Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/c9z1NdSkXxSLn_xZ4I41MDmoR2I.roa
File:                     c9z1NdSkXxSLn_xZ4I41MDmoR2I.roa (raw, json)
Hash identifier:          QdhP4vcr9KVguZBAiSSCYgXWp++2K0mhjBRUO2CP2oM=
Subject key identifier:   73:DC:F5:35:D4:A4:5F:14:8B:9F:FC:59:E0:8E:35:30:39:A8:47:62
Certificate issuer:       /CN=46369dc5da5e4e70c735b235704d9ebc58259349
Certificate serial:       018571830F397D568951A370596AAFBAAFA2
Authority key identifier: 46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/c9z1NdSkXxSLn_xZ4I41MDmoR2I.roa
Signing time:             Mon 02 Jan 2023 08:04:52 +0000
ROA not before:           Mon 02 Jan 2023 08:04:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     19905
IP address blocks:        193.203.196.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:31:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:83:0f:39:7d:56:89:51:a3:70:59:6a:af:ba:af:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46369dc5da5e4e70c735b235704d9ebc58259349
        Validity
            Not Before: Jan  2 08:04:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=73dcf535d4a45f148b9ffc59e08e353039a84762
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:82:9e:fc:80:10:13:ac:54:39:bb:0d:5d:43:
                    fd:be:f1:d2:b1:13:fe:b2:0c:3f:c9:d3:db:83:89:
                    2f:a3:4b:a9:23:41:c3:9e:bd:cd:54:83:23:ee:36:
                    aa:28:d7:70:5e:d1:11:2f:fd:3a:a9:f9:f4:98:8a:
                    5f:33:10:41:12:b6:b4:80:c2:0c:21:bb:74:26:78:
                    2a:53:ff:38:8d:26:46:78:24:e7:cd:8b:0e:7d:c3:
                    ec:de:21:06:5b:15:2a:27:2d:e5:5e:41:4c:25:34:
                    8a:a6:ac:7e:c8:e1:33:64:56:f0:7b:f6:77:fe:4c:
                    8d:0e:77:78:14:5b:3c:89:dc:bd:2a:c8:11:a6:ae:
                    d5:2b:cb:d6:13:9e:27:5f:f4:77:b3:3f:67:79:8f:
                    6a:0c:0e:25:3a:4c:28:f8:24:0c:b7:5c:29:12:1e:
                    2c:cf:0a:c6:f5:ac:2c:6b:91:21:bd:13:d5:bc:ed:
                    af:4d:a4:69:91:99:8e:26:88:62:82:95:37:7b:5b:
                    37:88:2d:3c:81:99:86:b4:27:59:8f:ef:3c:b7:5f:
                    79:a4:25:17:fb:5b:fc:a4:b0:cb:b3:c0:79:5c:cb:
                    d0:b4:1b:52:d3:23:99:e7:49:b9:95:f7:6d:7b:38:
                    68:ac:f3:c9:e8:97:a3:a3:3e:60:70:e4:7c:9e:54:
                    58:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DC:F5:35:D4:A4:5F:14:8B:9F:FC:59:E0:8E:35:30:39:A8:47:62
            X509v3 Authority Key Identifier:
                keyid:46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/c9z1NdSkXxSLn_xZ4I41MDmoR2I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.203.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:60:11:77:86:c5:e4:79:03:ae:80:5e:56:4c:70:6f:df:8d:
         35:a0:d2:47:b1:c6:ef:b2:f9:f3:c3:f0:05:7e:ed:6d:ad:12:
         a8:18:34:c6:3d:ab:a5:29:f3:e1:fd:3b:e4:d7:2c:25:c4:69:
         27:f0:fb:3c:91:a4:be:19:28:6d:b2:72:8e:94:6b:87:1d:1d:
         19:d3:3e:c7:f0:38:b9:bb:9f:e1:63:fe:ec:a6:03:a3:bb:d0:
         3c:e1:66:cb:ff:fc:df:29:74:be:99:af:c4:7f:36:3e:81:68:
         1f:45:10:5b:ff:82:d2:8f:2a:e4:91:b9:68:1f:2f:8a:43:73:
         4c:7e:8b:c8:f8:48:62:4d:c4:1a:08:fe:50:f3:a4:da:22:5d:
         dc:a2:c1:2b:1e:31:8a:af:80:30:d8:9c:44:29:2b:27:a7:df:
         53:7c:1b:9b:1e:72:f8:31:eb:88:ab:4b:46:0a:5e:96:08:3e:
         7f:ff:7b:6b:41:1f:6e:e0:e7:2f:26:4c:08:ef:85:93:06:d8:
         88:b6:a5:89:df:c9:29:65:80:93:59:8d:9c:9f:cb:81:26:21:
         cb:74:f2:bc:28:ec:74:71:ea:ca:01:19:58:22:13:5f:56:85:
         94:05:83:86:4c:b6:4b:ad:e6:9e:ff:25:e6:da:29:ce:d5:93:
         88:af:4b:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxgw85fVaJUaNwWWqvuq+iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MzY5ZGM1ZGE1ZTRlNzBjNzM1YjIzNTcwNGQ5ZWJjNTgy
NTkzNDkwHhcNMjMwMTAyMDgwNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2RjZjUzNWQ0YTQ1ZjE0OGI5ZmZjNTllMDhlMzUzMDM5YTg0NzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIKe/IAQE6xUObsNXUP9vvHSsRP+
sgw/ydPbg4kvo0upI0HDnr3NVIMj7jaqKNdwXtERL/06qfn0mIpfMxBBEra0gMIM
Ibt0JngqU/84jSZGeCTnzYsOfcPs3iEGWxUqJy3lXkFMJTSKpqx+yOEzZFbwe/Z3
/kyNDnd4FFs8idy9KsgRpq7VK8vWE54nX/R3sz9neY9qDA4lOkwo+CQMt1wpEh4s
zwrG9awsa5EhvRPVvO2vTaRpkZmOJohigpU3e1s3iC08gZmGtCdZj+88t195pCUX
+1v8pLDLs8B5XMvQtBtS0yOZ50m5lfdtezhorPPJ6Jejoz5gcOR8nlRYaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHPc9TXUpF8Ui5/8WeCONTA5qEdiMB8GA1UdIwQY
MBaAFEY2ncXaXk5wxzWyNXBNnrxYJZNJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmphZHhkcGVUbkRITmJJMWNFMmV2RmdsazBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9mZTY5YjItMGFiYi00ZTU1LThiMzgt
YTkxNjM0ZDJhODA4LzEvYzl6MU5kU2tYeFNMbl94WjRJNDFNRG1vUjJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9mZTY5YjItMGFiYi00ZTU1LThiMzgtYTkxNjM0ZDJhODA4
LzEvUmphZHhkcGVUbkRITmJJMWNFMmV2RmdsazBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwcvEMA0G
CSqGSIb3DQEBCwUAA4IBAQBuYBF3hsXkeQOugF5WTHBv3401oNJHscbvsvnzw/AF
fu1trRKoGDTGPaulKfPh/Tvk1ywlxGkn8Ps8kaS+GShtsnKOlGuHHR0Z0z7H8Di5
u5/hY/7spgOju9A84WbL//zfKXS+ma/EfzY+gWgfRRBb/4LSjyrkkbloHy+KQ3NM
fovI+EhiTcQaCP5Q86TaIl3cosErHjGKr4Aw2JxEKSsnp99TfBubHnL4MeuIq0tG
Cl6WCD5//3trQR9u4OcvJkwI74WTBtiItqWJ38kpZYCTWY2cn8uBJiHLdPK8KOx0
cerKARlYIhNfVoWUBYOGTLZLreae/yXm2inO1ZOIr0vR
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:39 2024 by rpki-client on console-fra.rpki-client.org