Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/eVixd_X61uq3H0nGule2PH0j5vM.roa
File:                     eVixd_X61uq3H0nGule2PH0j5vM.roa (raw, json)
Hash identifier:          VGyw4hatDfTx9nAejr+Obw2m3xZAJxwG0sHSHKcaie8=
Subject key identifier:   79:58:B1:77:F5:FA:D6:EA:B7:1F:49:C6:BA:57:B6:3C:7D:23:E6:F3
Certificate issuer:       /CN=9944f812a0e002c38e84e47628bdba038598090b
Certificate serial:       01856DCB069B0921CF37EDD292516C1DD86C
Authority key identifier: 99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/eVixd_X61uq3H0nGule2PH0j5vM.roa
Signing time:             Sun 01 Jan 2023 14:45:00 +0000
ROA not before:           Sun 01 Jan 2023 14:45:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     35448
IP address blocks:        88.213.212.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 00:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:cb:06:9b:09:21:cf:37:ed:d2:92:51:6c:1d:d8:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9944f812a0e002c38e84e47628bdba038598090b
        Validity
            Not Before: Jan  1 14:45:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7958b177f5fad6eab71f49c6ba57b63c7d23e6f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:89:41:1e:6b:34:a8:b7:0c:ab:7c:7c:3e:79:
                    27:13:40:61:cf:0e:96:80:03:50:38:77:4a:7c:23:
                    fc:ba:29:9a:12:a3:b0:4b:0d:69:23:dd:8a:57:80:
                    21:89:76:ad:a7:2e:a0:84:8a:06:4c:e6:a0:6d:11:
                    a9:d0:c5:36:a2:a8:7a:3a:55:94:d9:bf:d6:82:8b:
                    52:99:90:68:9f:81:48:52:8f:96:61:42:5e:53:69:
                    dd:7f:54:a4:da:3d:3c:f8:cc:76:47:15:15:5e:35:
                    3f:2a:e6:cd:0f:3b:c6:74:1b:77:c1:09:82:67:3e:
                    ed:6d:1c:bc:f8:c6:3d:da:e1:4d:d8:12:89:ba:08:
                    2b:10:a5:7d:20:bb:f0:96:6f:be:88:f8:a7:63:60:
                    10:01:56:b3:40:9d:3b:cc:f2:36:f3:bc:75:5c:b4:
                    77:5f:dd:2e:4c:f8:9c:65:99:d8:ef:3c:5c:19:70:
                    18:26:ee:e5:96:01:96:39:f5:e5:9d:fb:e8:b7:5b:
                    63:bc:62:a7:ba:a8:1e:54:07:05:9f:e8:10:3f:e9:
                    3a:9e:45:0c:61:19:ca:45:99:9e:2f:27:2a:41:5d:
                    d5:51:08:72:5b:92:8a:7f:81:c6:05:5a:a1:3b:ea:
                    2a:53:26:56:52:c5:98:01:f1:d2:e6:1c:49:ef:0e:
                    5a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:58:B1:77:F5:FA:D6:EA:B7:1F:49:C6:BA:57:B6:3C:7D:23:E6:F3
            X509v3 Authority Key Identifier:
                keyid:99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/eVixd_X61uq3H0nGule2PH0j5vM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.213.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:23:ad:16:93:ac:90:99:03:d7:ae:ee:b4:a9:9e:08:ff:e4:
         c2:28:47:c0:b5:21:3d:7e:6e:36:e3:7a:ac:c1:4b:be:5e:ab:
         59:7b:c1:45:96:82:40:cc:8f:ec:f3:99:65:70:d3:a8:58:b0:
         b3:29:61:58:01:12:82:01:71:c6:d3:41:ff:0b:da:74:94:1f:
         66:dc:30:ae:b3:22:64:3a:ce:43:c8:29:de:04:2b:23:53:06:
         31:12:95:cf:e8:f1:03:ee:53:5f:d2:dc:ae:19:a7:4b:81:b7:
         89:51:77:f4:c1:b7:db:43:97:d9:41:28:44:88:5f:8b:6e:44:
         a9:b3:58:5d:2c:4c:24:3c:77:90:75:e4:54:99:98:bc:80:24:
         ad:5c:36:10:b2:7a:55:2b:00:73:2d:a9:da:3f:f2:e5:da:db:
         b3:cd:79:0a:3c:82:f7:4c:48:46:61:da:2b:00:cb:3d:94:45:
         a4:29:84:c5:8f:b1:1f:f7:b7:85:c1:22:e4:48:0b:b4:9c:4f:
         15:91:f3:d1:1f:3f:55:29:57:d8:46:1d:b5:c8:ba:4b:84:e9:
         5f:04:c8:4a:70:38:10:b2:05:8a:c0:fb:d9:40:87:6e:4c:df:
         01:a1:cd:05:ea:e8:19:05:12:51:24:70:c4:31:45:f0:54:78:
         68:54:08:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtywabCSHPN+3SklFsHdhsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5NDRmODEyYTBlMDAyYzM4ZTg0ZTQ3NjI4YmRiYTAzODU5
ODA5MGIwHhcNMjMwMTAxMTQ0NTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTU4YjE3N2Y1ZmFkNmVhYjcxZjQ5YzZiYTU3YjYzYzdkMjNlNmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvolBHms0qLcMq3x8PnknE0Bhzw6W
gANQOHdKfCP8uimaEqOwSw1pI92KV4AhiXatpy6ghIoGTOagbRGp0MU2oqh6OlWU
2b/WgotSmZBon4FIUo+WYUJeU2ndf1Sk2j08+Mx2RxUVXjU/KubNDzvGdBt3wQmC
Zz7tbRy8+MY92uFN2BKJuggrEKV9ILvwlm++iPinY2AQAVazQJ07zPI287x1XLR3
X90uTPicZZnY7zxcGXAYJu7llgGWOfXlnfvot1tjvGKnuqgeVAcFn+gQP+k6nkUM
YRnKRZmeLycqQV3VUQhyW5KKf4HGBVqhO+oqUyZWUsWYAfHS5hxJ7w5amwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHlYsXf1+tbqtx9JxrpXtjx9I+bzMB8GA1UdIwQY
MBaAFJlE+BKg4ALDjoTkdii9ugOFmAkLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVVUNEVxRGdBc09PaE9SMktMMjZBNFdZQ1FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8zYzZjYjUtYTcyYy00NzAxLWFlNmMt
MzA2YzU2NTEzNDNlLzEvZVZpeGRfWDYxdXEzSDBuR3VsZTJQSDBqNXZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8zYzZjYjUtYTcyYy00NzAxLWFlNmMtMzA2YzU2NTEzNDNl
LzEvbVVUNEVxRGdBc09PaE9SMktMMjZBNFdZQ1FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNXUMA0G
CSqGSIb3DQEBCwUAA4IBAQAwI60Wk6yQmQPXru60qZ4I/+TCKEfAtSE9fm4243qs
wUu+XqtZe8FFloJAzI/s85llcNOoWLCzKWFYARKCAXHG00H/C9p0lB9m3DCusyJk
Os5DyCneBCsjUwYxEpXP6PED7lNf0tyuGadLgbeJUXf0wbfbQ5fZQShEiF+LbkSp
s1hdLEwkPHeQdeRUmZi8gCStXDYQsnpVKwBzLanaP/Ll2tuzzXkKPIL3TEhGYdor
AMs9lEWkKYTFj7Ef97eFwSLkSAu0nE8VkfPRHz9VKVfYRh21yLpLhOlfBMhKcDgQ
sgWKwPvZQIduTN8Boc0F6ugZBRJRJHDEMUXwVHhoVAjF
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:51 2024 by rpki-client on console-ams.rpki-client.org