Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/7nwcLA2DU-MLEzzl6kAVqh9rjuI.roa
File:                     7nwcLA2DU-MLEzzl6kAVqh9rjuI.roa (raw, json)
Hash identifier:          3IsdhxbPb8Z8Qt4lfUFOV/AELMgE/PXvkqNKRa0JfBE=
Subject key identifier:   EE:7C:1C:2C:0D:83:53:E3:0B:13:3C:E5:EA:40:15:AA:1F:6B:8E:E2
Certificate issuer:       /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial:       0186F3440A6876D7BBEDF5DD79AC379AF4C5
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/7nwcLA2DU-MLEzzl6kAVqh9rjuI.roa
Signing time:             Sat 18 Mar 2023 05:49:27 +0000
ROA not before:           Sat 18 Mar 2023 05:49:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206995
IP address blocks:        194.50.0.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:f3:44:0a:68:76:d7:bb:ed:f5:dd:79:ac:37:9a:f4:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
        Validity
            Not Before: Mar 18 05:49:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ee7c1c2c0d8353e30b133ce5ea4015aa1f6b8ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:73:4c:0b:9b:84:fb:d6:1b:16:09:13:7b:69:
                    e1:1e:87:5d:df:92:79:5c:c4:38:67:53:d5:ae:81:
                    db:c0:0e:31:0d:85:c6:24:b4:fa:cd:8a:90:22:de:
                    55:c9:b0:4f:3a:de:07:76:a1:fc:3b:7e:f1:f9:d1:
                    fc:cf:5a:e2:0d:d5:24:2f:4f:b8:cc:61:b5:79:04:
                    f5:bf:f9:81:d0:cc:ae:46:0e:e9:f8:96:f4:e5:23:
                    30:7a:85:f9:6c:06:2c:8e:e3:99:cc:b1:96:13:1b:
                    ca:e6:b9:57:f0:74:1c:01:3b:70:63:41:51:6c:8a:
                    d3:09:3e:de:3a:6c:a6:78:fe:d6:a6:cd:3a:2b:3e:
                    27:0d:65:38:c5:d3:37:d1:5a:17:d4:47:d5:75:99:
                    5b:82:35:3f:6e:a0:cc:19:a7:93:9f:8e:89:1c:1d:
                    7c:76:1b:7b:d8:e4:48:29:5d:fa:e8:ef:31:59:23:
                    31:61:ed:79:d4:62:70:7a:1d:c2:df:a6:ca:b6:4b:
                    c0:33:31:94:b2:08:b5:73:c8:80:15:ca:22:d9:2e:
                    6a:49:84:05:f9:79:90:97:53:11:43:bc:a8:f8:7e:
                    1c:7c:84:ac:5e:4f:b3:12:4d:8a:4a:4c:58:db:be:
                    5a:09:5f:0d:36:bd:d3:40:e8:0e:3d:00:11:9a:f6:
                    3c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:7C:1C:2C:0D:83:53:E3:0B:13:3C:E5:EA:40:15:AA:1F:6B:8E:E2
            X509v3 Authority Key Identifier:
                keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/7nwcLA2DU-MLEzzl6kAVqh9rjuI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:c6:ac:d9:c4:81:da:5d:5e:16:1e:4b:3a:e3:ef:23:f6:a9:
         45:90:fb:13:8d:59:df:04:24:c7:d2:da:6c:85:39:13:6f:8f:
         db:83:61:4c:04:56:e0:2e:0b:04:4c:30:65:72:0a:a0:6e:3b:
         be:23:76:d7:68:68:e7:8d:9f:8e:c8:10:77:8e:97:d2:53:b2:
         42:6b:95:21:05:22:a2:04:d2:ea:a5:04:bd:3e:d3:8e:b0:f3:
         bd:ba:26:b7:69:0d:ec:4b:12:dc:67:06:9c:9a:42:2a:b4:18:
         86:7f:17:4d:5d:12:a6:ea:74:c9:2d:7f:ef:47:d4:cc:de:ca:
         40:96:00:50:e7:25:83:66:e0:eb:81:72:84:cb:ae:dc:e0:ca:
         3e:c2:fd:bd:35:2d:ae:fb:fc:74:01:8f:64:d3:9f:65:13:06:
         5c:bc:65:b1:1c:ef:10:ca:56:8d:d5:c4:b2:35:5a:c1:81:c3:
         db:f9:fa:58:9c:23:07:bb:80:85:6f:51:4b:3a:ae:b8:ba:a2:
         a2:5f:aa:46:8e:76:67:91:7a:96:c4:d0:23:cc:b4:8b:c6:c3:
         34:9f:80:c1:78:8e:e5:c2:b8:28:bd:94:4a:41:1c:81:b0:26:
         2e:4c:4e:94:55:45:38:05:81:5a:b2:e1:0e:84:6a:d0:08:11:
         d9:4c:ce:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:14 2023 by rpki-client on console-ams.rpki-client.org