRS7EmkIgLSqE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.43.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:aa:c5:d4:ee:76:a6:1d:40:ae:13:7a:00:38:55:d5:bf:d1:
         59:e9:c5:94:ce:a1:1b:0a:fb:e3:b1:01:84:49:04:20:4c:e0:
         75:5a:92:d8:1f:76:bb:0d:a8:ae:e5:2a:fe:99:73:96:18:8a:
         1e:a3:ac:1e:59:1f:93:e9:07:f3:95:4a:24:e4:f8:1a:09:87:
         55:ea:70:48:36:d1:80:85:b8:4e:92:34:1b:36:c2:1b:96:0a:
         c6:dc:46:5b:8d:db:79:66:2d:fe:f3:5d:28:16:7e:64:54:ab:
         f0:aa:17:79:b2:85:e5:48:ec:25:8d:c1:f6:2c:bf:0b:6b:5d:
         b0:c0:e1:a3:b2:7e:82:f0:45:e7:ec:84:05:af:77:7d:7c:cc:
         ef:6b:4c:c2:23:3d:aa:9d:12:19:20:da:15:cc:2a:39:43:c3:
         bf:71:1f:fa:a0:d7:53:d0:d3:93:ef:f6:bd:3f:8a:1c:74:d8:
         3f:cd:c4:dc:b9:4e:a1:c0:0c:3f:22:65:b3:44:f6:bc:d3:dd:
         56:70:38:2e:22:60:01:35:58:94:0c:2e:24:38:3c:b7:af:71:
         95:3b:8d:d4:43:48:37:19:94:1a:ac:a0:21:a1:14:09:d9:1d:
         6a:21:66:36:fb:64:9d:e0:3a:3d:9a:cb:ab:0f:42:c5:81:4b:
         43:06:46:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:12 2024 by rpki-client on console-fra.rpki-client.org