Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/1WA-UAc_Ui_tMQA0Py76RmY8Yug.roa
File:                     1WA-UAc_Ui_tMQA0Py76RmY8Yug.roa (raw, json)
Hash identifier:          FmzGM8W54ZbeZrXiheGqcX+hk+QVmG8rTcRhLc5e60o=
Subject key identifier:   D5:60:3E:50:07:3F:52:2F:ED:31:00:34:3F:2E:FA:46:66:3C:62:E8
Certificate issuer:       /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial:       018607C936074A0FE03103F7C6A761F7BF7A
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/1WA-UAc_Ui_tMQA0Py76RmY8Yug.roa
Signing time:             Tue 31 Jan 2023 12:24:32 +0000
ROA not before:           Tue 31 Jan 2023 12:24:32 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207713
IP address blocks:        88.151.192.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:07:c9:36:07:4a:0f:e0:31:03:f7:c6:a7:61:f7:bf:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
        Validity
            Not Before: Jan 31 12:24:32 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d5603e50073f522fed3100343f2efa46663c62e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:66:d2:dd:fe:f4:75:7b:43:61:f7:62:47:e6:
                    87:82:5d:c3:5c:d3:40:d5:66:b9:42:f1:d0:b4:07:
                    78:3e:d2:35:9e:84:37:b7:58:64:90:42:18:3c:be:
                    1d:c5:61:0e:cb:57:c7:71:e5:6a:62:0a:96:c1:7e:
                    51:3d:b8:c9:ef:3f:73:b7:31:c2:46:58:5d:4d:ea:
                    b8:50:af:0b:31:d0:31:aa:a8:93:a1:75:d8:50:89:
                    5c:ae:ff:e4:1b:e3:ad:ad:38:d9:2b:0d:d5:db:1d:
                    03:24:d9:09:53:1b:90:f0:45:39:c7:0c:9c:f2:7e:
                    29:43:1c:12:15:42:da:8a:8d:d5:c9:83:28:22:d7:
                    52:72:2d:da:fc:b0:46:d0:f0:68:b7:6d:a9:c3:da:
                    c2:f5:6a:36:65:05:e3:a5:33:42:c6:b7:ac:db:74:
                    f1:ab:8c:4f:5a:f0:c2:ac:00:3e:30:bb:e9:7e:ed:
                    32:65:25:b2:0f:78:13:17:45:9e:45:02:f3:8f:17:
                    2b:f7:d4:f2:bf:12:a4:44:27:67:63:a3:7a:61:37:
                    7f:0b:ca:41:c2:63:7b:0a:2a:a6:06:7c:10:69:5b:
                    e9:57:aa:d1:69:04:11:54:5e:81:66:d4:b0:72:0d:
                    55:bc:72:e9:65:d0:f2:c3:eb:b2:cd:90:36:3b:af:
                    df:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:60:3E:50:07:3F:52:2F:ED:31:00:34:3F:2E:FA:46:66:3C:62:E8
            X509v3 Authority Key Identifier:
                keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/1WA-UAc_Ui_tMQA0Py76RmY8Yug.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.151.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:de:9a:14:c3:c6:2c:97:d4:17:fd:07:7c:af:1a:7b:46:50:
         11:57:82:ec:d5:78:ba:68:87:02:27:60:27:d7:68:09:90:d1:
         d1:40:05:23:99:cb:61:83:7d:49:35:1e:4d:d2:96:56:45:b4:
         39:84:c0:ba:b7:66:9f:93:0d:e4:64:58:11:33:7e:49:4a:1a:
         26:7c:b3:59:89:f1:88:ac:91:22:85:cb:80:3e:96:f1:dd:a5:
         5a:00:75:d0:73:41:15:87:c9:31:cd:e4:a5:8a:a6:38:4a:cc:
         8c:60:84:50:0d:6e:17:60:24:5b:80:9c:3a:2a:99:06:e4:28:
         e9:78:a3:6e:fb:28:3c:c9:26:3d:dd:27:a7:ed:bd:1a:df:e5:
         d0:48:a5:14:29:9c:52:d9:ec:0b:b2:56:c6:f2:f5:3f:ef:fc:
         8b:a4:0e:bf:c2:ce:c7:c7:a7:ce:bf:61:85:9c:b6:11:58:78:
         92:21:05:6b:74:f1:c2:38:1e:84:a0:2c:cb:6e:e0:33:e4:c7:
         b8:80:52:60:44:d5:d4:53:50:7a:c0:ad:b3:68:4b:65:63:13:
         0e:cc:9b:9c:87:14:f9:c8:b4:8d:85:b1:51:97:f8:d3:80:e5:
         8f:48:b8:ed:7c:cb:82:e0:92:8f:65:a7:0c:1a:73:d3:32:99:
         69:55:ff:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:50 2023 by rpki-client on console-ams.rpki-client.org