Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/eYOJWIseStsbrQ_zL3NSnjFb_BM.roa
File:                     eYOJWIseStsbrQ_zL3NSnjFb_BM.roa (raw, json)
Hash identifier:          C1eniziZypfVdDiEZ08FBcH9okmGHdVTnnWRPxt8PxQ=
Subject key identifier:   79:83:89:58:8B:1E:4A:DB:1B:AD:0F:F3:2F:73:52:9E:31:5B:FC:13
Certificate issuer:       /CN=cb7e053c71995acc9bf1333fe79c3d5bfd6e964e
Certificate serial:       01856FB1149E549524CFCA078A017F21D258
Authority key identifier: CB:7E:05:3C:71:99:5A:CC:9B:F1:33:3F:E7:9C:3D:5B:FD:6E:96:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y34FPHGZWsyb8TM_55w9W_1ulk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/eYOJWIseStsbrQ_zL3NSnjFb_BM.roa
Signing time:             Sun 01 Jan 2023 23:35:54 +0000
ROA not before:           Sun 01 Jan 2023 23:35:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43631
IP address blocks:        193.46.91.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 22:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:b1:14:9e:54:95:24:cf:ca:07:8a:01:7f:21:d2:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb7e053c71995acc9bf1333fe79c3d5bfd6e964e
        Validity
            Not Before: Jan  1 23:35:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=798389588b1e4adb1bad0ff32f73529e315bfc13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:5d:a7:35:e0:de:6d:35:1a:99:c5:53:b1:8c:
                    db:f6:f0:8b:92:81:f6:dd:c2:92:5e:99:9c:4d:c7:
                    65:b2:d9:4a:b7:07:01:bb:64:af:c6:12:24:6f:d4:
                    c2:63:7a:59:b4:ad:2f:79:55:6e:f2:29:5b:c4:e5:
                    a3:c1:7f:97:91:85:13:ef:8b:59:2c:11:ee:19:ee:
                    f3:9d:4c:ff:ca:b0:fb:4b:08:dc:ef:67:b0:3b:8d:
                    85:a1:0f:42:88:0a:4e:e6:36:e6:bb:2a:1e:18:b1:
                    02:14:9d:d5:92:f4:ad:cd:c0:6d:62:ce:eb:1c:ca:
                    b7:5e:f5:20:59:85:2d:fe:6f:c4:bb:e3:94:fd:62:
                    fc:f3:9e:3f:ff:b5:6d:24:97:f0:c6:66:36:7c:d8:
                    31:51:e4:af:f3:87:56:73:f4:ad:4e:bb:26:83:2e:
                    36:2c:38:ce:39:e0:cd:54:14:10:a9:46:55:c7:0b:
                    3e:e4:c8:0f:8c:e7:06:92:d7:da:66:b6:32:65:07:
                    f5:d3:e0:35:89:3a:71:1b:37:b8:46:7e:db:d8:4c:
                    41:7f:0c:ac:3b:4e:2d:d4:d0:cd:01:7f:22:2e:97:
                    81:49:70:62:4a:3b:99:77:5b:ba:e3:9f:ec:70:16:
                    de:13:14:b5:d6:1a:ac:5d:40:23:d4:10:b9:ad:02:
                    59:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:83:89:58:8B:1E:4A:DB:1B:AD:0F:F3:2F:73:52:9E:31:5B:FC:13
            X509v3 Authority Key Identifier:
                keyid:CB:7E:05:3C:71:99:5A:CC:9B:F1:33:3F:E7:9C:3D:5B:FD:6E:96:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y34FPHGZWsyb8TM_55w9W_1ulk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/eYOJWIseStsbrQ_zL3NSnjFb_BM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/78aad1-d61f-416e-af4c-93637d4168bd/1/y34FPHGZWsyb8TM_55w9W_1ulk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.46.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:35:7e:a9:40:a3:44:58:39:b0:07:e7:f5:32:2b:e6:a6:8e:
         8d:f4:e0:40:38:28:cf:ef:fa:82:e5:51:59:2b:8e:0c:f8:44:
         ef:1a:3f:19:f8:68:cb:23:c8:5f:11:0d:41:1d:93:1e:23:cf:
         83:90:a0:fd:62:a8:74:65:e7:c7:a1:8c:c9:bb:3d:a6:04:7f:
         93:53:8c:77:39:37:65:4e:9b:af:8a:f2:ff:98:84:f3:5a:9c:
         f9:4b:1b:e3:57:c7:87:3a:32:c3:25:19:d4:b1:73:03:a4:9c:
         49:10:40:dd:be:d4:2a:8b:ab:af:f8:76:53:3b:59:02:09:ad:
         16:d7:51:c2:20:85:81:0d:bb:4c:b7:83:44:57:51:ca:b4:bb:
         3f:0c:9b:75:da:0e:ad:86:50:35:48:d0:a7:00:36:4d:93:77:
         1f:80:ac:34:b7:fc:84:67:a9:ea:9f:50:7b:3b:ef:8e:a9:e0:
         22:87:7a:e5:f2:26:91:ba:9b:4e:f7:c6:91:7b:45:99:64:0e:
         c2:30:57:24:42:1b:c1:f7:49:43:de:cb:9e:f7:e8:f2:e7:0d:
         59:4d:ba:db:0c:72:85:ad:fe:f8:82:af:c2:2e:3b:5c:a2:7d:
         0d:b0:05:66:de:6e:5e:f3:ea:04:c3:b5:a8:39:81:26:0e:ab:
         70:e1:da:0d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvsRSeVJUkz8oHigF/IdJYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiN2UwNTNjNzE5OTVhY2M5YmYxMzMzZmU3OWMzZDViZmQ2
ZTk2NGUwHhcNMjMwMTAxMjMzNTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTgzODk1ODhiMWU0YWRiMWJhZDBmZjMyZjczNTI5ZTMxNWJmYzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjV2nNeDebTUamcVTsYzb9vCLkoH2
3cKSXpmcTcdlstlKtwcBu2SvxhIkb9TCY3pZtK0veVVu8ilbxOWjwX+XkYUT74tZ
LBHuGe7znUz/yrD7Swjc72ewO42FoQ9CiApO5jbmuyoeGLECFJ3VkvStzcBtYs7r
HMq3XvUgWYUt/m/Eu+OU/WL8854//7VtJJfwxmY2fNgxUeSv84dWc/StTrsmgy42
LDjOOeDNVBQQqUZVxws+5MgPjOcGktfaZrYyZQf10+A1iTpxGze4Rn7b2ExBfwys
O04t1NDNAX8iLpeBSXBiSjuZd1u645/scBbeExS11hqsXUAj1BC5rQJZzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHmDiViLHkrbG60P8y9zUp4xW/wTMB8GA1UdIwQY
MBaAFMt+BTxxmVrMm/EzP+ecPVv9bpZOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTM0RlBIR1pXc3liOFRNXzU1dzlXXzF1bGs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83OGFhZDEtZDYxZi00MTZlLWFmNGMt
OTM2MzdkNDE2OGJkLzEvZVlPSldJc2VTdHNiclFfekwzTlNuakZiX0JNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS83OGFhZDEtZDYxZi00MTZlLWFmNGMtOTM2MzdkNDE2OGJk
LzEveTM0RlBIR1pXc3liOFRNXzU1dzlXXzF1bGs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwS5bMA0G
CSqGSIb3DQEBCwUAA4IBAQBnNX6pQKNEWDmwB+f1Mivmpo6N9OBAOCjP7/qC5VFZ
K44M+ETvGj8Z+GjLI8hfEQ1BHZMeI8+DkKD9Yqh0ZefHoYzJuz2mBH+TU4x3OTdl
TpuvivL/mITzWpz5SxvjV8eHOjLDJRnUsXMDpJxJEEDdvtQqi6uv+HZTO1kCCa0W
11HCIIWBDbtMt4NEV1HKtLs/DJt12g6thlA1SNCnADZNk3cfgKw0t/yEZ6nqn1B7
O++OqeAih3rl8iaRuptO98aRe0WZZA7CMFckQhvB90lD3sue9+jy5w1ZTbrbDHKF
rf74gq/CLjtcon0NsAVm3m5e8+oEw7WoOYEmDqtw4doN
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:14 2024 by rpki-client on console-ams.rpki-client.org