Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/6is0tuUbyn8jpf3GxmBuh9KWu4I.roa
File:                     6is0tuUbyn8jpf3GxmBuh9KWu4I.roa (raw, json)
Hash identifier:          cNhaHZhwrue5ZF88NJpvYQP8CW8doWJnAyWK310mFYg=
Subject key identifier:   EA:2B:34:B6:E5:1B:CA:7F:23:A5:FD:C6:C6:60:6E:87:D2:96:BB:82
Certificate issuer:       /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial:       018CC56E0E6D414E101DBD8EE6D30112C254
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/6is0tuUbyn8jpf3GxmBuh9KWu4I.roa
Signing time:             Mon 01 Jan 2024 14:29:33 +0000
ROA not before:           Mon 01 Jan 2024 14:29:33 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     29119
IP address blocks:        80.246.226.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Mon 22 Jan 2024 09:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:c5:6e:0e:6d:41:4e:10:1d:bd:8e:e6:d3:01:12:c2:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
        Validity
            Not Before: Jan  1 14:29:33 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=ea2b34b6e51bca7f23a5fdc6c6606e87d296bb82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f2:12:00:b9:4f:25:95:2d:d7:f0:45:ad:2f:
                    7c:81:15:41:f0:2f:bf:ff:d9:ba:17:b0:94:80:2e:
                    12:eb:40:38:d0:99:3e:39:97:d9:01:f9:b2:8c:0e:
                    7b:e0:05:73:95:c7:08:98:c3:95:71:65:fb:f7:18:
                    93:ba:00:21:53:f0:7c:a7:ad:86:8b:f2:6c:0a:67:
                    2d:f9:a7:33:a3:d0:9c:7d:51:af:8c:19:9b:56:5b:
                    62:81:8e:5c:40:33:19:df:ee:2e:af:8e:0d:91:4d:
                    b5:4d:81:84:db:65:0e:f7:5a:ae:0c:70:d1:78:8b:
                    d6:61:f7:17:ed:e8:3d:2b:3a:ec:be:63:23:11:8f:
                    51:32:2b:28:d1:f2:72:a6:56:6d:6e:a7:70:fc:7b:
                    4b:04:bc:ab:26:ed:00:c7:14:8e:38:0a:c1:5c:80:
                    14:a6:42:34:ba:f3:f0:8d:1b:41:5a:0e:58:f5:83:
                    21:19:2e:72:c3:23:80:dd:43:a2:cb:9a:78:2a:e1:
                    ba:ea:27:68:b5:ab:98:f9:9f:9b:2d:f0:a3:16:d8:
                    3b:85:c7:81:c1:36:1c:61:84:80:ad:b4:3e:8a:6c:
                    a7:bc:1f:a2:8d:0b:a2:c7:64:4c:24:e0:b7:e7:68:
                    d9:df:51:90:60:97:12:9f:85:d6:2c:fb:e5:5a:41:
                    69:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:2B:34:B6:E5:1B:CA:7F:23:A5:FD:C6:C6:60:6E:87:D2:96:BB:82
            X509v3 Authority Key Identifier:
                keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/6is0tuUbyn8jpf3GxmBuh9KWu4I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.246.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:f5:6e:e4:b2:a2:ad:5c:39:ec:f3:f1:9f:0a:9f:fd:98:af:
         37:9b:1b:91:19:85:4a:a4:92:d7:4f:74:c4:00:16:d2:a0:fc:
         e9:cb:3a:3b:ce:e9:11:ae:4a:65:d5:fd:38:ed:fc:1f:e6:9e:
         72:71:b2:3a:51:cc:d4:25:00:65:d1:c8:e0:85:4c:8b:55:d2:
         ad:8b:28:3e:c2:a3:75:ea:8e:51:ab:4f:06:4b:03:b3:7c:62:
         e9:c6:36:df:51:8d:fa:79:6a:1f:69:ba:19:1d:45:cd:d2:f8:
         45:6c:83:c8:a9:54:cb:88:bc:e3:4b:d2:d1:fd:49:4b:66:83:
         eb:70:bb:3f:dc:1e:2b:3c:29:d2:e6:a5:76:70:b8:31:d3:1b:
         69:09:dc:61:84:34:eb:fa:a2:2b:63:89:2a:d3:7f:1a:a8:f2:
         c9:a3:a7:12:08:3c:99:12:50:41:00:03:a0:44:f7:bb:ea:26:
         6c:3b:b9:89:09:8b:47:7b:86:94:9e:34:10:ae:a6:3f:34:26:
         a0:2e:d9:8d:ea:47:f2:11:86:96:27:48:60:9f:5f:d5:84:7f:
         5c:b1:67:91:7c:ff:11:73:4f:fc:62:6f:bd:f1:95:5a:a9:65:
         d7:4d:a5:e0:2f:7d:96:a3:c0:fd:ea:3c:3f:26:c4:ed:31:5e:
         38:86:bd:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbg5tQU4QHb2O5tMBEsJUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2
Y2Q3MzMwHhcNMjQwMTAxMTQyOTMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTJiMzRiNmU1MWJjYTdmMjNhNWZkYzZjNjYwNmU4N2QyOTZiYjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/ISALlPJZUt1/BFrS98gRVB8C+/
/9m6F7CUgC4S60A40Jk+OZfZAfmyjA574AVzlccImMOVcWX79xiTugAhU/B8p62G
i/JsCmct+aczo9CcfVGvjBmbVltigY5cQDMZ3+4ur44NkU21TYGE22UO91quDHDR
eIvWYfcX7eg9KzrsvmMjEY9RMiso0fJyplZtbqdw/HtLBLyrJu0AxxSOOArBXIAU
pkI0uvPwjRtBWg5Y9YMhGS5ywyOA3UOiy5p4KuG66idotauY+Z+bLfCjFtg7hceB
wTYcYYSArbQ+imynvB+ijQuix2RMJOC352jZ31GQYJcSn4XWLPvlWkFpnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOorNLblG8p/I6X9xsZgbofSlruCMB8GA1UdIwQY
MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt
YWRlYWRlMjg2NWMxLzEvNmlzMHR1VWJ5bjhqcGYzR3htQnVoOUtXdTRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx
LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUPbiMA0G
CSqGSIb3DQEBCwUAA4IBAQAc9W7ksqKtXDns8/GfCp/9mK83mxuRGYVKpJLXT3TE
ABbSoPzpyzo7zukRrkpl1f047fwf5p5ycbI6UczUJQBl0cjghUyLVdKtiyg+wqN1
6o5Rq08GSwOzfGLpxjbfUY36eWofaboZHUXN0vhFbIPIqVTLiLzjS9LR/UlLZoPr
cLs/3B4rPCnS5qV2cLgx0xtpCdxhhDTr+qIrY4kq038aqPLJo6cSCDyZElBBAAOg
RPe76iZsO7mJCYtHe4aUnjQQrqY/NCagLtmN6kfyEYaWJ0hgn1/VhH9csWeRfP8R
c0/8Ym+98ZVaqWXXTaXgL32Wo8D96jw/JsTtMV44hr2V
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:31 2024 by rpki-client on console-ams.rpki-client.org