Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/F94G_ib5-BppRhoaq61aupi4CfU.roa
File:                     F94G_ib5-BppRhoaq61aupi4CfU.roa (raw, json)
Hash identifier:          KROpqWATGLrhmLouJZLQTz7m2ripOXuh615unWHCJ2s=
Subject key identifier:   17:DE:06:FE:26:F9:F8:1A:69:46:1A:1A:AB:AD:5A:BA:98:B8:09:F5
Certificate issuer:       /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial:       01901FE316208C195DBD475F93C26FEFBD13
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/F94G_ib5-BppRhoaq61aupi4CfU.roa
Signing time:             Sun 16 Jun 2024 07:11:34 +0000
ROA not before:           Sun 16 Jun 2024 07:11:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48

Validation:               Failed, certificate revoked on Sun 16 Jun 2024 08:04:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:e3:16:20:8c:19:5d:bd:47:5f:93:c2:6f:ef:bd:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
        Validity
            Not Before: Jun 16 07:11:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=17de06fe26f9f81a69461a1aabad5aba98b809f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f5:1d:ce:a8:76:02:de:9e:83:e4:04:3d:ef:
                    18:9a:17:10:79:83:e2:39:54:b9:cf:53:90:b5:20:
                    a8:26:3f:52:e6:92:65:d6:88:10:e7:b0:de:52:08:
                    13:79:b6:3c:5b:bf:60:c6:d4:26:2a:46:0c:61:cc:
                    dc:8c:5e:d2:f5:c4:e9:ca:fa:13:00:7f:89:27:fb:
                    58:66:a3:41:e5:ea:4b:67:0b:5d:f1:10:7c:fc:e6:
                    2c:36:0e:45:80:6d:0e:a1:93:88:26:90:ac:4f:e1:
                    61:65:60:b6:dd:8a:2c:e2:f6:80:97:55:d8:46:5e:
                    38:f3:d1:fe:4e:ea:3f:b3:02:f8:03:84:0d:2e:54:
                    65:ea:62:ed:81:22:08:be:29:93:24:4a:5e:ff:42:
                    76:a0:a7:bf:09:97:f1:a0:49:ef:6a:c0:d3:93:29:
                    05:02:92:0a:5b:50:af:35:94:bf:f6:73:72:8a:ee:
                    2b:31:8b:54:6f:75:5f:b6:e8:a6:6a:18:73:4f:d7:
                    3e:b1:47:96:e9:c2:49:f6:fa:9a:d6:bb:33:50:1e:
                    b0:8f:ea:3e:ce:2a:17:60:1e:d5:1c:af:fb:56:26:
                    98:a9:34:bf:46:90:da:ed:f9:0e:0b:6d:cc:51:d3:
                    9e:e8:ca:0b:cc:7f:b1:62:0a:cf:e6:35:de:b5:67:
                    11:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:DE:06:FE:26:F9:F8:1A:69:46:1A:1A:AB:AD:5A:BA:98:B8:09:F5
            X509v3 Authority Key Identifier:
                keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/F94G_ib5-BppRhoaq61aupi4CfU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:1f:5f:c6:ae:03:bc:a3:56:74:85:cc:83:bb:a9:b2:5f:6a:
         96:25:0b:de:58:28:f6:85:ae:e4:ea:e7:4a:63:9b:a5:4b:40:
         09:d0:db:95:7f:f4:3e:c6:71:13:79:c9:d3:eb:11:22:01:1a:
         53:0b:34:83:e3:1c:27:63:d6:be:8c:57:36:63:f9:49:2f:08:
         62:7f:00:07:93:07:c0:15:d6:0d:38:47:75:8f:a2:6c:4f:c0:
         64:6c:16:92:85:e6:4b:78:04:9a:99:48:24:04:2d:42:91:c3:
         2d:26:87:dc:bf:95:65:87:bf:32:50:e2:1e:11:97:1c:7a:89:
         32:f9:8a:7e:56:4d:ee:cc:5a:9b:54:d6:0a:c6:c6:f6:1c:2a:
         a4:f6:fc:26:f5:be:52:83:9f:3b:3a:5f:f8:39:fb:c5:67:50:
         03:2a:42:7e:e4:cd:f9:7d:8d:22:85:1b:a9:a5:3c:9f:b5:e4:
         c6:29:29:85:94:f2:86:93:ec:98:65:3b:01:d3:04:27:c9:8a:
         8e:a0:3c:07:fd:d0:dd:6c:37:0c:ce:2e:cf:2a:d7:24:e7:80:
         88:d7:76:04:57:56:d7:78:c8:f5:37:d0:e9:6f:55:8d:3f:50:
         3c:da:cc:8a:d1:a4:52:18:58:cd:be:e7:56:b1:da:b6:cb:56:
         cf:45:e1:e1
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZAf4xYgjBldvUdfk8Jv770TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNjE2MDcxMTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2RlMDZmZTI2ZjlmODFhNjk0NjFhMWFhYmFkNWFiYTk4YjgwOWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7vUdzqh2At6eg+QEPe8YmhcQeYPi
OVS5z1OQtSCoJj9S5pJl1ogQ57DeUggTebY8W79gxtQmKkYMYczcjF7S9cTpyvoT
AH+JJ/tYZqNB5epLZwtd8RB8/OYsNg5FgG0OoZOIJpCsT+FhZWC23Yos4vaAl1XY
Rl4489H+Tuo/swL4A4QNLlRl6mLtgSIIvimTJEpe/0J2oKe/CZfxoEnvasDTkykF
ApIKW1CvNZS/9nNyiu4rMYtUb3VftuimahhzT9c+sUeW6cJJ9vqa1rszUB6wj+o+
zioXYB7VHK/7ViaYqTS/RpDa7fkOC23MUdOe6MoLzH+xYgrP5jXetWcRdwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFBfeBv4m+fgaaUYaGqutWrqYuAn1MB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvRjk0R19pYjUtQnBwUmhvYXE2MWF1cGk0Q2ZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAH4fX8auA7yjVnSFzIO7
qbJfapYlC95YKPaFruTq50pjm6VLQAnQ25V/9D7GcRN5ydPrESIBGlMLNIPjHCdj
1r6MVzZj+UkvCGJ/AAeTB8AV1g04R3WPomxPwGRsFpKF5kt4BJqZSCQELUKRwy0m
h9y/lWWHvzJQ4h4Rlxx6iTL5in5WTe7MWptU1grGxvYcKqT2/Cb1vlKDnzs6X/g5
+8VnUAMqQn7kzfl9jSKFG6mlPJ+15MYpKYWU8oaT7JhlOwHTBCfJio6gPAf90N1s
NwzOLs8q1yTngIjXdgRXVtd4yPU30OlvVY0/UDzazIrRpFIYWM2+51ax2rbLVs9F
4eE=
Generated at Sun Jun 16 08:56:27 2024 by rpki-client on console-fra.rpki-client.org