Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/P_Y7pcNMZWOTUp-3jtYcnNbDBqM.roa
File:                     P_Y7pcNMZWOTUp-3jtYcnNbDBqM.roa (raw, json)
Hash identifier:          E6Re5urLsHQ8J7iA7Q9LHrLd+UqF0+lLp+O023El35I=
Subject key identifier:   3F:F6:3B:A5:C3:4C:65:63:93:52:9F:B7:8E:D6:1C:9C:D6:C3:06:A3
Certificate issuer:       /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial:       018572310AF179A668C06C2898AE64C235F6
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/P_Y7pcNMZWOTUp-3jtYcnNbDBqM.roa
Signing time:             Mon 02 Jan 2023 11:14:54 +0000
ROA not before:           Mon 02 Jan 2023 11:14:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     7029
IP address blocks:        85.237.92.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Fri 06 Jan 2023 09:05:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:31:0a:f1:79:a6:68:c0:6c:28:98:ae:64:c2:35:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
        Validity
            Not Before: Jan  2 11:14:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=3ff63ba5c34c656393529fb78ed61c9cd6c306a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f7:60:84:91:5f:45:5a:27:f3:19:2e:9d:8d:
                    78:31:e6:e2:ef:9f:91:ab:15:d1:87:ef:08:62:10:
                    9b:c7:bb:3c:be:61:51:b0:81:dd:7e:49:c3:a7:ae:
                    2c:c1:1d:ef:f3:dd:e2:7a:1e:21:e6:86:bd:31:8f:
                    64:c6:d3:c6:de:e3:65:ae:60:a7:4a:d8:3d:7b:27:
                    aa:c7:7f:8c:7c:c7:0b:08:63:e9:c0:c8:e4:5a:72:
                    da:f6:85:7a:ce:21:f7:d5:8e:b5:f9:88:13:28:d3:
                    fc:fa:e9:74:b8:55:5b:52:76:0c:06:44:a9:bd:db:
                    17:13:45:df:e0:50:31:8c:d9:9b:7d:22:54:70:8e:
                    fb:c4:db:f7:1b:e9:23:9f:0f:64:bf:d3:b9:ef:f9:
                    94:74:f7:93:96:12:ff:25:e5:6c:f4:d2:30:e6:1c:
                    0d:f9:20:4a:7f:7c:a3:84:07:0b:db:78:52:62:ee:
                    c5:b4:3b:6b:63:de:06:2a:8b:fd:5f:6c:94:71:28:
                    cb:5d:34:ee:bf:92:1b:b7:04:a3:28:a4:5e:64:a0:
                    80:e8:50:c9:0d:18:32:04:e8:c9:ff:47:8a:02:68:
                    8f:b7:60:8a:00:66:63:40:91:b8:85:ee:7f:71:ff:
                    c0:ea:19:5d:e8:03:49:24:e2:5a:6d:7b:29:0a:bf:
                    ba:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F6:3B:A5:C3:4C:65:63:93:52:9F:B7:8E:D6:1C:9C:D6:C3:06:A3
            X509v3 Authority Key Identifier:
                keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/P_Y7pcNMZWOTUp-3jtYcnNbDBqM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.237.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0b:14:62:49:14:51:04:a2:b2:82:9c:17:42:d2:25:0f:15:03:
         89:12:8a:7e:71:61:0d:be:89:c9:2e:aa:6f:3f:98:5c:a3:4c:
         05:b9:04:eb:32:dc:f7:b4:52:fd:9a:2d:58:55:5d:0b:f8:f2:
         ba:c9:cc:fe:9d:a3:a7:ab:ae:c7:99:de:b1:b5:c5:de:97:6d:
         ce:ef:79:c6:6e:47:bd:6f:5d:c0:0d:3c:0c:bf:17:da:b8:92:
         e4:83:64:0b:5a:ee:7b:5c:04:e3:69:4d:fe:01:42:5d:a4:db:
         80:54:5a:71:5d:9f:9f:1b:c2:2f:4f:a1:27:07:da:e0:16:bf:
         42:ec:20:b4:10:8b:54:44:4f:ea:79:41:4f:c7:4f:3f:1b:6d:
         89:00:5a:6a:bf:1c:e5:15:1b:46:03:f2:c8:b0:d5:8a:17:6f:
         49:e1:d8:52:d8:56:61:f2:c5:a9:e5:f2:48:74:6e:49:92:07:
         65:72:37:58:e3:dc:0e:63:a6:2a:d4:03:d6:55:86:06:1e:a9:
         00:64:49:21:e6:01:49:dc:d2:51:10:d4:af:d1:82:3a:8f:09:
         83:87:99:56:fd:b7:0c:42:e0:ae:50:bd:5b:4a:0c:8c:46:f5:
         be:ba:de:da:f8:56:37:7e:a1:82:16:9d:5f:45:72:53:d2:4d:
         70:33:52:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyMQrxeaZowGwomK5kwjX2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj
YzE5NDEwHhcNMjMwMTAyMTExNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmY2M2JhNWMzNGM2NTYzOTM1MjlmYjc4ZWQ2MWM5Y2Q2YzMwNmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/dghJFfRVon8xkunY14Mebi75+R
qxXRh+8IYhCbx7s8vmFRsIHdfknDp64swR3v893ieh4h5oa9MY9kxtPG3uNlrmCn
Stg9eyeqx3+MfMcLCGPpwMjkWnLa9oV6ziH31Y61+YgTKNP8+ul0uFVbUnYMBkSp
vdsXE0Xf4FAxjNmbfSJUcI77xNv3G+kjnw9kv9O57/mUdPeTlhL/JeVs9NIw5hwN
+SBKf3yjhAcL23hSYu7FtDtrY94GKov9X2yUcSjLXTTuv5IbtwSjKKReZKCA6FDJ
DRgyBOjJ/0eKAmiPt2CKAGZjQJG4he5/cf/A6hld6ANJJOJabXspCr+69wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD/2O6XDTGVjk1Kft47WHJzWwwajMB8GA1UdIwQY
MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt
NmZlNGQ4ZmVkMTYwLzEvUF9ZN3BjTk1aV09UVXAtM2p0WWNuTmJEQnFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw
LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVe1cMA0G
CSqGSIb3DQEBCwUAA4IBAQALFGJJFFEEorKCnBdC0iUPFQOJEop+cWENvonJLqpv
P5hco0wFuQTrMtz3tFL9mi1YVV0L+PK6ycz+naOnq67Hmd6xtcXel23O73nGbke9
b13ADTwMvxfauJLkg2QLWu57XATjaU3+AUJdpNuAVFpxXZ+fG8IvT6EnB9rgFr9C
7CC0EItURE/qeUFPx08/G22JAFpqvxzlFRtGA/LIsNWKF29J4dhS2FZh8sWp5fJI
dG5JkgdlcjdY49wOY6Yq1APWVYYGHqkAZEkh5gFJ3NJRENSv0YI6jwmDh5lW/bcM
QuCuUL1bSgyMRvW+ut7a+FY3fqGCFp1fRXJT0k1wM1KX
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-fra.rpki-client.org