Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/ph8moqukjiOG0TYPeB9-VLKyqGU.roa
File:                     ph8moqukjiOG0TYPeB9-VLKyqGU.roa (raw, json)
Hash identifier:          zP7BUlgus/BstmRTSFb5J6C5mq2FsICAqXUKXM/4KoQ=
Subject key identifier:   A6:1F:26:A2:AB:A4:8E:23:86:D1:36:0F:78:1F:7E:54:B2:B2:A8:65
Certificate issuer:       /CN=9aac0da35100668060d30f173d6102e182d1b9ea
Certificate serial:       0185700B90BC37E7E0A2927CE96B4257D814
Authority key identifier: 9A:AC:0D:A3:51:00:66:80:60:D3:0F:17:3D:61:02:E1:82:D1:B9:EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/ph8moqukjiOG0TYPeB9-VLKyqGU.roa
Signing time:             Mon 02 Jan 2023 01:14:44 +0000
ROA not before:           Mon 02 Jan 2023 01:14:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43430
IP address blocks:        193.46.71.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 06:29:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:0b:90:bc:37:e7:e0:a2:92:7c:e9:6b:42:57:d8:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aac0da35100668060d30f173d6102e182d1b9ea
        Validity
            Not Before: Jan  2 01:14:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a61f26a2aba48e2386d1360f781f7e54b2b2a865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:de:ce:43:12:a3:6c:17:90:c5:7c:d9:3b:b3:
                    a8:30:6d:99:ce:e9:47:20:27:f5:42:ba:e5:7d:78:
                    c8:a9:4c:0c:1e:ee:31:fe:bd:76:c4:3f:a3:8a:b2:
                    26:ee:a0:4f:7e:8e:81:07:5f:90:c7:5c:ac:80:16:
                    36:92:c0:88:06:a2:c1:c7:3e:81:ca:19:a7:94:fc:
                    61:cb:11:b7:ba:1d:ed:f9:a0:08:29:ea:7d:23:97:
                    ba:f1:b9:e9:7f:f5:ac:a7:02:39:6d:91:aa:2d:fb:
                    a9:f3:86:4b:a7:ff:02:6c:b9:e7:c8:49:29:e0:a9:
                    d6:03:28:b1:4e:09:be:f7:91:74:58:d3:29:c2:9a:
                    f6:09:3d:d1:0b:34:7b:e0:ea:2f:84:35:f6:1e:c9:
                    50:c7:ca:25:7d:77:7a:48:33:90:aa:4e:54:04:4f:
                    8d:4a:ab:fb:22:e8:e3:e3:84:20:d0:0c:5b:2a:17:
                    9a:b4:07:0a:4b:be:84:89:16:68:cc:df:61:33:5c:
                    08:af:b0:55:31:0e:b2:7a:bc:2a:b2:fb:0f:fc:a2:
                    06:4a:f6:f8:7a:f5:83:56:49:b9:1e:bf:a5:8a:cf:
                    28:79:ed:f9:6e:20:da:a3:fa:d1:ca:95:88:05:db:
                    bd:da:51:7c:48:b2:f3:09:4a:e9:cd:f5:5f:b0:fe:
                    c0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:1F:26:A2:AB:A4:8E:23:86:D1:36:0F:78:1F:7E:54:B2:B2:A8:65
            X509v3 Authority Key Identifier:
                keyid:9A:AC:0D:A3:51:00:66:80:60:D3:0F:17:3D:61:02:E1:82:D1:B9:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mqwNo1EAZoBg0w8XPWEC4YLRueo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/ph8moqukjiOG0TYPeB9-VLKyqGU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/32828b-0271-462c-a7ae-51b107dc9f39/1/mqwNo1EAZoBg0w8XPWEC4YLRueo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.46.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:11:87:15:4c:26:3e:8c:1f:2d:a5:b3:ae:70:9a:4f:b6:8d:
         bf:92:0c:6e:4a:1c:9f:29:15:20:59:73:da:c0:90:0c:f6:1f:
         51:71:0f:62:b9:6b:84:fe:ce:72:6c:66:6c:ab:69:a7:e6:43:
         7c:37:39:90:fb:e6:9e:53:82:c6:ac:65:31:28:2d:b3:ab:ae:
         7d:7d:4f:b9:ce:a3:45:a6:f3:60:ea:68:06:59:ea:68:f4:e5:
         75:eb:3b:23:d6:3e:98:48:d0:5c:ca:6e:c9:10:b3:43:62:b4:
         cb:ca:25:ea:7f:30:73:bc:ef:17:cd:1b:0b:30:19:1b:09:d5:
         54:6e:52:8b:56:cc:54:9f:5e:24:fc:d1:32:7d:ea:8e:a7:ba:
         1b:e3:b2:01:c1:d4:cc:b4:f7:96:14:b6:dc:a8:6a:52:07:d8:
         96:a6:81:a5:26:7e:9a:16:ed:b4:3b:9f:9c:3f:9b:ed:8d:ca:
         69:54:30:ed:37:97:27:35:50:ae:f1:18:cb:14:96:55:ad:a5:
         ea:cd:e5:66:f2:1d:c3:8b:85:b5:22:b9:81:ce:b5:4a:99:60:
         fa:6e:8e:47:2a:bd:38:2a:7f:18:2c:16:81:c4:a4:4a:30:32:
         5b:46:69:ac:a0:84:ae:62:c2:96:a6:00:5a:22:eb:aa:44:78:
         d4:70:07:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwC5C8N+fgopJ86WtCV9gUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhYWMwZGEzNTEwMDY2ODA2MGQzMGYxNzNkNjEwMmUxODJk
MWI5ZWEwHhcNMjMwMTAyMDExNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjFmMjZhMmFiYTQ4ZTIzODZkMTM2MGY3ODFmN2U1NGIyYjJhODY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd7OQxKjbBeQxXzZO7OoMG2ZzulH
ICf1QrrlfXjIqUwMHu4x/r12xD+jirIm7qBPfo6BB1+Qx1ysgBY2ksCIBqLBxz6B
yhmnlPxhyxG3uh3t+aAIKep9I5e68bnpf/WspwI5bZGqLfup84ZLp/8CbLnnyEkp
4KnWAyixTgm+95F0WNMpwpr2CT3RCzR74OovhDX2HslQx8olfXd6SDOQqk5UBE+N
Sqv7Iujj44Qg0AxbKheatAcKS76EiRZozN9hM1wIr7BVMQ6yerwqsvsP/KIGSvb4
evWDVkm5Hr+lis8oee35biDao/rRypWIBdu92lF8SLLzCUrpzfVfsP7ATwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKYfJqKrpI4jhtE2D3gfflSysqhlMB8GA1UdIwQY
MBaAFJqsDaNRAGaAYNMPFz1hAuGC0bnqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXF3Tm8xRUFab0JnMHc4WFBXRUM0WUxSdWVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8zMjgyOGItMDI3MS00NjJjLWE3YWUt
NTFiMTA3ZGM5ZjM5LzEvcGg4bW9xdWtqaU9HMFRZUGVCOS1WTEt5cUdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8zMjgyOGItMDI3MS00NjJjLWE3YWUtNTFiMTA3ZGM5ZjM5
LzEvbXF3Tm8xRUFab0JnMHc4WFBXRUM0WUxSdWVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwS5HMA0G
CSqGSIb3DQEBCwUAA4IBAQBQEYcVTCY+jB8tpbOucJpPto2/kgxuShyfKRUgWXPa
wJAM9h9RcQ9iuWuE/s5ybGZsq2mn5kN8NzmQ++aeU4LGrGUxKC2zq659fU+5zqNF
pvNg6mgGWepo9OV16zsj1j6YSNBcym7JELNDYrTLyiXqfzBzvO8XzRsLMBkbCdVU
blKLVsxUn14k/NEyfeqOp7ob47IBwdTMtPeWFLbcqGpSB9iWpoGlJn6aFu20O5+c
P5vtjcppVDDtN5cnNVCu8RjLFJZVraXqzeVm8h3Di4W1IrmBzrVKmWD6bo5HKr04
Kn8YLBaBxKRKMDJbRmmsoISuYsKWpgBaIuuqRHjUcAdR
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:28 2024 by rpki-client on console-fra.rpki-client.org