Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/fuTOiFHzY8RIh34EYJ33IckGU5U.roa
File:                     fuTOiFHzY8RIh34EYJ33IckGU5U.roa (raw, json)
Hash identifier:          OeJwMpkcKylCqt23T1upSh3sCOHpaJDnwqoXKwh1WgU=
Subject key identifier:   7E:E4:CE:88:51:F3:63:C4:48:87:7E:04:60:9D:F7:21:C9:06:53:95
Certificate issuer:       /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial:       01880E8185D2BE6834CDC686A482C20A8A0F
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/fuTOiFHzY8RIh34EYJ33IckGU5U.roa
Signing time:             Fri 12 May 2023 05:49:09 +0000
ROA not before:           Fri 12 May 2023 05:49:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     54339
IP address blocks:        62.112.12.0/23 maxlen: 24
                          86.107.108.0/23 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:0e:81:85:d2:be:68:34:cd:c6:86:a4:82:c2:0a:8a:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
        Validity
            Not Before: May 12 05:49:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7ee4ce8851f363c448877e04609df721c9065395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b3:03:a1:a4:5b:ce:32:74:5b:3c:4a:df:4a:
                    38:3f:bb:a6:69:1e:5d:2d:41:c8:76:dd:ea:a6:00:
                    f9:a3:ed:93:c7:b4:75:3c:92:97:50:9d:64:a8:e2:
                    1e:e1:3a:d8:2d:e3:f6:df:96:05:67:97:28:cf:95:
                    48:5a:99:28:ad:c4:42:31:4d:93:22:c2:ae:06:43:
                    1f:ac:44:d1:15:01:59:3f:f3:5b:23:10:33:e0:3f:
                    be:53:00:ba:55:37:3b:b2:c7:04:2d:84:59:7f:90:
                    16:09:5e:ee:49:3b:9a:71:8d:c2:d3:cd:09:02:53:
                    aa:81:33:17:59:eb:9c:57:be:ce:49:44:a5:7d:9b:
                    6e:07:62:97:4d:cb:78:9e:0f:f3:60:6e:c3:6e:3a:
                    7d:f2:dc:b5:72:32:39:f5:3b:65:ce:97:9d:eb:83:
                    9a:29:66:73:3d:b5:42:1b:c2:88:83:29:ed:cb:87:
                    a5:73:db:bd:cb:fe:d4:db:b1:10:ad:89:98:5d:cd:
                    8d:96:ce:de:51:ad:cd:54:ac:16:48:43:21:e2:6c:
                    92:6a:0c:4d:94:2b:c8:68:42:f6:85:55:e9:90:35:
                    82:5b:eb:78:04:16:f0:2f:69:07:3c:2b:35:0d:ea:
                    7a:1e:4f:ac:6d:ae:d9:37:3d:0d:77:a9:ec:80:d6:
                    a2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E4:CE:88:51:F3:63:C4:48:87:7E:04:60:9D:F7:21:C9:06:53:95
            X509v3 Authority Key Identifier:
                keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/fuTOiFHzY8RIh34EYJ33IckGU5U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  62.112.12.0/23
                  86.107.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:97:af:90:73:e1:00:7e:6e:92:13:fa:cb:8d:ee:a7:97:20:
         c2:87:ef:fd:7f:ca:5b:ef:19:23:8b:39:0a:f7:2d:5c:39:c8:
         a3:5c:1f:7b:b7:7a:ee:6a:e1:cd:5d:b1:dd:78:86:cb:cf:4f:
         9b:ab:01:71:c7:9b:09:4f:35:f4:32:57:d6:aa:d0:36:09:1e:
         b2:03:e9:fc:26:85:8c:ca:13:92:31:49:5e:f8:ea:cf:f0:37:
         63:cd:7b:76:03:ff:dd:a2:b8:19:21:59:10:48:76:bf:0a:22:
         f8:42:06:04:76:e1:a7:b3:8e:b7:c6:90:0b:7e:1a:0c:fa:31:
         fc:56:7f:2e:da:d5:cc:9f:9a:fc:52:1b:8e:6c:b5:a1:72:a0:
         2f:b0:69:46:0f:b0:ba:03:62:93:27:1e:95:cc:69:4e:87:f4:
         9c:85:b7:3c:28:7c:5b:2d:39:36:73:f4:2f:cf:2f:f1:6a:44:
         94:f5:3b:6c:f6:f5:48:55:05:87:f9:84:a6:48:30:e5:34:61:
         d3:74:ce:97:78:c9:b2:b8:e5:89:26:92:57:ca:ce:e8:d3:fe:
         79:42:ee:b7:ae:b7:b9:9b:26:92:99:b6:ec:2c:5c:64:88:b6:
         fc:eb:7f:a2:d5:44:63:5f:36:25:7d:04:09:5d:ad:3e:c2:b6:
         b3:b7:f6:be
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYgOgYXSvmg0zcaGpILCCooPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMDBlOTgxOTUzMDYxOTcyYzg5NmJkNmQyNzczOGQwODNh
YWRiMGUwHhcNMjMwNTEyMDU0OTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWU0Y2U4ODUxZjM2M2M0NDg4NzdlMDQ2MDlkZjcyMWM5MDY1Mzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLMDoaRbzjJ0WzxK30o4P7umaR5d
LUHIdt3qpgD5o+2Tx7R1PJKXUJ1kqOIe4TrYLeP235YFZ5coz5VIWpkorcRCMU2T
IsKuBkMfrETRFQFZP/NbIxAz4D++UwC6VTc7sscELYRZf5AWCV7uSTuacY3C080J
AlOqgTMXWeucV77OSUSlfZtuB2KXTct4ng/zYG7Dbjp98ty1cjI59Ttlzped64Oa
KWZzPbVCG8KIgynty4elc9u9y/7U27EQrYmYXc2Nls7eUa3NVKwWSEMh4mySagxN
lCvIaEL2hVXpkDWCW+t4BBbwL2kHPCs1Dep6Hk+sba7ZNz0Nd6nsgNaieQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFH7kzohR82PESId+BGCd9yHJBlOVMB8GA1UdIwQY
MBaAFNoA6YGVMGGXLIlr1tJ3ONCDqtsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmdEcGdaVXdZWmNzaVd2VzBuYzQwSU9xMnc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84MmE3ZDYtOTJhOS00MjA0LTlhZTAt
OWE0OGVjZjllMTVlLzEvZnVUT2lGSHpZOFJJaDM0RVlKMzNJY2tHVTVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi84MmE3ZDYtOTJhOS00MjA0LTlhZTAtOWE0OGVjZjllMTVl
LzEvMmdEcGdaVXdZWmNzaVd2VzBuYzQwSU9xMnc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBPnAMAwQB
VmtsMA0GCSqGSIb3DQEBCwUAA4IBAQCTl6+Qc+EAfm6SE/rLje6nlyDCh+/9f8pb
7xkjizkK9y1cOcijXB97t3ruauHNXbHdeIbLz0+bqwFxx5sJTzX0MlfWqtA2CR6y
A+n8JoWMyhOSMUle+OrP8DdjzXt2A//dorgZIVkQSHa/CiL4QgYEduGns463xpAL
fhoM+jH8Vn8u2tXMn5r8UhuObLWhcqAvsGlGD7C6A2KTJx6VzGlOh/Schbc8KHxb
LTk2c/Qvzy/xakSU9Tts9vVIVQWH+YSmSDDlNGHTdM6XeMmyuOWJJpJXys7o0/55
Qu63rre5myaSmbbsLFxkiLb863+i1URjXzYlfQQJXa0+wrazt/a+
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:55 2023 by rpki-client on console-ams.rpki-client.org