Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1VkgDiJb3TSssomNAIN5UPnI7aM.roa
File:                     1VkgDiJb3TSssomNAIN5UPnI7aM.roa (raw, json)
Hash identifier:          5jSCQbJr4jjZ8jt7b8wbM1sauOucks3DNhc/x0zGolM=
Subject key identifier:   D5:59:20:0E:22:5B:DD:34:AC:B2:89:8D:00:83:79:50:F9:C8:ED:A3
Certificate issuer:       /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
Certificate serial:       0188D459590F8FCDBB8C37E101C7147888AA
Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1VkgDiJb3TSssomNAIN5UPnI7aM.roa
Signing time:             Mon 19 Jun 2023 15:50:05 +0000
ROA not before:           Mon 19 Jun 2023 15:50:05 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35775
IP address blocks:        94.176.134.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 00:31:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:d4:59:59:0f:8f:cd:bb:8c:37:e1:01:c7:14:78:88:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59
        Validity
            Not Before: Jun 19 15:50:05 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d559200e225bdd34acb2898d00837950f9c8eda3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1a:01:6a:84:1e:97:6f:df:8f:e4:e0:91:e3:
                    70:8f:15:94:64:b4:c6:c2:8a:9e:26:21:61:7c:61:
                    01:12:e0:d5:6c:92:2e:1a:f5:87:53:0e:a0:5a:32:
                    13:a2:de:cb:cc:21:ce:02:63:c5:8d:e4:7e:33:d7:
                    50:c8:66:07:be:bc:ad:17:a2:90:1f:45:12:82:5f:
                    82:d0:93:02:47:e7:ab:ee:2e:7c:f3:9f:10:51:fd:
                    d4:31:89:0a:99:db:24:57:bc:cb:a5:5d:d3:29:3c:
                    73:dc:ee:db:79:3e:77:38:d1:97:8e:12:04:33:4d:
                    03:3b:ef:4b:d1:e6:b4:68:73:96:81:ac:71:27:51:
                    b0:87:c6:b6:e1:fb:e3:cb:96:48:58:14:f7:73:91:
                    d8:94:cf:4c:a8:54:96:8e:f8:ba:08:90:97:9d:48:
                    d1:b5:79:c4:ea:9a:e6:d8:82:b2:a4:89:bf:cd:37:
                    1b:c8:96:1a:b8:11:a3:15:43:ad:5d:27:ad:0e:0f:
                    29:dc:d4:08:59:c5:88:83:c5:6f:37:8b:11:f0:48:
                    f2:86:f2:73:9f:c5:e4:2f:c4:3d:3b:06:76:c4:2a:
                    a2:e8:a0:d8:b3:65:80:a7:49:d7:3a:4e:3c:f1:1e:
                    f3:1b:48:f1:50:1b:28:74:c1:9b:68:23:7d:ac:74:
                    4c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:59:20:0E:22:5B:DD:34:AC:B2:89:8D:00:83:79:50:F9:C8:ED:A3
            X509v3 Authority Key Identifier:
                keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1VkgDiJb3TSssomNAIN5UPnI7aM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.176.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ed:c2:2b:fe:da:a4:a4:1f:b4:d8:a5:d5:39:ca:5c:c6:b7:63:
         08:8d:43:26:99:c2:1b:d9:43:81:ae:2c:97:6b:dd:c9:ae:9c:
         f5:2c:8e:ce:d0:09:33:f6:e4:32:87:78:42:93:e4:16:34:88:
         ec:e0:7b:f8:c6:8e:84:c6:bd:26:d1:6e:e7:19:76:a4:3d:5e:
         d3:4a:7e:85:5b:06:77:c9:a6:74:1c:61:68:24:68:7a:cc:d0:
         85:56:be:fb:13:04:22:62:55:96:dd:18:75:8a:63:f3:1a:8d:
         0b:d7:1f:fa:19:d4:dc:8f:a8:ec:3f:17:25:20:1f:6f:d9:4b:
         42:86:e6:92:91:30:a9:6b:61:84:b4:61:b7:19:7a:21:8f:29:
         81:3a:24:a3:e7:3e:0a:cd:f2:68:ed:e7:bb:a2:49:59:b8:08:
         dd:cf:43:f6:64:61:ab:2a:8b:10:7f:ec:0a:7b:7c:52:f1:c5:
         db:81:d3:dd:9d:06:5e:fa:5d:6e:b3:6f:a9:f9:43:11:aa:3d:
         e3:0f:fe:3f:45:24:74:3c:18:85:12:10:d7:45:6b:b7:18:b2:
         71:db:11:3c:da:af:b4:a4:66:eb:53:06:45:58:13:c5:53:4a:
         1d:cd:4f:4b:a0:9d:5e:47:e8:2a:a9:bc:3f:19:a8:da:48:a1:
         ab:0c:df:bb
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYjUWVkPj827jDfhAccUeIiqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy
MTliNTkwHhcNMjMwNjE5MTU1MDA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTU5MjAwZTIyNWJkZDM0YWNiMjg5OGQwMDgzNzk1MGY5YzhlZGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRoBaoQel2/fj+TgkeNwjxWUZLTG
woqeJiFhfGEBEuDVbJIuGvWHUw6gWjITot7LzCHOAmPFjeR+M9dQyGYHvrytF6KQ
H0USgl+C0JMCR+er7i58858QUf3UMYkKmdskV7zLpV3TKTxz3O7beT53ONGXjhIE
M00DO+9L0ea0aHOWgaxxJ1Gwh8a24fvjy5ZIWBT3c5HYlM9MqFSWjvi6CJCXnUjR
tXnE6prm2IKypIm/zTcbyJYauBGjFUOtXSetDg8p3NQIWcWIg8VvN4sR8EjyhvJz
n8XkL8Q9OwZ2xCqi6KDYs2WAp0nXOk488R7zG0jxUBsodMGbaCN9rHRMbQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFNVZIA4iW900rLKJjQCDeVD5yO2jMB8GA1UdIwQY
MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl
LTkyZTI1ZmUxNjMzMS8xLzFWa2dEaUpiM1RTc3NvbU5BSU41VVBuSTdhTS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz
MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABesIYw
DQYJKoZIhvcNAQELBQADggEBAO3CK/7apKQftNil1TnKXMa3YwiNQyaZwhvZQ4Gu
LJdr3cmunPUsjs7QCTP25DKHeEKT5BY0iOzge/jGjoTGvSbRbucZdqQ9XtNKfoVb
BnfJpnQcYWgkaHrM0IVWvvsTBCJiVZbdGHWKY/MajQvXH/oZ1NyPqOw/FyUgH2/Z
S0KG5pKRMKlrYYS0YbcZeiGPKYE6JKPnPgrN8mjt57uiSVm4CN3PQ/ZkYasqixB/
7Ap7fFLxxduB092dBl76XW6zb6n5QxGqPeMP/j9FJHQ8GIUSENdFa7cYsnHbETza
r7SkZutTBkVYE8VTSh3NT0ugnV5H6CqpvD8ZqNpIoasM37s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:52 2024 by rpki-client on console-ams.rpki-client.org