Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/hoWvkzv9pQM9F-FP7bj5QoVhM_c.roa
File:                     hoWvkzv9pQM9F-FP7bj5QoVhM_c.roa (raw, json)
Hash identifier:          uz3TFPz6yfc4X4jLpQkt3ON/XEImdDPaPTzWKb0Y+kY=
Subject key identifier:   86:85:AF:93:3B:FD:A5:03:3D:17:E1:4F:ED:B8:F9:42:85:61:33:F7
Certificate issuer:       /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial:       01886BD100F7FA71DA18964D8720D13A7B38
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/hoWvkzv9pQM9F-FP7bj5QoVhM_c.roa
Signing time:             Tue 30 May 2023 08:40:39 +0000
ROA not before:           Tue 30 May 2023 08:40:39 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     211059
IP address blocks:        5.178.1.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:6b:d1:00:f7:fa:71:da:18:96:4d:87:20:d1:3a:7b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
        Validity
            Not Before: May 30 08:40:39 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8685af933bfda5033d17e14fedb8f942856133f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:84:45:9b:2f:2a:72:70:e9:a0:92:da:ab:3b:
                    b4:8c:92:c8:38:6b:02:d6:8c:c4:03:c1:e7:f0:2a:
                    b7:b3:d0:07:22:78:c9:67:2e:eb:21:8f:dc:c9:c2:
                    1b:78:a2:cc:e3:8e:64:87:c3:ba:a5:29:d6:72:73:
                    25:8d:1d:73:bc:3c:aa:41:31:2e:8d:d4:41:f2:f7:
                    00:24:3b:a7:41:a7:91:91:6a:67:77:df:40:05:51:
                    a1:01:ca:05:87:94:3d:8c:b0:c8:0b:9d:4f:a9:5c:
                    df:c1:1d:96:26:dc:9d:08:26:e2:c4:d2:3f:06:72:
                    6a:76:2b:01:29:63:2c:4d:a5:d0:6f:b5:9a:46:71:
                    a6:fb:3f:11:86:6d:80:5e:0f:3b:91:09:bb:d5:ac:
                    a6:c2:88:d6:94:52:a3:e5:b4:09:34:7b:ac:29:a7:
                    8e:60:8e:a9:2c:29:28:54:70:dd:68:75:e8:53:63:
                    52:4e:99:87:0a:87:9d:b7:6c:04:56:af:37:82:ba:
                    1b:be:24:40:bb:c9:60:cb:e8:6d:c5:38:70:3d:f1:
                    0e:1d:bf:7c:d4:a9:af:f7:bb:30:f7:80:59:12:87:
                    f7:10:e5:12:20:a4:09:09:41:fc:b9:c3:bf:9d:40:
                    69:b0:14:1f:7e:9d:51:ba:08:a4:a0:aa:be:4c:8c:
                    8c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:85:AF:93:3B:FD:A5:03:3D:17:E1:4F:ED:B8:F9:42:85:61:33:F7
            X509v3 Authority Key Identifier:
                keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/hoWvkzv9pQM9F-FP7bj5QoVhM_c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.178.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:d9:71:69:04:c8:0f:3e:82:83:57:32:b6:c2:31:b6:da:55:
         a0:70:47:10:6d:87:46:fd:ca:1c:da:d2:15:08:21:be:51:1a:
         24:46:34:5d:0c:fd:6b:84:ed:30:5d:be:71:fd:c2:41:d7:4b:
         e2:89:a2:1b:ab:f6:d3:0c:48:aa:02:19:40:95:30:fc:f0:58:
         a8:5b:51:7b:80:10:78:13:6f:4e:1d:86:d5:1a:da:34:bf:e2:
         a0:7a:6c:75:b1:23:86:ff:b6:e9:af:08:1a:40:bf:31:4b:3d:
         c9:18:3b:1b:20:5f:21:6c:ae:f6:19:ee:ae:02:cc:16:f8:54:
         cd:1f:55:bc:0d:6c:df:2c:75:91:0a:05:39:d9:07:4b:f1:be:
         57:2c:b6:e7:c8:ac:fe:12:6c:cc:ab:cd:78:87:31:cc:20:cc:
         30:9c:42:8a:e0:b0:35:ca:b8:ee:3d:50:d9:52:d5:0c:68:4c:
         3f:76:f0:cc:5f:95:c9:05:82:39:17:8b:1b:9a:81:df:cb:9f:
         ec:6c:68:98:e4:37:46:24:8c:05:0a:c5:bf:66:c2:08:37:96:
         cc:bb:29:3c:b9:b5:9e:b7:ce:2f:c4:76:4d:c1:b9:2d:79:34:
         e7:07:5b:a7:c4:29:59:0c:58:39:e5:37:4d:18:34:48:0f:f4:
         40:88:e6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:01 2023 by rpki-client on console-fra.rpki-client.org