Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/5ViKDJn_WHP_6Voi8-TKuZAewXM.roa
File:                     5ViKDJn_WHP_6Voi8-TKuZAewXM.roa (raw, json)
Hash identifier:          +BuqHafr/uHKzd4UoVxbikYTMSAM/OJ+zl2heI+r3l0=
Subject key identifier:   E5:58:8A:0C:99:FF:58:73:FF:E9:5A:22:F3:E4:CA:B9:90:1E:C1:73
Certificate issuer:       /CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
Certificate serial:       01856EB8F7B8416EBF4CE6013F27A11AABA1
Authority key identifier: 4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/5ViKDJn_WHP_6Voi8-TKuZAewXM.roa
Signing time:             Sun 01 Jan 2023 19:04:53 +0000
ROA not before:           Sun 01 Jan 2023 19:04:53 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210069
IP address blocks:        185.93.187.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 02:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:b8:f7:b8:41:6e:bf:4c:e6:01:3f:27:a1:1a:ab:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
        Validity
            Not Before: Jan  1 19:04:53 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e5588a0c99ff5873ffe95a22f3e4cab9901ec173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:33:65:cb:6b:8a:b3:1d:dc:e8:50:58:19:51:
                    e5:8b:14:76:85:86:58:00:4a:47:b4:c6:2c:e1:09:
                    9b:9e:90:2e:5d:98:61:1d:40:fd:59:23:a6:2b:98:
                    4d:60:5b:0e:d1:cb:a6:cd:ea:19:0d:0e:c5:7f:40:
                    9d:09:ba:bb:cb:74:be:b3:ee:ba:a3:6f:46:8c:9d:
                    07:72:f2:a5:4f:e9:fe:09:4e:45:0b:c5:e6:4c:f6:
                    b8:da:f8:bd:9e:fc:c3:ec:da:a4:2f:67:75:82:d7:
                    e6:65:3f:9d:ca:f0:f1:1d:e0:47:da:c7:95:16:65:
                    e2:da:5f:32:87:4d:57:95:f1:b9:08:33:79:eb:87:
                    46:72:4f:92:78:cd:f9:74:ec:70:e1:2a:2a:51:db:
                    f2:e7:7b:48:a1:bb:d0:73:6e:08:5a:93:c6:90:44:
                    72:f5:7a:40:ce:f6:f9:67:cd:d7:f2:9e:12:b6:d4:
                    10:f0:d4:cf:16:c0:c2:e6:0c:0c:29:0e:28:89:cc:
                    c4:52:18:82:9d:d2:0a:86:17:22:c9:3c:84:39:d2:
                    a8:ba:96:ac:60:7f:e0:10:3d:16:cc:b7:72:21:33:
                    06:73:b5:3b:13:b2:a0:8d:fa:1b:72:a1:9d:ef:d7:
                    8a:f9:64:6a:80:b9:de:4f:8e:7f:13:26:17:42:ea:
                    d6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:58:8A:0C:99:FF:58:73:FF:E9:5A:22:F3:E4:CA:B9:90:1E:C1:73
            X509v3 Authority Key Identifier:
                keyid:4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/5ViKDJn_WHP_6Voi8-TKuZAewXM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.93.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:d1:1c:eb:f7:4b:19:c8:e6:36:2e:2d:ad:b6:4f:3f:39:6c:
         87:58:f6:dd:c3:fb:62:c3:af:14:51:8a:df:72:55:80:b2:cb:
         7f:3c:19:01:e2:37:ae:a4:4b:d6:aa:b1:36:0b:e3:2d:40:0c:
         95:01:9c:6a:3d:05:66:6d:0c:0a:e7:40:b4:f1:a0:c2:e3:66:
         ee:8a:1a:63:ec:da:ad:8e:c6:6f:97:d4:ae:bc:af:62:ae:ad:
         36:78:7b:f5:65:80:75:23:0e:bc:37:94:b1:ce:d8:ad:f8:ab:
         f4:ec:4b:71:fe:d3:23:e8:bb:42:f3:1b:91:b0:f8:23:02:85:
         39:ee:71:a4:9b:1f:de:c1:c6:c7:d8:4a:85:8a:a7:cb:d4:70:
         5b:57:34:32:31:cb:db:09:93:11:b8:fe:83:07:dc:6f:11:d6:
         b2:d1:31:14:62:97:39:c2:02:5a:66:55:3e:5f:a1:68:d8:a2:
         49:b0:29:7f:6a:bb:22:e0:78:3b:4d:22:b9:d2:bf:21:da:ca:
         a8:d4:cb:22:e8:05:bc:b1:f7:31:3e:cc:5e:cf:e3:72:ed:3f:
         fc:ee:c5:c3:9a:ec:b6:d5:11:8b:07:87:f6:f5:bb:17:0f:c3:
         81:94:cc:02:42:a3:8a:11:a2:62:6e:fe:cf:c2:81:96:b5:19:
         ca:90:9f:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuuPe4QW6/TOYBPyehGquhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOWFjNmZlMjAzMWFkZGUwMzY2ODI0MGUzYzVkOTFlYzY3
MTFlMWUwHhcNMjMwMTAxMTkwNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTU4OGEwYzk5ZmY1ODczZmZlOTVhMjJmM2U0Y2FiOTkwMWVjMTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjNly2uKsx3c6FBYGVHlixR2hYZY
AEpHtMYs4QmbnpAuXZhhHUD9WSOmK5hNYFsO0cumzeoZDQ7Ff0CdCbq7y3S+s+66
o29GjJ0HcvKlT+n+CU5FC8XmTPa42vi9nvzD7NqkL2d1gtfmZT+dyvDxHeBH2seV
FmXi2l8yh01XlfG5CDN564dGck+SeM35dOxw4SoqUdvy53tIobvQc24IWpPGkERy
9XpAzvb5Z83X8p4SttQQ8NTPFsDC5gwMKQ4oiczEUhiCndIKhhciyTyEOdKoupas
YH/gED0WzLdyITMGc7U7E7KgjfobcqGd79eK+WRqgLneT45/EyYXQurW8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOVYigyZ/1hz/+laIvPkyrmQHsFzMB8GA1UdIwQY
MBaAFE+axv4gMa3eA2aCQOPF2R7GcR4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDVyR19pQXhyZDREWm9KQTQ4WFpIc1p4SGg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84NDdmZmEtOWYzOC00NjEwLTk4ZTct
NTI4YTYzYmU0Yzg3LzEvNVZpS0RKbl9XSFBfNlZvaTgtVEt1WkFld1hNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi84NDdmZmEtOWYzOC00NjEwLTk4ZTctNTI4YTYzYmU0Yzg3
LzEvVDVyR19pQXhyZDREWm9KQTQ4WFpIc1p4SGg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuV27MA0G
CSqGSIb3DQEBCwUAA4IBAQCC0Rzr90sZyOY2Li2ttk8/OWyHWPbdw/tiw68UUYrf
clWAsst/PBkB4jeupEvWqrE2C+MtQAyVAZxqPQVmbQwK50C08aDC42buihpj7Nqt
jsZvl9SuvK9irq02eHv1ZYB1Iw68N5Sxztit+Kv07Etx/tMj6LtC8xuRsPgjAoU5
7nGkmx/ewcbH2EqFiqfL1HBbVzQyMcvbCZMRuP6DB9xvEday0TEUYpc5wgJaZlU+
X6Fo2KJJsCl/arsi4Hg7TSK50r8h2sqo1Msi6AW8sfcxPsxez+Ny7T/87sXDmuy2
1RGLB4f29bsXD8OBlMwCQqOKEaJibv7PwoGWtRnKkJ8b
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:33 2024 by rpki-client on console-ams.rpki-client.org