Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/MOPIE1bYIAIvoa1I1ooGkUqdkC8.roa
File:                     MOPIE1bYIAIvoa1I1ooGkUqdkC8.roa (raw, json)
Hash identifier:          gRs3OAwyM4EUxqZdlf63nUO5e1V5uGaPkZneUj3JyIo=
Subject key identifier:   30:E3:C8:13:56:D8:20:02:2F:A1:AD:48:D6:8A:06:91:4A:9D:90:2F
Certificate issuer:       /CN=082b303cb49e73e2d2a404583d5f8377ceb02545
Certificate serial:       0188D691E0FD594853DB65E98D0EE6CDE1A7
Authority key identifier: 08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/MOPIE1bYIAIvoa1I1ooGkUqdkC8.roa
Signing time:             Tue 20 Jun 2023 02:11:04 +0000
ROA not before:           Tue 20 Jun 2023 02:11:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16242
IP address blocks:        193.247.85.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:d6:91:e0:fd:59:48:53:db:65:e9:8d:0e:e6:cd:e1:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082b303cb49e73e2d2a404583d5f8377ceb02545
        Validity
            Not Before: Jun 20 02:11:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=30e3c81356d820022fa1ad48d68a06914a9d902f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:62:4a:2f:c3:d4:b9:85:24:2e:2c:d6:7a:10:
                    91:1d:28:f1:d5:2b:43:c5:1b:13:23:e0:99:06:aa:
                    9c:a9:ef:ed:98:9f:34:ff:a5:9e:89:77:b9:0b:03:
                    51:5d:b0:22:d9:9b:52:89:87:c4:6b:cf:fb:dc:bb:
                    42:01:10:f6:65:9f:49:4b:93:28:4e:d2:6b:0a:31:
                    d7:4c:9f:7f:af:a3:08:20:f2:90:80:25:df:9e:41:
                    be:8d:84:12:d3:c4:a2:f7:ec:25:19:ab:ca:ff:4d:
                    e9:8c:29:6b:7a:81:ae:ba:e2:e2:76:b3:88:71:78:
                    b7:72:f8:46:d1:7c:25:f2:24:95:9e:77:4c:4e:fa:
                    0b:cf:98:78:0d:b2:a2:3a:fc:e3:d4:3c:72:c5:db:
                    94:94:8e:4d:0d:23:42:4b:24:23:47:8a:e4:f6:17:
                    7c:19:a7:b9:7e:9d:ce:24:0f:b2:ac:df:95:ba:c5:
                    6d:24:a8:97:0d:5a:de:06:48:8b:3a:3e:4c:36:1b:
                    99:1e:cf:f0:05:2a:19:43:d3:33:74:f0:e1:f5:6e:
                    32:bf:37:7d:9d:21:77:4c:d7:61:5d:90:55:f6:72:
                    fb:e4:92:45:c5:44:07:b1:cb:cd:4d:8d:49:37:52:
                    9d:dc:83:a9:d7:91:57:84:97:6d:ae:fc:2f:38:13:
                    aa:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E3:C8:13:56:D8:20:02:2F:A1:AD:48:D6:8A:06:91:4A:9D:90:2F
            X509v3 Authority Key Identifier:
                keyid:08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/MOPIE1bYIAIvoa1I1ooGkUqdkC8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.247.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:eb:4b:55:e4:d0:8a:1d:74:34:44:42:b3:22:a2:b5:f1:75:
         52:ac:c8:75:51:3a:42:ae:14:15:9f:fe:ea:5b:12:e8:e3:7b:
         18:23:ae:1c:f4:4f:fb:85:fd:54:61:86:b7:0e:0e:6e:49:1f:
         e6:a5:f7:af:49:1f:5d:d9:e7:ce:64:db:73:90:8a:6c:2f:8c:
         cf:d0:a0:ca:6b:62:be:86:5b:a7:55:1d:7a:d8:3a:68:a9:0f:
         69:e0:e3:27:e3:8e:5f:98:ed:ef:c9:e8:cc:62:16:9d:f5:47:
         ae:06:ea:11:d4:91:65:53:98:84:cc:57:19:a9:4a:e6:c9:c3:
         10:7e:08:5f:5d:04:b9:d9:00:56:7a:5a:53:01:b6:48:30:33:
         01:a8:68:9a:b2:3f:9f:03:14:83:dc:2e:97:b2:ba:cd:66:b8:
         bf:33:13:89:f4:bc:8e:c7:3f:43:1f:aa:8b:c3:d2:44:cc:b7:
         b4:c2:b3:e1:78:a1:22:7c:b3:d2:d4:b7:5c:ee:d0:2d:4b:aa:
         ad:6e:73:80:75:e7:21:58:26:56:77:02:19:95:2a:36:02:48:
         9d:91:21:bb:03:b2:e3:c8:16:88:95:aa:be:7e:c1:61:ed:ac:
         cd:f0:9b:11:e8:ae:53:e1:c6:d1:a2:a4:67:62:74:ce:30:15:
         30:a8:04:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 27 06:54:36 2023 by rpki-client on console-ams.rpki-client.org