Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/jCHIgohE1sHgV1Ro5p_rZ23sPow.roa
File:                     jCHIgohE1sHgV1Ro5p_rZ23sPow.roa (raw, json)
Hash identifier:          o9o1t/lHBa0+R9SSsqdYAEcJR5TeHrXezERWK9pTh9M=
Subject key identifier:   8C:21:C8:82:88:44:D6:C1:E0:57:54:68:E6:9F:EB:67:6D:EC:3E:8C
Certificate issuer:       /CN=679a75debd65359a45317f203f11a321e14b2f2c
Certificate serial:       0187DB17323CAB70E58AC6BADBE4537FD421
Authority key identifier: 67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/jCHIgohE1sHgV1Ro5p_rZ23sPow.roa
Signing time:             Tue 02 May 2023 06:12:23 +0000
ROA not before:           Tue 02 May 2023 06:12:23 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61317
IP address blocks:        87.121.136.0/21 maxlen: 24
                          94.176.96.0/24 maxlen: 24
                          89.44.77.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:db:17:32:3c:ab:70:e5:8a:c6:ba:db:e4:53:7f:d4:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=679a75debd65359a45317f203f11a321e14b2f2c
        Validity
            Not Before: May  2 06:12:23 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8c21c8828844d6c1e0575468e69feb676dec3e8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9a:2f:92:17:60:88:15:1f:9f:7c:c8:d3:9d:
                    c3:8c:20:0d:c1:61:54:18:43:10:81:24:b3:a8:7f:
                    88:3d:fa:42:4d:56:f5:54:db:a0:c1:0b:74:ff:e9:
                    d6:03:00:19:b9:a8:d8:f9:1f:40:a6:8c:8d:c9:f1:
                    72:88:fc:59:8e:a4:49:da:ac:58:8c:23:6f:37:e6:
                    64:c7:14:30:65:2d:cc:af:be:76:10:de:6c:12:f9:
                    5d:e5:be:c7:ad:f9:ba:0f:ab:28:86:c4:a4:35:72:
                    c5:48:d4:be:5f:e1:59:95:7e:41:7e:eb:7a:2c:5e:
                    eb:14:22:16:ee:cb:8a:75:4e:19:cc:82:84:89:e5:
                    df:d6:fa:0f:5b:dc:72:6d:fb:09:ec:3e:c8:97:c7:
                    2b:0a:0b:76:7d:82:98:44:32:16:a4:a1:a6:94:0b:
                    58:3d:c9:a7:75:72:91:1f:fb:05:2e:03:77:34:a5:
                    2d:17:94:07:77:d6:54:3e:ab:dc:30:f6:60:ab:b4:
                    28:32:4a:ad:f5:d1:0b:c3:a7:d1:9c:f4:8a:22:d8:
                    87:ae:cc:c6:8a:af:69:7d:78:29:1c:ad:d8:e5:eb:
                    dc:9e:ad:33:89:6b:3c:06:0c:20:bb:dc:b9:66:ba:
                    73:18:62:5d:da:53:6e:0a:ba:65:10:8e:bd:ad:d6:
                    71:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:21:C8:82:88:44:D6:C1:E0:57:54:68:E6:9F:EB:67:6D:EC:3E:8C
            X509v3 Authority Key Identifier:
                keyid:67:9A:75:DE:BD:65:35:9A:45:31:7F:20:3F:11:A3:21:E1:4B:2F:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5p13r1lNZpFMX8gPxGjIeFLLyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/jCHIgohE1sHgV1Ro5p_rZ23sPow.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a39b1-1d1c-4919-b19c-3eebe7196972/1/Z5p13r1lNZpFMX8gPxGjIeFLLyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.121.136.0/21
                  89.44.77.0/24
                  94.176.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:df:33:f0:d8:b6:1b:4c:75:5a:67:24:9c:0e:3a:4b:09:f2:
         fb:36:d0:0f:57:e4:7a:0e:a7:48:30:bf:d1:21:63:cf:24:a4:
         8f:7a:d8:92:7a:0b:8a:ad:55:6f:b8:62:7d:1c:1f:3f:e5:9f:
         f3:56:56:81:03:fd:db:66:32:13:58:10:a9:74:8f:09:cb:d2:
         1a:85:c1:3e:75:38:f1:60:00:4c:df:b9:a3:56:0b:fc:1e:56:
         b7:5a:a1:f3:e6:c2:f2:b6:78:bf:1b:5c:23:86:f0:ca:f4:ce:
         65:78:85:cc:87:ae:83:8a:16:8a:05:da:eb:62:5d:6b:34:dc:
         73:33:e3:7f:94:f7:8a:42:18:67:78:bc:87:5c:3a:36:15:7b:
         08:65:03:07:4a:4b:78:8c:30:6a:20:44:98:f0:1f:50:70:b6:
         ed:d6:2a:23:62:f4:c5:77:e6:a5:30:ab:41:b1:b8:f2:2c:80:
         a9:7c:6f:1f:3e:01:e2:84:44:88:4b:8f:b1:0b:86:af:df:0b:
         09:bc:f3:c0:34:05:db:f6:90:7a:d5:e7:66:d3:84:cb:61:5d:
         c1:c5:67:af:29:29:56:86:2d:3f:78:d1:c9:10:4a:3a:07:60:
         b3:48:84:fd:7a:1f:08:47:27:87:86:bd:37:17:8a:50:44:a0:
         ec:ea:96:87
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYfbFzI8q3Dlisa62+RTf9QhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OWE3NWRlYmQ2NTM1OWE0NTMxN2YyMDNmMTFhMzIxZTE0
YjJmMmMwHhcNMjMwNTAyMDYxMjIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzIxYzg4Mjg4NDRkNmMxZTA1NzU0NjhlNjlmZWI2NzZkZWMzZThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJovkhdgiBUfn3zI053DjCANwWFU
GEMQgSSzqH+IPfpCTVb1VNugwQt0/+nWAwAZuajY+R9ApoyNyfFyiPxZjqRJ2qxY
jCNvN+ZkxxQwZS3Mr752EN5sEvld5b7Hrfm6D6sohsSkNXLFSNS+X+FZlX5Bfut6
LF7rFCIW7suKdU4ZzIKEieXf1voPW9xybfsJ7D7Il8crCgt2fYKYRDIWpKGmlAtY
PcmndXKRH/sFLgN3NKUtF5QHd9ZUPqvcMPZgq7QoMkqt9dELw6fRnPSKItiHrszG
iq9pfXgpHK3Y5evcnq0ziWs8Bgwgu9y5ZrpzGGJd2lNuCrplEI69rdZxhwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFIwhyIKIRNbB4FdUaOaf62dt7D6MMB8GA1UdIwQY
MBaAFGeadd69ZTWaRTF/ID8RoyHhSy8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjVwMTNyMWxOWnBGTVg4Z1B4R2pJZUZMTHl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS83YTM5YjEtMWQxYy00OTE5LWIxOWMt
M2VlYmU3MTk2OTcyLzEvakNISWdvaEUxc0hnVjFSbzVwX3JaMjNzUG93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS83YTM5YjEtMWQxYy00OTE5LWIxOWMtM2VlYmU3MTk2OTcy
LzEvWjVwMTNyMWxOWnBGTVg4Z1B4R2pJZUZMTHl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDV3mIAwQA
WSxNAwQAXrBgMA0GCSqGSIb3DQEBCwUAA4IBAQA73zPw2LYbTHVaZyScDjpLCfL7
NtAPV+R6DqdIML/RIWPPJKSPetiSeguKrVVvuGJ9HB8/5Z/zVlaBA/3bZjITWBCp
dI8Jy9IahcE+dTjxYABM37mjVgv8Hla3WqHz5sLytni/G1wjhvDK9M5leIXMh66D
ihaKBdrrYl1rNNxzM+N/lPeKQhhneLyHXDo2FXsIZQMHSkt4jDBqIESY8B9QcLbt
1iojYvTFd+alMKtBsbjyLICpfG8fPgHihESIS4+xC4av3wsJvPPANAXb9pB61edm
04TLYV3BxWevKSlWhi0/eNHJEEo6B2CzSIT9eh8IRyeHhr03F4pQRKDs6paH
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:36 2023 by rpki-client on console-fra.rpki-client.org