Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/S2b0o_Mff-nMQF_5M1b6drR3Zf8.roa
File:                     S2b0o_Mff-nMQF_5M1b6drR3Zf8.roa (raw, json)
Hash identifier:          pSDMjDh0EAqflk0O9cqyOEqbmXcMq0hZMQkDvprmOoI=
Subject key identifier:   4B:66:F4:A3:F3:1F:7F:E9:CC:40:5F:F9:33:56:FA:76:B4:77:65:FF
Certificate issuer:       /CN=eebe79d147882422ec275417dfd2affa93a02757
Certificate serial:       0190E8DB9BC3BEEA173CFBC65D3F0C350709
Authority key identifier: EE:BE:79:D1:47:88:24:22:EC:27:54:17:DF:D2:AF:FA:93:A0:27:57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/S2b0o_Mff-nMQF_5M1b6drR3Zf8.roa
Signing time:             Thu 25 Jul 2024 07:47:04 +0000
ROA not before:           Thu 25 Jul 2024 07:47:04 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     209360
IP address blocks:        193.8.73.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 04 Sep 2024 12:24:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:e8:db:9b:c3:be:ea:17:3c:fb:c6:5d:3f:0c:35:07:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebe79d147882422ec275417dfd2affa93a02757
        Validity
            Not Before: Jul 25 07:47:04 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=4b66f4a3f31f7fe9cc405ff93356fa76b47765ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:11:0c:2d:2f:62:63:77:0b:44:c5:73:63:d9:
                    98:c6:02:68:1a:51:43:3b:f8:ca:fa:f4:cd:c5:cb:
                    b1:17:98:fe:83:30:62:e9:da:e6:b8:9c:30:38:09:
                    91:ce:73:f2:a0:36:03:f9:6b:f0:ec:45:2c:0f:a1:
                    7d:1a:8a:26:57:d5:0e:b6:0b:0f:39:fc:39:8e:18:
                    28:4c:f5:65:64:1a:d4:65:71:04:88:60:96:11:ab:
                    37:86:c1:7c:a0:18:01:a9:fa:6e:66:fa:47:6b:5a:
                    de:cc:b8:a4:f6:23:23:1b:2c:de:83:3a:07:60:85:
                    b4:ce:8e:54:f7:78:fc:3c:c7:6d:aa:c1:fe:21:41:
                    dc:10:59:58:bc:88:f8:98:e2:40:f5:51:8f:ef:0d:
                    bf:5f:f3:9c:99:3e:e6:af:7c:fb:f0:b3:31:0f:f7:
                    71:bb:40:e6:50:60:05:a1:90:dc:19:ed:51:0c:63:
                    a9:26:4c:03:2a:ac:d1:05:4c:0b:86:bd:ca:ed:4f:
                    75:29:8e:f6:e8:f3:03:4e:61:54:44:76:2a:c5:be:
                    8a:18:41:c7:b3:e1:82:19:13:d3:fe:6a:4c:80:1f:
                    05:b3:2a:a5:98:b4:0d:4c:0b:63:1e:74:bc:06:08:
                    60:0e:34:43:a8:d8:93:74:d4:7a:46:6a:05:6e:4c:
                    ef:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:66:F4:A3:F3:1F:7F:E9:CC:40:5F:F9:33:56:FA:76:B4:77:65:FF
            X509v3 Authority Key Identifier:
                keyid:EE:BE:79:D1:47:88:24:22:EC:27:54:17:DF:D2:AF:FA:93:A0:27:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7r550UeIJCLsJ1QX39Kv-pOgJ1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/S2b0o_Mff-nMQF_5M1b6drR3Zf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c44b7f-5bcd-4ee7-8712-38823c1449af/1/7r550UeIJCLsJ1QX39Kv-pOgJ1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.8.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:d2:5a:17:db:37:1a:2e:13:9e:0f:82:58:4d:32:9b:1f:b7:
         87:64:e4:ed:4c:9b:fd:c4:d6:48:68:ca:7c:fa:b4:d6:45:3c:
         82:ba:4b:97:89:b0:3a:8f:47:ee:60:40:38:3b:c3:47:6d:0b:
         8c:58:53:a5:da:29:3a:1b:47:a2:72:a4:fb:8e:4b:15:31:9e:
         2d:13:e6:e6:24:ba:d3:0a:ea:a4:cd:7f:8a:02:70:87:4e:53:
         b2:66:81:08:ee:0d:8a:e7:37:83:02:93:a5:36:94:df:ac:b7:
         74:af:85:5a:f4:b2:74:d8:1a:70:17:84:e4:be:00:4e:52:94:
         48:14:1b:14:d2:87:00:7a:9e:af:0e:e1:83:5e:ac:8d:2e:b0:
         aa:51:c9:78:a7:47:91:6c:3d:20:f5:68:9d:4e:46:14:7d:7b:
         4a:5e:8b:9f:e1:80:1c:4d:fc:c6:db:6b:0e:c8:bb:99:f4:98:
         4d:5b:a5:2a:a1:d2:e1:41:3d:cb:fa:3c:5e:89:57:dc:9f:0f:
         fb:6c:8f:14:ed:1a:0b:ad:d4:69:3b:c3:4d:11:8f:ff:fd:75:
         36:c7:17:fb:a3:b5:73:f8:71:7e:c1:60:63:7e:3c:20:9e:7e:
         51:23:88:18:ce:86:bd:43:20:66:96:56:58:6d:2e:06:98:9d:
         d9:26:e8:a1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZDo25vDvuoXPPvGXT8MNQcJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmU3OWQxNDc4ODI0MjJlYzI3NTQxN2RmZDJhZmZhOTNh
MDI3NTcwHhcNMjQwNzI1MDc0NzA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjY2ZjRhM2YzMWY3ZmU5Y2M0MDVmZjkzMzU2ZmE3NmI0Nzc2NWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuREMLS9iY3cLRMVzY9mYxgJoGlFD
O/jK+vTNxcuxF5j+gzBi6drmuJwwOAmRznPyoDYD+Wvw7EUsD6F9GoomV9UOtgsP
Ofw5jhgoTPVlZBrUZXEEiGCWEas3hsF8oBgBqfpuZvpHa1rezLik9iMjGyzegzoH
YIW0zo5U93j8PMdtqsH+IUHcEFlYvIj4mOJA9VGP7w2/X/OcmT7mr3z78LMxD/dx
u0DmUGAFoZDcGe1RDGOpJkwDKqzRBUwLhr3K7U91KY726PMDTmFURHYqxb6KGEHH
s+GCGRPT/mpMgB8FsyqlmLQNTAtjHnS8BghgDjRDqNiTdNR6RmoFbkzvpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEtm9KPzH3/pzEBf+TNW+na0d2X/MB8GA1UdIwQY
MBaAFO6+edFHiCQi7CdUF9/Sr/qToCdXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3I1NTBVZUlKQ0xzSjFRWDM5S3YtcE9nSjFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9jNDRiN2YtNWJjZC00ZWU3LTg3MTIt
Mzg4MjNjMTQ0OWFmLzEvUzJiMG9fTWZmLW5NUUZfNU0xYjZkclIzWmY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9jNDRiN2YtNWJjZC00ZWU3LTg3MTItMzg4MjNjMTQ0OWFm
LzEvN3I1NTBVZUlKQ0xzSjFRWDM5S3YtcE9nSjFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQhJMA0G
CSqGSIb3DQEBCwUAA4IBAQCR0loX2zcaLhOeD4JYTTKbH7eHZOTtTJv9xNZIaMp8
+rTWRTyCukuXibA6j0fuYEA4O8NHbQuMWFOl2ik6G0eicqT7jksVMZ4tE+bmJLrT
CuqkzX+KAnCHTlOyZoEI7g2K5zeDApOlNpTfrLd0r4Va9LJ02BpwF4TkvgBOUpRI
FBsU0ocAep6vDuGDXqyNLrCqUcl4p0eRbD0g9WidTkYUfXtKXouf4YAcTfzG22sO
yLuZ9JhNW6UqodLhQT3L+jxeiVfcnw/7bI8U7RoLrdRpO8NNEY///XU2xxf7o7Vz
+HF+wWBjfjwgnn5RI4gYzoa9QyBmllZYbS4GmJ3ZJuih
Generated at Wed Sep 4 15:47:28 2024 by rpki-client on console-ams.rpki-client.org