Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/WnyAIO7MUALEQSmLJXkWwdFuS3o.roa
File:                     WnyAIO7MUALEQSmLJXkWwdFuS3o.roa (raw, json)
Hash identifier:          iW+ZTkn4jN7WVCXRBzDKTLYDG/+LOf4F2YF870hOsMY=
Subject key identifier:   5A:7C:80:20:EE:CC:50:02:C4:41:29:8B:25:79:16:C1:D1:6E:4B:7A
Certificate issuer:       /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial:       0187809ACDACF659876D97B73469FE6BABDF
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/WnyAIO7MUALEQSmLJXkWwdFuS3o.roa
Signing time:             Fri 14 Apr 2023 16:30:41 +0000
ROA not before:           Fri 14 Apr 2023 16:30:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44547
IP address blocks:        87.254.19.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:80:9a:cd:ac:f6:59:87:6d:97:b7:34:69:fe:6b:ab:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
        Validity
            Not Before: Apr 14 16:30:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=5a7c8020eecc5002c441298b257916c1d16e4b7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0d:ca:97:c0:1a:ba:c1:ca:5b:ae:bb:e3:78:
                    7a:1c:97:fe:fb:40:81:04:55:35:f6:c1:bb:0a:fc:
                    35:0d:69:91:9d:67:4d:35:df:eb:65:5e:1a:40:0e:
                    16:53:2f:aa:d1:9f:33:16:f6:73:59:70:ec:11:40:
                    5c:e1:0c:ee:76:5a:92:2c:8b:8d:76:85:41:68:3a:
                    fd:48:37:4c:f9:2b:8d:27:02:58:b8:ce:89:55:a7:
                    bb:d4:d4:f7:f8:9c:e5:7a:ef:95:ad:f3:7f:ec:8f:
                    52:2c:63:4a:79:de:fa:7e:67:bc:43:02:0a:10:27:
                    5a:bc:89:0f:bd:25:e9:55:a1:74:08:36:66:f7:07:
                    0a:a2:4a:a5:8c:8c:e6:5e:e0:ee:34:2a:63:a7:89:
                    b8:cc:55:39:36:68:22:c9:5d:f9:fe:b0:23:02:f7:
                    b2:92:67:e5:cb:2a:ca:ed:71:39:62:a6:e6:13:ba:
                    b5:b5:99:cd:3f:a8:11:d4:a8:33:01:7e:ea:cc:ea:
                    74:b9:cf:fe:2d:8a:b9:f3:9c:64:b0:1c:12:cc:4f:
                    37:b2:89:01:41:53:8b:6e:2d:00:9c:08:e1:d1:17:
                    30:65:e3:e5:dd:74:43:78:2c:8e:68:86:76:99:35:
                    7e:60:e7:79:2c:e3:b7:52:13:d3:c2:fd:21:fb:61:
                    20:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:7C:80:20:EE:CC:50:02:C4:41:29:8B:25:79:16:C1:D1:6E:4B:7A
            X509v3 Authority Key Identifier:
                keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/WnyAIO7MUALEQSmLJXkWwdFuS3o.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.254.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:f0:71:63:5d:98:07:e8:56:cb:9c:1f:04:71:ff:bb:15:b0:
         18:93:45:29:fc:c8:2f:91:e7:97:c4:f8:6b:1a:4b:b7:13:69:
         46:54:81:29:33:84:cb:d5:a8:63:ab:6d:6c:61:a1:59:f3:2d:
         54:53:d8:d7:6b:24:64:d6:b9:42:03:79:f0:c3:40:b9:65:df:
         c2:b0:2e:e8:4a:2d:3b:c5:a0:2b:5d:a4:97:82:be:06:70:09:
         fd:3a:d0:99:36:d0:a5:da:cc:a4:e4:5e:76:9e:d9:44:d9:1a:
         49:29:2a:16:52:30:2e:ba:0b:5c:d1:31:0a:91:7f:9b:d4:ad:
         07:ac:b1:5d:5e:85:ee:b9:a1:1d:fa:0f:e9:9c:86:ed:43:2d:
         e9:5a:5a:32:ba:d8:72:74:5c:cc:26:18:f4:f3:f2:ce:bc:5c:
         45:e5:6c:d6:48:19:c9:23:9a:2d:26:c8:25:56:50:32:bc:0f:
         cc:39:ab:82:5b:ee:4a:31:49:5a:23:be:c2:2b:52:95:bc:c2:
         64:c3:e0:fd:57:c2:ca:99:d3:d9:ba:08:22:e3:49:b3:77:c4:
         47:5e:7f:d0:7b:3a:5b:e2:be:a9:13:f0:71:d2:6f:59:3c:f4:
         c2:c6:74:cf:19:44:d9:55:e8:4f:d3:6c:a5:49:09:63:c8:a6:
         39:ae:77:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:48 2023 by rpki-client on console-fra.rpki-client.org