Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/7Q6NroRHkVEBbxrQZ7X4fReeL8I.roa
File:                     7Q6NroRHkVEBbxrQZ7X4fReeL8I.roa (raw, json)
Hash identifier:          mwZ0O7pVFSyLqmt2Kkpka3lKH8C0JyRM2GCBpxYkgUA=
Subject key identifier:   ED:0E:8D:AE:84:47:91:51:01:6F:1A:D0:67:B5:F8:7D:17:9E:2F:C2
Certificate issuer:       /CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
Certificate serial:       018866929D6BFC9C5CE3F25D1CE21C184D2A
Authority key identifier: 57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/7Q6NroRHkVEBbxrQZ7X4fReeL8I.roa
Signing time:             Mon 29 May 2023 08:14:24 +0000
ROA not before:           Mon 29 May 2023 08:14:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     16509
IP address blocks:        178.236.226.0/24 maxlen: 24
                          178.236.235.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:66:92:9d:6b:fc:9c:5c:e3:f2:5d:1c:e2:1c:18:4d:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5794afdb5e6a1885780920a54ffa82408ea85ba1
        Validity
            Not Before: May 29 08:14:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ed0e8dae84479151016f1ad067b5f87d179e2fc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8b:9d:cc:9f:4b:c2:02:b0:99:60:b6:5a:05:
                    6d:a8:3c:d6:62:37:e8:36:36:89:31:59:b7:95:23:
                    c6:b1:57:6d:f5:67:6b:a4:1f:ef:86:05:33:bb:ea:
                    68:53:b0:36:9d:ea:55:e8:50:82:99:57:9d:7f:7c:
                    3c:40:ef:a3:fc:8e:43:9a:48:38:41:d9:3b:b8:40:
                    fc:f5:70:94:83:d8:cc:e2:22:08:bb:c2:28:3f:6e:
                    d0:75:ad:06:44:85:82:ab:38:f1:95:27:67:c4:b2:
                    2e:f4:19:29:0f:35:d1:0e:be:aa:a8:f1:75:44:e1:
                    98:d0:fd:17:1e:d9:93:08:46:a5:54:c1:9f:59:d4:
                    db:73:f8:1d:a7:3a:e2:0e:27:ff:29:24:a7:e2:0b:
                    2f:9e:9f:56:70:70:e3:04:52:b8:9e:20:4c:83:97:
                    04:46:a6:f7:24:bc:97:0e:a0:45:eb:2d:9a:6b:1e:
                    da:76:cf:4a:e0:68:c0:ac:7f:63:0a:07:cf:d7:bf:
                    6e:3f:1f:19:a4:e8:ba:69:18:ef:7b:06:c2:cc:87:
                    0d:b4:dd:84:80:35:6f:62:e1:dc:99:ec:a0:03:53:
                    dd:56:79:b9:c5:86:8c:4c:0e:f2:d3:de:f6:c1:cd:
                    ff:05:9a:87:62:3a:48:18:7c:30:d6:0c:30:11:f6:
                    b9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0E:8D:AE:84:47:91:51:01:6F:1A:D0:67:B5:F8:7D:17:9E:2F:C2
            X509v3 Authority Key Identifier:
                keyid:57:94:AF:DB:5E:6A:18:85:78:09:20:A5:4F:FA:82:40:8E:A8:5B:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5Sv215qGIV4CSClT_qCQI6oW6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/7Q6NroRHkVEBbxrQZ7X4fReeL8I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ddce4d-9912-487d-b55d-47d82a41a8f3/1/V5Sv215qGIV4CSClT_qCQI6oW6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.236.226.0/24
                  178.236.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:79:34:e5:a7:b3:6c:c4:7a:18:11:fa:ee:26:21:3e:5a:86:
         13:24:fe:5f:4e:a2:c2:6a:5d:bb:d3:cf:6a:c0:52:8e:a2:2f:
         c0:86:4f:80:ab:36:cb:e6:98:18:04:3f:15:c2:ea:3f:91:1d:
         75:e5:5a:ca:e0:6a:b5:5b:8b:0a:8c:75:04:85:12:4c:d6:67:
         98:af:0e:21:31:2b:33:82:32:53:9f:89:7f:f2:dc:96:7e:a7:
         38:c1:c7:c5:12:e0:53:e2:08:6a:06:37:60:cf:69:a0:f7:a4:
         2c:68:49:c0:c0:c0:23:63:dd:53:ca:42:80:7f:bd:3d:05:e9:
         ab:67:33:3b:d6:3a:65:54:45:46:53:23:1b:56:07:ba:2e:47:
         2a:f9:50:4e:67:f0:d1:b9:49:10:2b:01:8c:85:48:c4:6b:d3:
         0e:18:4c:0e:c8:1b:4d:7b:06:d5:13:a8:d2:47:e0:d9:18:0f:
         d7:de:2c:29:cf:57:71:07:02:72:c3:06:c9:25:0c:77:ad:01:
         e6:fd:27:68:39:aa:b0:52:ad:96:b6:65:4f:93:7b:a2:81:ce:
         b2:92:e5:7f:73:ab:09:3a:d5:31:7f:6d:6e:4a:38:34:1e:24:
         55:54:dc:4a:db:00:64:89:29:d3:32:59:47:4c:0a:e0:9b:88:
         59:dc:c3:c1
-----BEGIN CERTIFICATE-----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Generated at Fri Aug 11 16:46:56 2023 by rpki-client on console-fra.rpki-client.org