Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ceu_EbiJyYcYtX70SRnAsbOXCHk.roa
File:                     ceu_EbiJyYcYtX70SRnAsbOXCHk.roa (raw, json)
Hash identifier:          ZAFdJSy1smwXqOOOkPGHpEjJ2hv7xcbwuqdAvrRyOpQ=
Subject key identifier:   71:EB:BF:11:B8:89:C9:87:18:B5:7E:F4:49:19:C0:B1:B3:97:08:79
Certificate issuer:       /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial:       018670E53F446E223853D0358546A98C929A
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ceu_EbiJyYcYtX70SRnAsbOXCHk.roa
Signing time:             Mon 20 Feb 2023 22:15:17 +0000
ROA not before:           Mon 20 Feb 2023 22:15:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43260
IP address blocks:        14.102.227.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:70:e5:3f:44:6e:22:38:53:d0:35:85:46:a9:8c:92:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
        Validity
            Not Before: Feb 20 22:15:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=71ebbf11b889c98718b57ef44919c0b1b3970879
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:be:dd:d9:72:39:c3:d1:7f:9a:7e:53:88:79:
                    b2:bf:9a:2c:b6:2f:78:03:1e:48:31:e6:7e:43:45:
                    16:73:8d:01:1a:37:ec:52:20:01:8f:0b:35:4b:13:
                    91:73:7d:ac:e6:bc:fe:44:25:cb:99:57:f5:e5:3d:
                    fc:cf:ae:43:7e:72:d1:84:ef:6c:70:95:69:a9:64:
                    db:e2:36:9b:0b:81:30:10:66:65:16:63:40:8e:ca:
                    4b:8e:31:2f:49:15:d2:da:fd:b8:ba:74:c1:4f:78:
                    b5:e7:cd:cd:a7:57:f9:69:30:20:be:0d:b7:19:b4:
                    43:7f:89:24:a7:95:09:27:98:62:6a:99:9c:f8:03:
                    db:ca:3e:34:bc:db:32:49:18:db:fa:56:3a:82:31:
                    28:b0:3a:76:18:a8:5f:b7:6a:ef:0d:fb:8b:76:47:
                    60:ed:4e:5b:b4:6f:6c:cb:fe:cf:dc:52:42:13:ac:
                    2b:04:cc:30:74:03:af:81:ad:c7:41:c8:94:3e:12:
                    cc:fd:6e:2a:1b:b8:0e:11:b1:73:cf:c5:2c:3a:e0:
                    20:92:b2:4a:52:82:dc:2c:5f:e2:0f:9b:4d:84:db:
                    e2:fa:ae:2d:7f:cb:ca:05:0f:83:96:4a:5d:24:1e:
                    b6:6b:d8:2f:f6:e8:c6:f1:fb:e6:9e:87:81:f3:f8:
                    9d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:EB:BF:11:B8:89:C9:87:18:B5:7E:F4:49:19:C0:B1:B3:97:08:79
            X509v3 Authority Key Identifier:
                keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ceu_EbiJyYcYtX70SRnAsbOXCHk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.102.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:62:c1:69:e8:97:89:b9:fd:67:6c:31:40:0a:11:09:c1:50:
         51:3d:14:47:c4:72:96:c5:7b:0b:41:ac:20:94:ec:05:2c:11:
         a7:48:22:97:6a:ca:54:00:d4:f7:ff:d0:ab:3c:b2:fd:29:5d:
         83:f4:97:60:65:d7:27:11:fe:66:31:9f:ef:e5:e6:b0:7a:84:
         4c:c3:6b:e4:1f:7a:e4:47:b6:59:25:1b:c8:c7:a2:d6:72:6a:
         27:2f:ac:29:a6:4c:bb:6e:a2:5a:51:00:b3:ea:7c:e5:34:97:
         6f:1b:5c:74:b6:58:3e:1f:aa:27:33:f3:29:8f:2b:e1:7a:07:
         2a:90:91:76:5f:db:ec:17:5a:f3:cc:63:44:d0:42:63:91:c4:
         c2:5a:e6:4f:9b:04:4f:3c:4c:76:2e:b6:4b:9d:c1:f7:c5:6a:
         54:f8:d4:02:65:c6:0f:da:65:15:5c:8c:d0:ac:86:00:b7:37:
         41:91:ae:13:88:1c:57:8d:f8:85:c0:2a:75:05:35:98:69:1f:
         86:2a:a2:1a:ad:36:64:77:0c:28:32:db:4d:ee:0f:be:ce:c5:
         51:e6:85:3d:19:74:53:67:05:1f:ce:73:24:67:4f:97:85:b8:
         74:ad:dd:09:b4:1c:78:b7:65:d4:79:7f:2b:ce:46:05:31:ac:
         f2:a5:b0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:54 2023 by rpki-client on console-fra.rpki-client.org