Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/sy-T7uC81F0oZ8zd3E39KirpRdI.roa
File:                     sy-T7uC81F0oZ8zd3E39KirpRdI.roa (raw, json)
Hash identifier:          UUeiXDnIytcsheyUyK72EL7MfIu2328mkiApiVj6cMM=
Subject key identifier:   B3:2F:93:EE:E0:BC:D4:5D:28:67:CC:DD:DC:4D:FD:2A:2A:E9:45:D2
Certificate issuer:       /CN=86022e162f6e6b9755ce4ce845120e62939506f7
Certificate serial:       01856FC25B78D44841ED20C1CC7E65282A8E
Authority key identifier: 86:02:2E:16:2F:6E:6B:97:55:CE:4C:E8:45:12:0E:62:93:95:06:F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/sy-T7uC81F0oZ8zd3E39KirpRdI.roa
Signing time:             Sun 01 Jan 2023 23:54:46 +0000
ROA not before:           Sun 01 Jan 2023 23:54:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     61049
IP address blocks:        83.136.52.0/22 maxlen: 22

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 10:32:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:c2:5b:78:d4:48:41:ed:20:c1:cc:7e:65:28:2a:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86022e162f6e6b9755ce4ce845120e62939506f7
        Validity
            Not Before: Jan  1 23:54:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b32f93eee0bcd45d2867ccdddc4dfd2a2ae945d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:dc:4a:6c:01:40:f1:ad:91:12:3c:11:04:35:
                    3d:47:d8:77:a7:50:37:f9:93:db:32:06:64:d7:d2:
                    b6:bd:75:59:ad:4a:c9:72:cb:35:39:9b:20:c3:5f:
                    1f:32:7e:e3:7b:08:f5:20:a1:59:b7:5f:6a:4f:e7:
                    2b:e5:a5:d2:81:39:db:19:32:83:68:0b:d2:54:d9:
                    52:ef:c4:cb:8a:26:5d:7b:ee:95:e8:71:06:8b:43:
                    30:8f:cf:b0:ec:9f:06:b3:59:36:30:1f:d5:7f:8d:
                    f8:1f:3e:04:74:a0:47:d7:0f:2a:5f:75:91:65:8f:
                    11:2a:24:16:f8:22:a6:c3:62:e5:7e:74:e9:39:12:
                    ab:d7:83:07:87:87:80:f1:ff:92:07:a4:23:54:de:
                    1e:bd:d5:c6:30:a1:7b:f5:dd:98:bf:c8:47:d9:f1:
                    5a:7b:3f:d6:53:c8:c8:ce:8e:7c:15:57:cc:bf:18:
                    c0:27:fd:f6:ca:b4:8b:9e:4f:ab:7e:85:4c:5d:0d:
                    97:c2:cb:94:f4:5d:36:4b:52:6e:bb:00:3c:45:f8:
                    64:1d:27:0d:3c:bc:f9:a6:61:d1:b6:60:de:04:17:
                    b7:c1:27:6d:b9:6e:04:f6:27:7e:cc:42:74:83:c2:
                    73:c1:dd:a0:c7:c9:93:21:5a:f9:e7:2f:5e:b9:cd:
                    6c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:2F:93:EE:E0:BC:D4:5D:28:67:CC:DD:DC:4D:FD:2A:2A:E9:45:D2
            X509v3 Authority Key Identifier:
                keyid:86:02:2E:16:2F:6E:6B:97:55:CE:4C:E8:45:12:0E:62:93:95:06:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgIuFi9ua5dVzkzoRRIOYpOVBvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/sy-T7uC81F0oZ8zd3E39KirpRdI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/782c07-4bba-4810-b98b-059dbcc8dcef/1/hgIuFi9ua5dVzkzoRRIOYpOVBvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.136.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:ca:4d:65:56:2b:75:ef:67:b0:97:4e:97:fd:f0:15:d7:11:
         f6:18:b3:e9:d4:b5:a5:d4:65:41:65:c8:e3:5e:3e:38:17:f6:
         a6:ab:ac:d0:b2:c5:a2:66:c6:72:86:ba:96:b9:f6:f8:83:da:
         e2:a2:9f:cb:6a:8c:da:8d:85:c8:41:51:6f:e3:9d:58:89:ab:
         41:9f:37:e6:59:52:2e:14:23:15:dd:d2:25:5f:eb:be:b7:4d:
         40:98:7e:c1:8c:3a:3b:3f:57:57:7c:ff:ab:30:4f:ea:c5:6a:
         91:e6:d1:a0:c7:5d:15:8b:1a:6a:4a:12:36:66:9f:22:62:df:
         bb:51:b8:d1:75:42:b1:66:df:06:ec:62:11:64:d7:eb:41:db:
         ba:42:33:40:cb:b2:b1:fa:8a:04:c5:01:99:84:9d:68:b6:10:
         ab:0f:37:90:76:c8:13:93:e0:7f:60:89:56:9c:cb:87:7b:9d:
         d5:37:b2:fa:fd:82:da:f0:41:a7:61:ac:e6:6c:79:be:10:46:
         01:e4:b3:ca:23:8f:c5:a0:b6:2f:fd:b4:68:da:b2:12:20:fb:
         8d:67:78:40:b7:6a:a7:0f:35:b1:7a:80:e0:a8:b6:83:7b:3b:
         57:13:de:e0:c6:84:86:1d:15:fa:6d:c9:a1:4b:ce:4c:b6:1c:
         44:2e:4c:07
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvwlt41EhB7SDBzH5lKCqOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MDIyZTE2MmY2ZTZiOTc1NWNlNGNlODQ1MTIwZTYyOTM5
NTA2ZjcwHhcNMjMwMTAxMjM1NDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzJmOTNlZWUwYmNkNDVkMjg2N2NjZGRkYzRkZmQyYTJhZTk0NWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNxKbAFA8a2REjwRBDU9R9h3p1A3
+ZPbMgZk19K2vXVZrUrJcss1OZsgw18fMn7jewj1IKFZt19qT+cr5aXSgTnbGTKD
aAvSVNlS78TLiiZde+6V6HEGi0Mwj8+w7J8Gs1k2MB/Vf434Hz4EdKBH1w8qX3WR
ZY8RKiQW+CKmw2LlfnTpORKr14MHh4eA8f+SB6QjVN4evdXGMKF79d2Yv8hH2fFa
ez/WU8jIzo58FVfMvxjAJ/32yrSLnk+rfoVMXQ2XwsuU9F02S1JuuwA8RfhkHScN
PLz5pmHRtmDeBBe3wSdtuW4E9id+zEJ0g8Jzwd2gx8mTIVr55y9euc1sPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLMvk+7gvNRdKGfM3dxN/Soq6UXSMB8GA1UdIwQY
MBaAFIYCLhYvbmuXVc5M6EUSDmKTlQb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGdJdUZpOXVhNWRWemt6b1JSSU9ZcE9WQnZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC83ODJjMDctNGJiYS00ODEwLWI5OGIt
MDU5ZGJjYzhkY2VmLzEvc3ktVDd1QzgxRjBvWjh6ZDNFMzlLaXJwUmRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC83ODJjMDctNGJiYS00ODEwLWI5OGItMDU5ZGJjYzhkY2Vm
LzEvaGdJdUZpOXVhNWRWemt6b1JSSU9ZcE9WQnZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCU4g0MA0G
CSqGSIb3DQEBCwUAA4IBAQAzyk1lVit172ewl06X/fAV1xH2GLPp1LWl1GVBZcjj
Xj44F/amq6zQssWiZsZyhrqWufb4g9riop/LaozajYXIQVFv451YiatBnzfmWVIu
FCMV3dIlX+u+t01AmH7BjDo7P1dXfP+rME/qxWqR5tGgx10VixpqShI2Zp8iYt+7
UbjRdUKxZt8G7GIRZNfrQdu6QjNAy7Kx+ooExQGZhJ1othCrDzeQdsgTk+B/YIlW
nMuHe53VN7L6/YLa8EGnYazmbHm+EEYB5LPKI4/FoLYv/bRo2rISIPuNZ3hAt2qn
DzWxeoDgqLaDeztXE97gxoSGHRX6bcmhS85MthxELkwH
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:43 2024 by rpki-client on console-ams.rpki-client.org