Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/81utjUv8rJDh_399uiXFcFtefXc.roa
File:                     81utjUv8rJDh_399uiXFcFtefXc.roa (raw, json)
Hash identifier:          kgMrnUCf17G/KiSym1wzdOgcXD/trm9QAwotM1Z0XYk=
Subject key identifier:   F3:5B:AD:8D:4B:FC:AC:90:E1:FF:7F:7D:BA:25:C5:70:5B:5E:7D:77
Certificate issuer:       /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial:       01856BEEC9C156D7BA04D3C66F73F8EABA0E
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/81utjUv8rJDh_399uiXFcFtefXc.roa
Signing time:             Sun 01 Jan 2023 06:04:49 +0000
ROA not before:           Sun 01 Jan 2023 06:04:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     199910
IP address blocks:        85.202.51.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:ee:c9:c1:56:d7:ba:04:d3:c6:6f:73:f8:ea:ba:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
        Validity
            Not Before: Jan  1 06:04:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=f35bad8d4bfcac90e1ff7f7dba25c5705b5e7d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ed:a6:e7:04:bb:9d:bf:fe:02:cb:96:8a:fe:
                    06:fd:fc:56:f5:25:ed:70:48:30:24:56:eb:f8:c0:
                    d0:cd:a4:9d:23:4d:44:62:3a:d6:56:51:07:e3:1c:
                    c9:5a:36:53:e6:44:5c:28:47:df:07:fb:f3:77:55:
                    7a:35:b0:f8:b0:4f:30:72:76:d3:0c:31:64:a7:db:
                    31:66:dd:87:59:3f:e3:19:53:9a:f7:91:21:45:55:
                    38:31:d1:d4:24:33:55:51:0d:b9:7e:8b:ea:3b:4f:
                    33:e4:d6:c6:e5:b7:f8:c6:fa:16:4d:78:4f:7a:c2:
                    82:21:84:74:ec:1a:37:14:52:17:75:7a:14:68:c2:
                    47:bc:8f:e7:ee:3b:91:0b:ed:19:23:1e:a9:53:d8:
                    50:11:f2:b8:44:ad:8d:8d:01:47:8a:f4:ac:fe:37:
                    66:5d:9f:98:bd:36:8d:0c:a2:68:5f:8e:1a:8f:69:
                    0d:6f:bd:22:ba:cc:ba:16:92:25:6b:b7:a9:44:f3:
                    c3:5b:67:29:e7:03:6b:6c:39:33:e4:ae:8e:86:9c:
                    ac:b3:c8:4c:d1:00:7c:8a:f9:c1:20:7a:ba:73:42:
                    21:b3:93:d3:bb:58:58:2e:ae:de:cf:91:86:56:82:
                    f6:c6:14:e5:0d:60:4d:10:62:1f:6b:ca:4f:40:46:
                    a5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5B:AD:8D:4B:FC:AC:90:E1:FF:7F:7D:BA:25:C5:70:5B:5E:7D:77
            X509v3 Authority Key Identifier:
                keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/81utjUv8rJDh_399uiXFcFtefXc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.202.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:d5:b4:04:bb:3c:af:87:4d:3c:bd:32:a4:e1:c2:e5:90:cd:
         9e:f0:22:ce:db:e3:5e:41:15:11:61:f6:66:62:92:30:ac:c8:
         22:0d:db:e9:60:d4:37:db:00:82:4a:0f:fa:63:35:18:4e:60:
         b6:39:0d:2d:58:68:ab:a0:d1:1f:f9:4b:b8:4e:4f:15:c6:db:
         ed:95:b3:08:b2:a0:a0:b9:50:d9:f8:fe:9f:f7:9c:94:d3:b4:
         b1:65:22:85:ad:35:f5:fa:58:ea:43:08:71:03:7b:7d:f7:b1:
         f1:e1:15:b9:18:43:87:54:3b:91:cd:e2:89:9c:e6:f4:8d:19:
         08:c1:09:c2:13:aa:11:19:97:1a:17:a3:48:d9:df:e1:05:d4:
         3f:b3:66:76:9f:8a:be:f2:8e:81:51:45:78:e6:fb:41:eb:93:
         b7:e3:f9:7a:cc:4f:bb:65:21:06:c8:3d:30:b9:ea:62:01:71:
         d7:f7:5d:48:93:74:c4:82:a3:70:8d:69:49:65:12:4f:b6:94:
         43:e9:04:3f:4e:75:44:4f:98:e5:7f:91:7a:bc:ce:57:c3:e9:
         14:4c:35:31:17:30:74:70:39:db:92:ea:2e:7d:30:f7:b8:52:
         2d:3a:7e:17:81:5a:a8:8a:e8:a7:28:cf:ec:de:01:2c:4b:b4:
         3c:d6:e7:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVr7snBVte6BNPGb3P46roOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx
YjM2ZTgwHhcNMjMwMTAxMDYwNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzViYWQ4ZDRiZmNhYzkwZTFmZjdmN2RiYTI1YzU3MDViNWU3ZDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3e2m5wS7nb/+AsuWiv4G/fxW9SXt
cEgwJFbr+MDQzaSdI01EYjrWVlEH4xzJWjZT5kRcKEffB/vzd1V6NbD4sE8wcnbT
DDFkp9sxZt2HWT/jGVOa95EhRVU4MdHUJDNVUQ25fovqO08z5NbG5bf4xvoWTXhP
esKCIYR07Bo3FFIXdXoUaMJHvI/n7juRC+0ZIx6pU9hQEfK4RK2NjQFHivSs/jdm
XZ+YvTaNDKJoX44aj2kNb70iusy6FpIla7epRPPDW2cp5wNrbDkz5K6Ohpyss8hM
0QB8ivnBIHq6c0Ihs5PTu1hYLq7ez5GGVoL2xhTlDWBNEGIfa8pPQEalyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPNbrY1L/KyQ4f9/fbolxXBbXn13MB8GA1UdIwQY
MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt
MDI0YjE2NTVjMjQ3LzEvODF1dGpVdjhySkRoXzM5OXVpWEZjRnRlZlhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3
LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVcozMA0G
CSqGSIb3DQEBCwUAA4IBAQA31bQEuzyvh008vTKk4cLlkM2e8CLO2+NeQRURYfZm
YpIwrMgiDdvpYNQ32wCCSg/6YzUYTmC2OQ0tWGiroNEf+Uu4Tk8VxtvtlbMIsqCg
uVDZ+P6f95yU07SxZSKFrTX1+ljqQwhxA3t997Hx4RW5GEOHVDuRzeKJnOb0jRkI
wQnCE6oRGZcaF6NI2d/hBdQ/s2Z2n4q+8o6BUUV45vtB65O34/l6zE+7ZSEGyD0w
uepiAXHX911Ik3TEgqNwjWlJZRJPtpRD6QQ/TnVET5jlf5F6vM5Xw+kUTDUxFzB0
cDnbkuoufTD3uFItOn4XgVqoiuinKM/s3gEsS7Q81uey
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org