Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/plUIx_TO-QV9tHIl1BJs0Ln6Z8Q.roa
File:                     plUIx_TO-QV9tHIl1BJs0Ln6Z8Q.roa (raw, json)
Hash identifier:          ayjXNiuUmeKxkqLqQLh96BrYTSkcDwffWytKtvM4kek=
Subject key identifier:   A6:55:08:C7:F4:CE:F9:05:7D:B4:72:25:D4:12:6C:D0:B9:FA:67:C4
Certificate issuer:       /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial:       0188F401776313C03F7FCD6BF0C4600C2FF8
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/plUIx_TO-QV9tHIl1BJs0Ln6Z8Q.roa
Signing time:             Sun 25 Jun 2023 19:21:56 +0000
ROA not before:           Sun 25 Jun 2023 19:21:56 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211826
IP address blocks:        87.254.18.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:f4:01:77:63:13:c0:3f:7f:cd:6b:f0:c4:60:0c:2f:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
        Validity
            Not Before: Jun 25 19:21:56 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a65508c7f4cef9057db47225d4126cd0b9fa67c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1c:63:f6:b4:6d:78:67:28:18:05:67:23:3a:
                    81:ba:f6:a7:a7:c9:ca:26:75:4c:7b:68:3d:e4:f0:
                    84:43:89:58:2a:94:d4:4c:78:44:ca:6d:57:d5:24:
                    1d:fe:75:d4:b5:41:b3:a6:c2:01:5a:3d:be:e5:8d:
                    0f:bf:f8:96:38:b7:0e:f5:16:6e:62:a6:4b:51:3b:
                    e6:84:17:1a:95:1c:df:d6:3c:91:00:ce:52:61:65:
                    0c:b9:02:2d:fd:e1:22:c3:ea:da:33:03:3e:8b:5b:
                    9f:91:99:1e:31:a1:35:68:de:1d:dc:06:14:b8:c3:
                    ea:e2:97:f2:79:07:b2:e1:39:60:ed:62:ae:b9:11:
                    5b:34:c4:64:86:31:b7:a9:bd:d1:a9:a4:d2:c3:4a:
                    fe:9a:a0:cc:ac:df:6f:19:a2:0a:00:50:dd:c1:15:
                    a2:c8:44:51:d5:a9:20:aa:c6:62:b3:ea:1b:3e:ff:
                    c4:9f:e0:e1:91:23:87:78:c5:2d:71:70:18:fa:a1:
                    19:f0:e3:07:d5:45:2b:d3:56:ee:2b:30:3e:4a:77:
                    79:4c:fe:26:c7:93:ca:a1:82:bf:03:62:12:72:b4:
                    21:5e:22:aa:dd:9d:97:9d:67:0d:66:a7:c0:c6:56:
                    7b:da:0d:01:79:d7:3f:54:8f:78:14:8a:b4:50:e5:
                    fb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:55:08:C7:F4:CE:F9:05:7D:B4:72:25:D4:12:6C:D0:B9:FA:67:C4
            X509v3 Authority Key Identifier:
                keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/plUIx_TO-QV9tHIl1BJs0Ln6Z8Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.254.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:42:3c:62:a7:44:dc:3e:bf:e7:07:e0:a7:62:66:6c:18:9d:
         ea:51:eb:a8:c0:26:ca:23:e9:95:b3:85:37:1b:b7:df:67:74:
         78:27:3c:a9:10:09:b8:82:5a:ac:c9:47:ad:fc:e6:10:2e:91:
         aa:57:0a:62:e2:ad:6d:6a:a8:d9:86:c8:ab:f3:01:a5:e3:c3:
         10:c3:fb:26:bb:5a:e6:54:c1:88:7f:88:bd:08:d1:f4:f0:78:
         4e:fe:7d:50:5f:e6:1b:87:63:ea:e5:bc:b8:ad:d0:3b:71:fd:
         77:1f:67:c8:33:3c:d1:55:a9:a4:e2:06:8e:eb:00:2a:0c:c9:
         19:21:8f:98:3c:c5:7f:d6:22:e7:9f:c2:2a:ce:ac:b2:05:35:
         82:cc:0b:da:69:32:25:d8:52:de:d9:07:5f:21:10:8d:04:94:
         e2:b6:8c:95:4a:e0:b6:b6:14:62:b2:90:d2:b3:a5:86:d3:34:
         f3:93:a4:0f:10:f2:a8:85:6d:67:56:b2:47:6c:01:71:f0:da:
         0d:31:ea:53:e7:31:58:cf:d5:2c:18:16:d7:84:11:fe:1e:7f:
         a2:4e:ed:29:aa:9d:60:70:73:d4:84:de:c8:75:5a:f6:03:84:
         f1:00:a2:6f:ea:82:21:d2:6d:87:ee:6a:47:2c:51:33:46:e0:
         0d:53:81:ab
-----BEGIN CERTIFICATE-----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Generated at Wed Jul 26 12:55:02 2023 by rpki-client on console-fra.rpki-client.org