Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/eVR0q7rqbo_pydKWLrpAB-BWuQA.roa
File:                     eVR0q7rqbo_pydKWLrpAB-BWuQA.roa (raw, json)
Hash identifier:          B4v2Pa1I9ZHihg3YvtBJ3JsoBeUllb4v4zgjffJC17M=
Subject key identifier:   79:54:74:AB:BA:EA:6E:8F:E9:C9:D2:96:2E:BA:40:07:E0:56:B9:00
Certificate issuer:       /CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Certificate serial:       0185720C88A0A16A111A53D0D6DE98811DE5
Authority key identifier: C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/eVR0q7rqbo_pydKWLrpAB-BWuQA.roa
Signing time:             Mon 02 Jan 2023 10:35:02 +0000
ROA not before:           Mon 02 Jan 2023 10:35:02 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     34002
IP address blocks:        209.222.77.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 20:30:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:0c:88:a0:a1:6a:11:1a:53:d0:d6:de:98:81:1d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
        Validity
            Not Before: Jan  2 10:35:02 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=795474abbaea6e8fe9c9d2962eba4007e056b900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:37:83:4c:b5:cf:6c:9f:6d:d3:2c:32:08:87:
                    1c:ce:34:6c:f9:85:63:4a:b6:c4:67:bd:a4:c7:6c:
                    39:5a:2e:92:76:33:c7:ce:24:76:22:a3:45:53:64:
                    ba:e3:3f:2e:eb:6a:5e:90:bf:ee:6b:13:bf:0a:46:
                    4f:6c:27:af:03:7d:df:bd:20:34:0e:45:14:e6:75:
                    b4:89:52:f3:4a:a0:1c:9d:e1:49:81:a2:2a:3f:99:
                    f0:5f:8e:7d:6c:69:6c:94:f3:35:7a:e4:02:a3:6e:
                    4b:2c:bb:2a:d3:71:ef:a2:33:04:fa:9b:38:30:e9:
                    97:f4:b7:98:2d:b7:b1:5f:c8:9f:99:7e:1b:c5:69:
                    d5:bf:6b:c3:ed:02:3c:7b:74:74:1c:ab:2f:28:ce:
                    20:b4:47:47:38:82:87:60:85:91:7f:9c:d8:fb:a7:
                    16:2b:12:24:ab:fe:67:49:4f:34:34:c4:e7:cb:ff:
                    dd:c9:16:b4:59:87:c5:a8:c2:dd:d1:36:5b:33:4f:
                    dd:8d:80:2e:d7:48:e4:0c:19:0d:87:26:1c:13:75:
                    a6:c5:e8:2a:8d:ce:81:46:00:9c:6b:dc:d5:c2:6d:
                    8e:7e:a2:1f:3d:23:24:9c:88:70:13:ac:c6:8e:7e:
                    0b:11:d9:27:11:7e:ce:3c:7e:4c:66:91:48:6d:fb:
                    4f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:54:74:AB:BA:EA:6E:8F:E9:C9:D2:96:2E:BA:40:07:E0:56:B9:00
            X509v3 Authority Key Identifier:
                keyid:C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/eVR0q7rqbo_pydKWLrpAB-BWuQA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.222.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:ba:38:79:6e:5a:03:23:6b:2b:44:7a:fd:8c:c5:fd:8e:b5:
         99:5b:28:33:ea:b1:c4:f1:37:93:cd:e5:61:d9:ea:29:50:ee:
         7a:95:a3:4a:92:9f:57:4e:5f:ab:11:b9:cb:90:1f:21:91:54:
         cd:e3:1d:a0:4c:06:38:be:1b:fe:90:d3:2c:c1:0f:87:cf:35:
         6a:d6:c0:94:22:bb:08:fd:a7:80:8f:2a:3c:7b:92:d6:8f:82:
         6d:7e:ec:96:26:00:fa:8c:2b:05:73:28:39:08:c4:48:1b:be:
         cf:2d:56:a8:a8:21:12:79:70:66:f1:bd:81:68:59:a1:92:24:
         18:f8:14:bf:75:de:41:d9:9e:ad:f8:ba:00:53:12:7b:ed:aa:
         48:b3:44:b6:7e:1d:0f:2f:08:29:65:91:e1:5b:75:2a:f4:3c:
         51:30:04:30:09:09:fe:76:b9:62:ff:0c:15:e7:de:4e:45:4e:
         30:43:d7:07:31:28:36:eb:94:87:10:f3:2e:65:a7:7a:56:1b:
         81:2b:21:b0:ae:cf:df:ef:36:2d:1b:ff:1c:98:19:62:80:3a:
         a3:f8:ce:de:40:64:ee:9e:1a:16:26:df:4f:08:3a:9b:f2:53:
         b7:ec:b6:46:c3:18:ba:ab:fe:89:41:f4:73:91:bf:5d:86:e7:
         9c:48:f5:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyDIigoWoRGlPQ1t6YgR3lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OTE0NTZlZGE1OWZiMGZkMmQxNzNmOTU0MTJiZTM1ZjZj
ZmJmYWYwHhcNMjMwMTAyMTAzNTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTU0NzRhYmJhZWE2ZThmZTljOWQyOTYyZWJhNDAwN2UwNTZiOTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzeDTLXPbJ9t0ywyCIcczjRs+YVj
SrbEZ72kx2w5Wi6SdjPHziR2IqNFU2S64z8u62pekL/uaxO/CkZPbCevA33fvSA0
DkUU5nW0iVLzSqAcneFJgaIqP5nwX459bGlslPM1euQCo25LLLsq03HvojME+ps4
MOmX9LeYLbexX8ifmX4bxWnVv2vD7QI8e3R0HKsvKM4gtEdHOIKHYIWRf5zY+6cW
KxIkq/5nSU80NMTny//dyRa0WYfFqMLd0TZbM0/djYAu10jkDBkNhyYcE3Wmxegq
jc6BRgCca9zVwm2OfqIfPSMknIhwE6zGjn4LEdknEX7OPH5MZpFIbftP7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHlUdKu66m6P6cnSli66QAfgVrkAMB8GA1UdIwQY
MBaAFMSRRW7aWfsP0tFz+VQSvjX2z7+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEpGRmJ0cFotd19TMFhQNVZCSy1OZmJQdjY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni80ZjQwOGQtYmRhNS00YTk0LWI4M2Et
YTczMGNjZmRhZGM1LzEvZVZSMHE3cnFib19weWRLV0xycEFCLUJXdVFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni80ZjQwOGQtYmRhNS00YTk0LWI4M2EtYTczMGNjZmRhZGM1
LzEveEpGRmJ0cFotd19TMFhQNVZCSy1OZmJQdjY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0d5NMA0G
CSqGSIb3DQEBCwUAA4IBAQBgujh5bloDI2srRHr9jMX9jrWZWygz6rHE8TeTzeVh
2eopUO56laNKkp9XTl+rEbnLkB8hkVTN4x2gTAY4vhv+kNMswQ+HzzVq1sCUIrsI
/aeAjyo8e5LWj4JtfuyWJgD6jCsFcyg5CMRIG77PLVaoqCESeXBm8b2BaFmhkiQY
+BS/dd5B2Z6t+LoAUxJ77apIs0S2fh0PLwgpZZHhW3Uq9DxRMAQwCQn+drli/wwV
595ORU4wQ9cHMSg265SHEPMuZad6VhuBKyGwrs/f7zYtG/8cmBligDqj+M7eQGTu
nhoWJt9PCDqb8lO37LZGwxi6q/6JQfRzkb9dhuecSPUF
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:28 2024 by rpki-client on console-ams.rpki-client.org