Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/G7Wf6cEr0idbKX88OZD5YQljAz4.roa
File:                     G7Wf6cEr0idbKX88OZD5YQljAz4.roa (raw, json)
Hash identifier:          nmX2K8b6IrLNF5INftmtupk3WZwLUI1L7F0VO9YSG1o=
Subject key identifier:   1B:B5:9F:E9:C1:2B:D2:27:5B:29:7F:3C:39:90:F9:61:09:63:03:3E
Certificate issuer:       /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial:       01856BEECF6F0C288876C231F03CE243DF66
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/G7Wf6cEr0idbKX88OZD5YQljAz4.roa
Signing time:             Sun 01 Jan 2023 06:04:50 +0000
ROA not before:           Sun 01 Jan 2023 06:04:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201801
IP address blocks:        193.192.186.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:ee:cf:6f:0c:28:88:76:c2:31:f0:3c:e2:43:df:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
        Validity
            Not Before: Jan  1 06:04:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=1bb59fe9c12bd2275b297f3c3990f9610963033e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:28:a8:92:cf:78:9f:e3:99:66:d1:59:42:55:
                    05:72:33:aa:d0:8a:ba:25:f4:3d:34:69:ce:34:e9:
                    e8:59:ff:a6:bb:c2:cc:fd:b6:00:44:34:20:8e:02:
                    0a:3b:a6:93:7e:2c:c8:47:89:a4:37:4c:8a:2d:3b:
                    ed:dc:07:20:a5:de:3f:2e:53:0b:6b:1f:2f:4e:7d:
                    85:61:bf:e8:c8:78:b8:88:25:70:d4:ec:1f:fa:ab:
                    b9:69:33:5e:dd:20:cb:b1:aa:6a:a5:0a:0a:42:1f:
                    e7:95:8e:2e:80:7f:2e:49:37:ae:25:e3:54:ff:c9:
                    44:55:8d:ff:22:ef:0c:e4:b1:f5:b8:51:40:ad:39:
                    13:1c:d8:94:d9:a7:1d:e6:b7:a0:67:66:c8:db:4f:
                    af:58:76:2a:0f:14:dc:37:22:e8:97:44:9f:46:0b:
                    22:c0:6e:6a:b4:5f:5a:b4:4c:7c:50:9f:f4:ae:70:
                    b4:57:3b:36:79:ba:09:5d:38:27:00:69:a9:f4:0e:
                    ad:6c:70:ba:de:80:6d:18:03:52:59:1e:a1:a3:dc:
                    66:22:65:36:ff:cd:80:3e:00:a3:f3:86:fb:5d:b1:
                    82:22:55:d2:3a:79:d1:b4:30:ed:a7:1f:cb:2c:91:
                    22:a2:ce:43:94:60:af:55:7e:8f:3b:7e:0f:51:f6:
                    99:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:B5:9F:E9:C1:2B:D2:27:5B:29:7F:3C:39:90:F9:61:09:63:03:3E
            X509v3 Authority Key Identifier:
                keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/G7Wf6cEr0idbKX88OZD5YQljAz4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.192.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:27:f0:90:98:43:54:ff:d7:d3:ff:99:5b:21:20:38:53:dc:
         2e:26:15:d8:03:75:ce:b2:d6:a1:43:e4:92:18:c1:78:56:e6:
         cb:5d:63:6b:0e:9c:08:8f:7e:dd:e8:ad:9e:cf:4f:8d:bb:7b:
         1f:5b:2b:6d:d0:94:53:60:5b:85:0e:88:8c:b8:30:e6:f3:80:
         04:75:45:26:d1:e8:5a:b1:54:56:e0:10:0c:a3:74:64:20:3b:
         00:c4:8d:78:dc:04:32:76:f7:25:a6:16:58:e8:a2:7f:d6:8b:
         e7:f6:c7:26:67:b3:dd:e1:27:93:96:05:e2:1c:28:7a:b2:a5:
         d3:75:d1:3f:1d:eb:4a:12:ee:a7:75:bb:11:be:3a:bc:a3:12:
         8b:b8:fa:49:b8:dc:3d:44:77:2d:e6:e8:d3:2e:53:b7:88:1a:
         ab:5b:a4:7c:43:27:ce:8b:a6:d8:f1:aa:ef:56:be:69:d0:0c:
         f7:58:27:22:f3:2a:d1:4a:a9:24:19:79:06:50:e1:03:2f:48:
         3c:47:60:fd:3f:fb:03:20:13:b3:7e:3a:db:73:ca:2e:3a:ab:
         c0:dc:40:6c:99:79:65:c6:e3:81:62:06:78:0a:d6:13:34:8d:
         d6:aa:fb:f2:4b:4e:f1:bd:cb:24:a2:6c:a4:aa:3f:da:be:da:
         f1:10:5a:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVr7s9vDCiIdsIx8DziQ99mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx
YjM2ZTgwHhcNMjMwMTAxMDYwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmI1OWZlOWMxMmJkMjI3NWIyOTdmM2MzOTkwZjk2MTA5NjMwMzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiioks94n+OZZtFZQlUFcjOq0Iq6
JfQ9NGnONOnoWf+mu8LM/bYARDQgjgIKO6aTfizIR4mkN0yKLTvt3Acgpd4/LlML
ax8vTn2FYb/oyHi4iCVw1Owf+qu5aTNe3SDLsapqpQoKQh/nlY4ugH8uSTeuJeNU
/8lEVY3/Iu8M5LH1uFFArTkTHNiU2acd5regZ2bI20+vWHYqDxTcNyLol0SfRgsi
wG5qtF9atEx8UJ/0rnC0Vzs2eboJXTgnAGmp9A6tbHC63oBtGANSWR6ho9xmImU2
/82APgCj84b7XbGCIlXSOnnRtDDtpx/LLJEios5DlGCvVX6PO34PUfaZcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBu1n+nBK9InWyl/PDmQ+WEJYwM+MB8GA1UdIwQY
MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt
MDI0YjE2NTVjMjQ3LzEvRzdXZjZjRXIwaWRiS1g4OE9aRDVZUWxqQXo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3
LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcC6MA0G
CSqGSIb3DQEBCwUAA4IBAQCJJ/CQmENU/9fT/5lbISA4U9wuJhXYA3XOstahQ+SS
GMF4VubLXWNrDpwIj37d6K2ez0+Nu3sfWytt0JRTYFuFDoiMuDDm84AEdUUm0eha
sVRW4BAMo3RkIDsAxI143AQydvclphZY6KJ/1ovn9scmZ7Pd4SeTlgXiHCh6sqXT
ddE/HetKEu6ndbsRvjq8oxKLuPpJuNw9RHct5ujTLlO3iBqrW6R8QyfOi6bY8arv
Vr5p0Az3WCci8yrRSqkkGXkGUOEDL0g8R2D9P/sDIBOzfjrbc8ouOqvA3EBsmXll
xuOBYgZ4CtYTNI3WqvvyS07xvcskomykqj/avtrxEFot
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:21 2024 by rpki-client on console-ams.rpki-client.org