Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/jtbmjbE6flJVZSQTsnRu5XwfP_Y.roa
File:                     jtbmjbE6flJVZSQTsnRu5XwfP_Y.roa (raw, json)
Hash identifier:          Pw6V0Cj9EOLC2Bu2YWPoe2SjEJWBC5aPd0OutRZgoQ4=
Subject key identifier:   8E:D6:E6:8D:B1:3A:7E:52:55:65:24:13:B2:74:6E:E5:7C:1F:3F:F6
Certificate issuer:       /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial:       019077773150CD32A95DCF477D9C669CA5D2
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/jtbmjbE6flJVZSQTsnRu5XwfP_Y.roa
Signing time:             Wed 03 Jul 2024 07:20:18 +0000
ROA not before:           Wed 03 Jul 2024 07:20:18 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     21859
IP address blocks:        84.55.18.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 02 Sep 2024 05:29:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:77:77:31:50:cd:32:a9:5d:cf:47:7d:9c:66:9c:a5:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
        Validity
            Not Before: Jul  3 07:20:18 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=8ed6e68db13a7e5255652413b2746ee57c1f3ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:15:4f:5d:4b:08:44:71:96:4a:f2:ed:dc:9f:
                    f9:0f:86:e4:a4:1a:4a:14:33:0f:ab:ff:21:24:0a:
                    12:ec:98:b3:03:da:c0:4e:19:0e:7c:dd:f4:fc:31:
                    94:da:c9:15:a0:cc:a6:21:d4:ef:66:8f:74:fb:e5:
                    10:df:58:e2:fc:84:39:0a:3f:ed:51:1c:f9:49:be:
                    1b:b6:1a:a8:b5:39:f3:e3:3f:e6:53:a4:15:86:c5:
                    f7:f7:1a:e3:9e:7d:04:60:86:fd:41:ba:b1:11:a7:
                    cd:c4:20:ff:fe:ec:ca:fd:67:61:48:fd:9c:32:d3:
                    61:ab:e2:d3:cd:ee:45:1b:5b:65:72:3e:fb:ce:a3:
                    78:57:e4:5a:2a:cd:be:d7:63:2d:f3:28:02:ca:44:
                    5c:cc:fa:0a:ed:59:85:88:46:f9:df:e9:9b:75:af:
                    c1:ca:e0:2a:8d:b7:8a:4a:53:af:c0:8c:05:03:1b:
                    11:5a:88:d5:e1:db:eb:be:f0:2a:0d:23:79:91:2a:
                    11:56:03:e1:a0:7b:ed:d7:e5:29:2f:1c:7c:b4:a7:
                    e8:97:be:19:79:e6:d5:39:31:19:cf:0b:49:18:7c:
                    fa:19:b5:2d:6b:8a:cb:7e:d5:bd:23:97:79:12:22:
                    0e:2c:ff:d2:ab:83:4c:0d:42:68:d3:5b:b9:fa:41:
                    89:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D6:E6:8D:B1:3A:7E:52:55:65:24:13:B2:74:6E:E5:7C:1F:3F:F6
            X509v3 Authority Key Identifier:
                keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/jtbmjbE6flJVZSQTsnRu5XwfP_Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.55.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:3f:d8:4d:33:09:23:e5:a4:04:90:ad:6f:70:b8:df:a3:5b:
         2f:66:0e:4d:11:6c:1c:a9:5e:a0:f5:f6:b8:84:96:1e:91:82:
         b9:a4:28:3a:09:a7:0f:68:a0:16:24:83:16:74:21:d5:ab:59:
         e9:28:ef:85:24:ff:b6:d5:1d:4f:62:a3:55:fd:d5:bb:0c:08:
         9b:f2:fd:aa:64:89:d8:2a:f7:61:ee:2b:16:1d:e0:1c:80:62:
         94:6e:67:cf:1f:6c:c2:27:19:01:06:82:3b:cf:fd:14:9d:a6:
         41:e2:74:9c:14:6f:fa:56:4a:45:db:5b:c8:c3:7b:a0:cc:7f:
         df:78:8d:f9:dd:0c:12:d4:eb:28:d0:24:51:46:9a:22:84:0d:
         2b:ea:7c:52:85:74:d8:2e:40:50:7f:6b:1f:4f:72:10:99:48:
         71:9a:4f:f0:e6:2f:94:1b:b8:ba:ce:76:bc:0a:a6:0c:84:5c:
         dc:95:80:c6:f5:db:cd:7e:09:73:90:94:90:7f:52:38:a8:8b:
         45:10:8a:b6:28:35:0d:c4:57:3f:44:40:33:c0:e4:3b:e5:48:
         7e:92:8b:64:5e:32:43:e4:1f:f2:5a:35:76:92:35:df:dc:ae:
         9a:2d:21:fe:fe:18:65:6b:fb:4c:be:bf:1c:6e:a3:53:e7:27:
         35:16:a3:35
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZB3dzFQzTKpXc9HfZxmnKXSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0
ZjgzYzQwHhcNMjQwNzAzMDcyMDE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWQ2ZTY4ZGIxM2E3ZTUyNTU2NTI0MTNiMjc0NmVlNTdjMWYzZmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xVPXUsIRHGWSvLt3J/5D4bkpBpK
FDMPq/8hJAoS7JizA9rAThkOfN30/DGU2skVoMymIdTvZo90++UQ31ji/IQ5Cj/t
URz5Sb4bthqotTnz4z/mU6QVhsX39xrjnn0EYIb9QbqxEafNxCD//uzK/WdhSP2c
MtNhq+LTze5FG1tlcj77zqN4V+RaKs2+12Mt8ygCykRczPoK7VmFiEb53+mbda/B
yuAqjbeKSlOvwIwFAxsRWojV4dvrvvAqDSN5kSoRVgPhoHvt1+UpLxx8tKfol74Z
eebVOTEZzwtJGHz6GbUta4rLftW9I5d5EiIOLP/Sq4NMDUJo01u5+kGJOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI7W5o2xOn5SVWUkE7J0buV8Hz/2MB8GA1UdIwQY
MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut
MWY4NzQ2OTQ1NDgzLzEvanRibWpiRTZmbEpWWlNRVHNuUnU1WHdmUF9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz
LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVDcSMA0G
CSqGSIb3DQEBCwUAA4IBAQCLP9hNMwkj5aQEkK1vcLjfo1svZg5NEWwcqV6g9fa4
hJYekYK5pCg6CacPaKAWJIMWdCHVq1npKO+FJP+21R1PYqNV/dW7DAib8v2qZInY
Kvdh7isWHeAcgGKUbmfPH2zCJxkBBoI7z/0UnaZB4nScFG/6VkpF21vIw3ugzH/f
eI353QwS1Oso0CRRRpoihA0r6nxShXTYLkBQf2sfT3IQmUhxmk/w5i+UG7i6zna8
CqYMhFzclYDG9dvNfglzkJSQf1I4qItFEIq2KDUNxFc/REAzwOQ75Uh+kotkXjJD
5B/yWjV2kjXf3K6aLSH+/hhla/tMvr8cbqNT5yc1FqM1
Generated at Mon Sep 2 06:59:22 2024 by rpki-client on console-fra.rpki-client.org