Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/z1TWjLtnOFI3_Wjx31UEU_lInrY.roa
File:                     z1TWjLtnOFI3_Wjx31UEU_lInrY.roa (raw, json)
Hash identifier:          fXwVx1zEG4zZ+nuSsikd6Kype3PBGgmdB5wM5ii4YQg=
Subject key identifier:   CF:54:D6:8C:BB:67:38:52:37:FD:68:F1:DF:55:04:53:F9:48:9E:B6
Certificate issuer:       /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial:       018D5F11352C44074E42F692AADC360CDA4E
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/z1TWjLtnOFI3_Wjx31UEU_lInrY.roa
Signing time:             Wed 31 Jan 2024 10:29:39 +0000
ROA not before:           Wed 31 Jan 2024 10:29:39 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     834
IP address blocks:        85.237.80.0/22 maxlen: 24

Validation:               Failed, certificate revoked on Sun 14 Apr 2024 18:25:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:5f:11:35:2c:44:07:4e:42:f6:92:aa:dc:36:0c:da:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
        Validity
            Not Before: Jan 31 10:29:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=cf54d68cbb67385237fd68f1df550453f9489eb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d4:2a:84:d8:69:24:c6:ae:8e:d7:b4:22:e3:
                    97:8a:b6:76:c2:7b:bc:6d:95:ed:78:3e:90:24:d5:
                    c9:45:10:02:76:cb:ba:3e:38:27:39:d4:49:3f:3f:
                    ad:d0:9a:75:b3:d4:a3:0e:26:85:51:5d:a9:fe:d2:
                    82:75:63:47:2c:2b:c0:51:fb:5b:fb:65:e8:7b:54:
                    a9:d3:30:ec:0d:a7:e7:c9:6e:0e:2a:84:33:5b:32:
                    b2:12:d7:5c:72:ae:d8:aa:8c:3d:2a:58:a3:79:9b:
                    57:22:d2:d2:3b:71:cd:1d:35:d3:51:c1:85:d7:cb:
                    44:85:f8:41:fa:b4:31:ec:f3:7b:87:bd:b7:e7:86:
                    97:1d:28:e5:61:ae:52:a9:56:93:ac:19:e2:62:13:
                    1b:28:5d:aa:a8:e0:3a:de:84:32:58:00:29:9a:9e:
                    98:f8:83:15:bc:7e:31:78:e0:c5:99:41:73:69:e6:
                    59:f4:81:9b:83:fd:fb:2c:97:35:3e:01:9a:04:f2:
                    53:8e:f1:be:c7:dd:2b:af:96:ce:35:ff:75:9a:b8:
                    0d:10:04:e5:2c:22:3f:25:3f:9e:53:05:79:4f:f1:
                    34:16:f1:5e:46:44:f0:54:43:b5:c2:2e:65:8d:24:
                    74:fa:fb:ba:52:89:cb:c5:16:10:4b:ef:65:f5:9e:
                    97:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:54:D6:8C:BB:67:38:52:37:FD:68:F1:DF:55:04:53:F9:48:9E:B6
            X509v3 Authority Key Identifier:
                keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/z1TWjLtnOFI3_Wjx31UEU_lInrY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.237.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:62:03:59:0e:0a:db:48:64:ef:41:3c:d9:60:0f:53:02:24:
         52:cf:1b:a4:9b:bc:f0:09:8b:d7:cd:d4:7a:14:d3:06:38:e8:
         ea:7c:24:f6:c2:91:e0:0b:83:c2:84:70:c2:d6:4d:8f:06:76:
         57:45:93:83:f0:e9:12:81:a2:5b:55:f6:01:bf:2b:72:94:57:
         08:3c:ca:d8:93:14:16:d7:b5:58:36:06:bd:8c:4c:9e:27:47:
         8c:bb:9c:ce:15:21:49:f5:4f:d5:7c:56:db:8b:74:5a:13:04:
         96:a5:65:ac:fe:49:19:0f:ee:71:2b:80:c5:c7:9e:c9:f2:20:
         11:b2:97:c8:be:6b:ff:c0:15:a4:98:3c:15:24:e7:b6:b5:71:
         08:b3:4a:5c:7a:9c:e0:e5:d7:6c:a3:95:0b:cd:c0:b6:f6:69:
         e0:07:53:49:9f:d0:0b:e4:9b:f5:be:e7:2d:00:41:33:e9:71:
         79:24:15:bd:9c:1f:fd:4e:c8:e0:34:00:e4:47:9c:3a:65:88:
         45:ae:2c:be:78:c3:db:8b:a2:2e:dd:d0:a1:b1:d3:03:c3:82:
         18:77:59:7b:ee:01:e0:b1:ca:b3:e0:1d:bf:24:40:1e:02:99:
         f2:a6:4a:41:27:6a:fc:01:42:04:94:ae:2a:ed:7a:08:17:78:
         df:ba:e2:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY1fETUsRAdOQvaSqtw2DNpOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj
YzE5NDEwHhcNMjQwMTMxMTAyOTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjU0ZDY4Y2JiNjczODUyMzdmZDY4ZjFkZjU1MDQ1M2Y5NDg5ZWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9QqhNhpJMaujte0IuOXirZ2wnu8
bZXteD6QJNXJRRACdsu6PjgnOdRJPz+t0Jp1s9SjDiaFUV2p/tKCdWNHLCvAUftb
+2Xoe1Sp0zDsDafnyW4OKoQzWzKyEtdccq7Yqow9KlijeZtXItLSO3HNHTXTUcGF
18tEhfhB+rQx7PN7h72354aXHSjlYa5SqVaTrBniYhMbKF2qqOA63oQyWAApmp6Y
+IMVvH4xeODFmUFzaeZZ9IGbg/37LJc1PgGaBPJTjvG+x90rr5bONf91mrgNEATl
LCI/JT+eUwV5T/E0FvFeRkTwVEO1wi5ljSR0+vu6UonLxRYQS+9l9Z6XXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM9U1oy7ZzhSN/1o8d9VBFP5SJ62MB8GA1UdIwQY
MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt
NmZlNGQ4ZmVkMTYwLzEvejFUV2pMdG5PRkkzX1dqeDMxVUVVX2xJbnJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw
LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVe1QMA0G
CSqGSIb3DQEBCwUAA4IBAQAuYgNZDgrbSGTvQTzZYA9TAiRSzxukm7zwCYvXzdR6
FNMGOOjqfCT2wpHgC4PChHDC1k2PBnZXRZOD8OkSgaJbVfYBvytylFcIPMrYkxQW
17VYNga9jEyeJ0eMu5zOFSFJ9U/VfFbbi3RaEwSWpWWs/kkZD+5xK4DFx57J8iAR
spfIvmv/wBWkmDwVJOe2tXEIs0pcepzg5ddso5ULzcC29mngB1NJn9AL5Jv1vuct
AEEz6XF5JBW9nB/9TsjgNADkR5w6ZYhFriy+eMPbi6Iu3dChsdMDw4IYd1l77gHg
scqz4B2/JEAeApnypkpBJ2r8AUIElK4q7XoIF3jfuuJN
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-fra.rpki-client.org