Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5a725f-15da-4c12-86fe-9001db8d4c64/1/C_t7pBvx5pO2N3-Sf2HVGEWzQNw.roa
File:                     C_t7pBvx5pO2N3-Sf2HVGEWzQNw.roa (raw, json)
Hash identifier:          R9tEZVQ5Pa8bnI/M76suzshU6ZMUT9bV6SkfPa9GMiQ=
Subject key identifier:   0B:FB:7B:A4:1B:F1:E6:93:B6:37:7F:92:7F:61:D5:18:45:B3:40:DC
Certificate issuer:       /CN=8452ee73277f39d24809746b7262261829b8dfe5
Certificate serial:       018572B4450C1798C840BA98A28F63007A24
Authority key identifier: 84:52:EE:73:27:7F:39:D2:48:09:74:6B:72:62:26:18:29:B8:DF:E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hFLucyd_OdJICXRrcmImGCm43-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/5a725f-15da-4c12-86fe-9001db8d4c64/1/C_t7pBvx5pO2N3-Sf2HVGEWzQNw.roa
Signing time:             Mon 02 Jan 2023 13:38:14 +0000
ROA not before:           Mon 02 Jan 2023 13:38:14 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     1239
IP address blocks:        77.72.82.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:b4:45:0c:17:98:c8:40:ba:98:a2:8f:63:00:7a:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8452ee73277f39d24809746b7262261829b8dfe5
        Validity
            Not Before: Jan  2 13:38:14 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=0bfb7ba41bf1e693b6377f927f61d51845b340dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:83:16:df:5c:f2:d0:4c:1d:83:bf:2b:9a:6b:
                    70:ee:c7:3b:aa:0f:54:18:48:1a:d0:9d:65:c0:e8:
                    aa:15:c4:1e:36:16:64:2b:50:f3:8b:02:be:b3:79:
                    d3:83:64:1d:f7:10:f0:db:1e:bb:c5:2f:13:a9:0d:
                    40:4a:ef:c0:cc:89:8b:5a:77:81:f8:3a:77:b6:46:
                    9a:da:b8:13:2a:d2:af:71:2b:9a:ab:8a:98:b3:81:
                    64:4e:a8:29:ce:2e:ec:82:a8:ce:7c:8d:e2:e2:2e:
                    16:9d:03:ec:0d:66:0d:1b:be:33:cb:3d:69:0c:51:
                    9b:e8:f7:1b:e8:8e:8d:e0:75:d3:c9:f7:50:62:c6:
                    78:d1:08:88:96:76:60:09:d9:31:14:e7:60:09:a0:
                    59:d9:3e:f7:51:64:30:b9:58:57:cf:c4:8e:47:dd:
                    23:43:f1:68:7d:2e:b4:a5:5d:07:fb:f2:06:02:c2:
                    21:e5:47:51:bf:de:40:92:84:fa:de:6f:03:c8:f2:
                    2e:1b:0d:c7:18:33:b0:3f:01:9a:bd:11:92:34:f9:
                    97:33:bd:02:f9:49:7b:54:11:bf:1c:01:77:5b:25:
                    d5:cc:ff:81:1a:1f:3e:54:89:2d:65:cd:b9:2d:e4:
                    66:ee:8c:8f:6f:5f:11:3c:8c:d8:2b:ef:bc:0d:52:
                    1d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:FB:7B:A4:1B:F1:E6:93:B6:37:7F:92:7F:61:D5:18:45:B3:40:DC
            X509v3 Authority Key Identifier:
                keyid:84:52:EE:73:27:7F:39:D2:48:09:74:6B:72:62:26:18:29:B8:DF:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFLucyd_OdJICXRrcmImGCm43-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5a725f-15da-4c12-86fe-9001db8d4c64/1/C_t7pBvx5pO2N3-Sf2HVGEWzQNw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5a725f-15da-4c12-86fe-9001db8d4c64/1/hFLucyd_OdJICXRrcmImGCm43-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.72.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:a0:4f:69:a7:b8:3c:a4:aa:27:01:1b:32:48:f6:4f:47:58:
         3c:e2:aa:93:f1:71:c8:ef:b8:dc:1b:b4:19:e3:97:59:d0:12:
         19:6c:9f:12:28:63:5c:1e:57:13:7b:52:74:ab:af:3b:34:69:
         78:9f:6f:5d:a2:f9:f7:61:ec:02:81:8c:96:c0:0d:0a:9a:93:
         f4:cc:8d:f4:c6:81:f9:f6:fa:5d:ac:d8:1b:8a:64:2b:fd:38:
         db:c4:b4:1f:77:26:b5:42:ff:54:4a:09:14:12:1c:40:11:77:
         c2:56:42:f6:c8:5e:df:9f:78:91:27:f9:85:fd:fe:6b:1e:5b:
         d3:51:3a:08:f9:5f:72:2d:38:4f:c7:db:f4:7a:c9:2d:48:01:
         94:a1:91:92:3e:bc:aa:34:2d:61:0f:46:79:a2:3b:56:d4:14:
         d9:c0:f9:04:9b:8b:5c:6e:c2:bc:81:42:96:cd:4c:ff:7e:fe:
         56:b2:f1:2e:2b:81:75:18:30:4f:32:da:e7:d1:7f:a0:c4:97:
         5f:e2:62:fa:0b:a1:e9:5a:71:70:30:d5:f5:f4:2f:26:2e:42:
         87:02:15:6b:87:9d:49:c3:6a:e0:2c:0d:60:48:a2:98:5f:9f:
         03:0a:e3:c1:04:21:d8:6e:46:88:90:d7:93:f9:18:bc:b5:4d:
         50:48:3f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:11 2023 by rpki-client on console-fra.rpki-client.org