Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/7o0ZLCFVzTWT6rabrZU-bXrNECI.roa
File:                     7o0ZLCFVzTWT6rabrZU-bXrNECI.roa (raw, json)
Hash identifier:          FpbX3c0Gm+EIB+a7KcqqSOvmFUfZcEaYoywcKmbVU1c=
Subject key identifier:   EE:8D:19:2C:21:55:CD:35:93:EA:B6:9B:AD:95:3E:6D:7A:CD:10:22
Certificate issuer:       /CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Certificate serial:       0188681A77508E9FACA89DAFE15609534CE7
Authority key identifier: BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/7o0ZLCFVzTWT6rabrZU-bXrNECI.roa
Signing time:             Mon 29 May 2023 15:22:24 +0000
ROA not before:           Mon 29 May 2023 15:22:24 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     6830
IP address blocks:        185.87.77.0/24 maxlen: 24
                          185.87.76.0/24 maxlen: 24
                          185.87.76.0/23 maxlen: 23

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:68:1a:77:50:8e:9f:ac:a8:9d:af:e1:56:09:53:4c:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be40b3c2be7835d7b37b5826102f8746a5199d49
        Validity
            Not Before: May 29 15:22:24 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ee8d192c2155cd3593eab69bad953e6d7acd1022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1c:3b:15:1e:fa:a5:25:d4:51:92:b5:39:9e:
                    2c:4a:89:03:a0:9d:5f:5f:66:d5:41:8f:d6:eb:06:
                    8d:4b:1d:d4:54:bc:ba:39:2c:11:58:ff:72:c5:f8:
                    03:b6:97:8b:25:3f:71:f7:45:53:16:14:47:74:dc:
                    a2:01:56:4e:fc:ff:38:5a:dd:a6:91:6c:17:1f:c1:
                    4d:65:3c:a4:ab:17:28:7b:d3:6c:da:9f:84:68:af:
                    a3:3c:6f:ba:74:82:3c:57:5c:33:51:2a:f3:43:6f:
                    f6:ca:ea:ab:9c:46:76:5b:24:35:d0:d4:d1:03:58:
                    46:92:49:06:84:1f:ef:c6:39:6e:63:9f:40:da:04:
                    ea:e4:a7:13:bd:a9:9c:bf:23:bd:44:53:f3:4c:82:
                    48:c7:37:e4:4e:e0:4c:92:4d:dd:0f:4d:a2:26:d7:
                    d6:77:ba:59:47:53:d4:ac:cc:f0:77:02:27:95:c6:
                    77:91:8a:7e:3d:c3:0c:ff:95:70:bd:90:35:51:b4:
                    c6:3d:60:0a:40:9e:a9:35:50:a2:37:90:53:8c:04:
                    58:fe:48:3c:83:e0:e8:b8:a7:b1:4e:1e:fc:07:8c:
                    bc:d4:20:d2:6c:28:2a:c8:0a:5f:b8:3e:42:03:57:
                    df:04:5c:db:80:82:c2:b2:06:e2:4a:47:fa:27:76:
                    c4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:8D:19:2C:21:55:CD:35:93:EA:B6:9B:AD:95:3E:6D:7A:CD:10:22
            X509v3 Authority Key Identifier:
                keyid:BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/7o0ZLCFVzTWT6rabrZU-bXrNECI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.87.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:a2:65:4c:e2:f2:47:3a:43:91:5c:8e:85:e9:fa:fc:2b:15:
         e3:df:65:6e:ad:a8:4e:ef:77:56:21:36:57:5d:dd:06:b4:77:
         3e:e6:71:81:f5:17:37:71:d4:4b:17:2a:52:ec:54:6a:a0:90:
         28:b3:ab:04:b4:17:65:98:20:16:e0:1a:e0:a2:36:b6:3b:a2:
         63:91:3c:19:b1:fa:79:1e:eb:a3:f9:b9:73:57:25:32:7c:8f:
         6c:47:25:06:4a:10:cf:af:5d:28:4d:cf:47:9a:4f:60:fe:6a:
         d4:05:59:15:3c:50:d1:7f:5b:49:a8:57:f0:a7:27:12:cc:51:
         26:81:dd:83:97:0c:0c:2b:7d:1f:23:86:ad:4a:05:b7:cd:5c:
         3f:89:cc:d5:24:85:27:85:16:9b:f4:9b:0b:55:e9:b1:07:c4:
         be:6d:9f:b4:94:c1:89:30:1a:92:ee:b1:00:35:0d:47:ab:cb:
         ed:62:10:8e:93:0a:b3:e4:d5:45:6a:ca:5a:19:14:be:f4:7a:
         65:0b:db:5d:03:56:9e:de:dc:75:d2:68:73:37:4c:c3:ea:59:
         31:4a:ee:ec:e9:83:d0:fa:f1:59:96:24:f5:ac:86:d3:8c:79:
         2c:a4:3f:b4:a5:d4:d3:16:c3:61:c8:2f:9a:f9:b3:7d:a5:ef:
         7a:29:6e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----