Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/6qp-jajuRhvxpWqHqBjtBfA4MeU.roa
File:                     6qp-jajuRhvxpWqHqBjtBfA4MeU.roa (raw, json)
Hash identifier:          Z4mhT7ag6LJB6bTGmR+1bZhRagOJf6KvaAsj0bgBWNo=
Subject key identifier:   EA:AA:7E:8D:A8:EE:46:1B:F1:A5:6A:87:A8:18:ED:05:F0:38:31:E5
Certificate issuer:       /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial:       018572E832ACDC43C67A6D54EC09EA6F71CF
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/6qp-jajuRhvxpWqHqBjtBfA4MeU.roa
Signing time:             Mon 02 Jan 2023 14:34:58 +0000
ROA not before:           Mon 02 Jan 2023 14:34:58 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49581
IP address blocks:        193.111.249.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:e8:32:ac:dc:43:c6:7a:6d:54:ec:09:ea:6f:71:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
        Validity
            Not Before: Jan  2 14:34:58 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=eaaa7e8da8ee461bf1a56a87a818ed05f03831e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5f:7c:ab:60:1c:1b:16:70:8f:32:40:4a:73:
                    5b:cb:35:c3:f9:d0:6e:aa:56:50:91:66:e0:c4:cc:
                    a8:85:a2:7d:d4:b1:1b:9d:b3:58:5a:7f:09:79:d4:
                    df:a7:91:6b:7b:d5:04:e5:6c:43:4e:38:04:95:e7:
                    b5:4d:fb:3b:53:ba:f5:f6:33:2e:11:6a:a4:ce:da:
                    11:44:77:aa:d6:47:dd:77:30:d3:8d:17:a3:bb:91:
                    bb:81:db:0d:73:ec:68:d5:2a:87:66:e4:a1:86:8b:
                    cc:28:bc:26:f2:f1:89:ef:6c:36:42:6e:7e:25:e3:
                    96:c6:cb:7a:e8:06:4c:b9:9f:1e:84:87:51:ec:ea:
                    fe:b2:a7:8b:26:2e:d4:d8:2f:b5:6c:fb:9f:c2:8b:
                    22:89:bb:3d:49:b0:d0:bc:bb:6a:43:20:d9:76:48:
                    b4:05:15:21:17:e6:d4:4f:f7:55:60:ac:6a:b3:6b:
                    ee:22:ef:1b:45:cc:fb:6e:0a:64:bc:3d:f8:19:d4:
                    1c:7e:a7:a2:a6:44:68:19:c0:2d:ff:85:af:77:f0:
                    8f:f4:70:1a:03:1a:e8:10:0d:9d:81:e1:f5:6f:27:
                    60:4b:cc:e5:c1:28:c1:b5:54:3e:69:85:76:ef:0b:
                    ee:05:6a:b7:da:e3:8f:e5:9d:11:bb:03:23:29:0d:
                    84:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:AA:7E:8D:A8:EE:46:1B:F1:A5:6A:87:A8:18:ED:05:F0:38:31:E5
            X509v3 Authority Key Identifier:
                keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/6qp-jajuRhvxpWqHqBjtBfA4MeU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.111.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:f5:54:1e:94:28:70:e3:99:46:7c:85:a1:c5:54:d8:44:91:
         df:9e:d1:b1:16:99:73:f2:c3:a1:8b:84:f5:0a:35:1c:d1:a4:
         1c:56:4f:2b:d9:06:04:d4:76:4b:01:b5:23:82:17:49:88:b9:
         f6:7f:47:a2:41:3d:b9:f4:35:ac:91:5c:bc:e2:98:cb:77:5a:
         8a:a6:b8:af:7e:40:ff:82:ce:e8:e9:5c:b6:19:52:2a:69:80:
         98:08:5f:c2:f0:f3:98:fa:8d:e2:72:d3:57:53:5b:75:c8:58:
         34:dd:22:3b:f8:59:62:7d:f3:74:79:9c:44:f7:f9:da:79:a1:
         88:59:59:2a:93:74:18:fc:5b:61:90:a0:e0:45:f9:7e:1e:bd:
         3a:47:9e:bb:92:db:3d:f6:1b:1d:92:57:ca:aa:0f:af:28:a4:
         33:5c:a6:b3:23:56:63:64:cf:a3:da:88:22:6e:96:61:01:5d:
         b9:63:b6:88:19:7e:8f:5d:de:4f:ad:6c:05:bb:0d:53:d2:a9:
         e3:99:80:f9:12:81:8c:35:9f:94:78:21:a4:8c:e8:47:27:6e:
         65:22:17:6f:ad:45:1d:b6:a4:37:a2:d1:3d:a1:52:f8:5c:ac:
         db:8d:00:af:b4:8d:6e:68:5c:f5:c2:ca:89:10:8f:1e:cb:81:
         2a:07:54:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVy6DKs3EPGem1U7Anqb3HPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NWViYTVjMWE4MGY4NmE0NTg5Mjc4ZWRkOTMwNGIzZjUx
NjlmODMwHhcNMjMwMTAyMTQzNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWFhN2U4ZGE4ZWU0NjFiZjFhNTZhODdhODE4ZWQwNWYwMzgzMWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhV98q2AcGxZwjzJASnNbyzXD+dBu
qlZQkWbgxMyohaJ91LEbnbNYWn8JedTfp5Fre9UE5WxDTjgElee1Tfs7U7r19jMu
EWqkztoRRHeq1kfddzDTjReju5G7gdsNc+xo1SqHZuShhovMKLwm8vGJ72w2Qm5+
JeOWxst66AZMuZ8ehIdR7Or+sqeLJi7U2C+1bPufwosiibs9SbDQvLtqQyDZdki0
BRUhF+bUT/dVYKxqs2vuIu8bRcz7bgpkvD34GdQcfqeipkRoGcAt/4Wvd/CP9HAa
AxroEA2dgeH1bydgS8zlwSjBtVQ+aYV27wvuBWq32uOP5Z0RuwMjKQ2EdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOqqfo2o7kYb8aVqh6gY7QXwODHlMB8GA1UdIwQY
MBaAFEZeulwagPhqRYknjt2TBLP1Fp+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmw2NlhCcUEtR3BGaVNlTzNaTUVzX1VXbjRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9jMTJhN2ItNWNhZi00ZTdjLTk3MGQt
NWM0NzZlMzMyNWY1LzEvNnFwLWphanVSaHZ4cFdxSHFCanRCZkE0TWVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9jMTJhN2ItNWNhZi00ZTdjLTk3MGQtNWM0NzZlMzMyNWY1
LzEvUmw2NlhCcUEtR3BGaVNlTzNaTUVzX1VXbjRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW/5MA0G
CSqGSIb3DQEBCwUAA4IBAQCb9VQelChw45lGfIWhxVTYRJHfntGxFplz8sOhi4T1
CjUc0aQcVk8r2QYE1HZLAbUjghdJiLn2f0eiQT259DWskVy84pjLd1qKprivfkD/
gs7o6Vy2GVIqaYCYCF/C8POY+o3ictNXU1t1yFg03SI7+FliffN0eZxE9/naeaGI
WVkqk3QY/FthkKDgRfl+Hr06R567kts99hsdklfKqg+vKKQzXKazI1ZjZM+j2ogi
bpZhAV25Y7aIGX6PXd5PrWwFuw1T0qnjmYD5EoGMNZ+UeCGkjOhHJ25lIhdvrUUd
tqQ3otE9oVL4XKzbjQCvtI1uaFz1wsqJEI8ey4EqB1RT
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:19 2023 by rpki-client on console-ams.rpki-client.org