Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vEwRyq8j9FLxHZOMI_YHgJ1ALLw.roa
File:                     vEwRyq8j9FLxHZOMI_YHgJ1ALLw.roa (raw, json)
Hash identifier:          0SxxgtCokN6wjNacFhCG0RPbOe88Xs9/5kkY6yp6LX0=
Subject key identifier:   BC:4C:11:CA:AF:23:F4:52:F1:1D:93:8C:23:F6:07:80:9D:40:2C:BC
Certificate issuer:       /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial:       0188D306954B283231572F41224BB1A3EB83
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vEwRyq8j9FLxHZOMI_YHgJ1ALLw.roa
Signing time:             Mon 19 Jun 2023 09:40:04 +0000
ROA not before:           Mon 19 Jun 2023 09:40:04 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     198802
IP address blocks:        193.108.115.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jul 2023 09:29:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:d3:06:95:4b:28:32:31:57:2f:41:22:4b:b1:a3:eb:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
        Validity
            Not Before: Jun 19 09:40:04 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bc4c11caaf23f452f11d938c23f607809d402cbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7e:90:3c:bc:b9:7f:ca:4f:71:97:f9:80:11:
                    a9:5f:f4:84:22:02:9b:ac:40:64:5d:71:9a:7b:f5:
                    d5:5e:f7:09:86:d4:0a:a3:35:6f:3d:42:f1:60:23:
                    c7:4f:e3:78:8a:d0:db:ab:92:58:cb:a4:a1:ae:ab:
                    94:11:49:cf:7f:cf:18:a6:3f:a4:9e:96:b9:63:77:
                    8f:c4:33:4e:99:21:c1:d8:13:2c:bf:ca:17:8e:db:
                    d1:e3:5f:6a:df:21:44:dc:80:0f:d3:39:4a:9e:ef:
                    27:94:cd:60:30:af:ae:5e:18:8d:ea:c3:a3:e1:b6:
                    54:f2:bc:a1:a3:50:22:c7:bf:b1:8f:6a:55:5a:bd:
                    58:6b:1b:db:1b:55:e7:ac:a5:95:bd:91:ce:70:10:
                    f5:4a:a0:a4:ad:98:d5:72:a2:e2:9b:9d:f9:e2:be:
                    50:2c:99:9b:48:66:ab:f6:e9:02:02:23:75:e1:c8:
                    9b:d2:98:35:e8:df:60:9a:23:60:79:d6:f4:8c:b1:
                    43:40:be:68:91:4c:a2:b1:a1:05:33:bc:77:28:ef:
                    f8:be:ce:57:9a:ac:2d:d3:71:43:dc:4c:6a:00:7a:
                    94:0a:a6:5e:1e:0d:32:b2:fa:da:cf:9d:c8:26:9c:
                    0f:be:f1:81:a8:6f:5b:f3:ea:95:55:17:e3:ab:80:
                    bc:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:4C:11:CA:AF:23:F4:52:F1:1D:93:8C:23:F6:07:80:9D:40:2C:BC
            X509v3 Authority Key Identifier:
                keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vEwRyq8j9FLxHZOMI_YHgJ1ALLw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.108.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:74:66:70:8a:f4:b9:99:27:25:be:49:0d:73:f7:1b:7f:54:
         2a:0b:61:10:b3:86:6d:77:b7:0d:20:52:d6:78:1b:eb:59:e8:
         f1:26:24:01:28:82:24:a4:dc:6a:5c:39:f6:1f:de:fc:08:da:
         4c:62:63:08:7b:10:ec:bf:c3:2d:2b:5b:75:17:84:65:1a:c5:
         c9:6b:39:80:a3:25:ae:7f:91:54:48:71:96:0e:20:3c:b3:d8:
         37:e2:b0:e2:79:03:98:2d:e2:3a:bc:fe:d0:aa:bb:45:b9:04:
         36:e2:92:88:7c:b1:e1:79:d1:0e:ba:40:83:17:b3:5e:96:b5:
         20:29:a8:44:2b:dd:f1:79:38:b6:f5:4b:e7:c3:38:df:7f:85:
         54:6f:05:5f:f2:22:fc:54:11:e3:28:2d:17:68:55:ac:1a:38:
         69:aa:ac:bd:d4:1e:94:50:a0:90:b4:8c:fe:fb:70:63:e2:61:
         e3:e4:08:7b:42:49:f8:2b:f6:cf:22:93:60:d6:03:e2:df:c6:
         55:8c:bb:48:ae:0f:e0:fb:76:1b:04:f5:3c:6a:e2:68:aa:d1:
         d6:fb:c9:cf:4d:1e:79:88:c9:e0:69:87:c8:de:8e:cc:67:23:
         27:82:f1:c5:99:fc:73:8d:28:02:b5:4f:05:4b:12:1a:fc:f3:
         58:3c:81:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYjTBpVLKDIxVy9BIkuxo+uDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNjE5MDk0MDA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzRjMTFjYWFmMjNmNDUyZjExZDkzOGMyM2Y2MDc4MDlkNDAyY2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmH6QPLy5f8pPcZf5gBGpX/SEIgKb
rEBkXXGae/XVXvcJhtQKozVvPULxYCPHT+N4itDbq5JYy6ShrquUEUnPf88Ypj+k
npa5Y3ePxDNOmSHB2BMsv8oXjtvR419q3yFE3IAP0zlKnu8nlM1gMK+uXhiN6sOj
4bZU8ryho1Aix7+xj2pVWr1YaxvbG1XnrKWVvZHOcBD1SqCkrZjVcqLim5354r5Q
LJmbSGar9ukCAiN14cib0pg16N9gmiNgedb0jLFDQL5okUyisaEFM7x3KO/4vs5X
mqwt03FD3ExqAHqUCqZeHg0ysvraz53IJpwPvvGBqG9b8+qVVRfjq4C8vwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLxMEcqvI/RS8R2TjCP2B4CdQCy8MB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvdkV3UnlxOGo5Rkx4SFpPTUlfWUhnSjFBTEx3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWxzMA0G
CSqGSIb3DQEBCwUAA4IBAQB1dGZwivS5mSclvkkNc/cbf1QqC2EQs4Ztd7cNIFLW
eBvrWejxJiQBKIIkpNxqXDn2H978CNpMYmMIexDsv8MtK1t1F4RlGsXJazmAoyWu
f5FUSHGWDiA8s9g34rDieQOYLeI6vP7QqrtFuQQ24pKIfLHhedEOukCDF7NelrUg
KahEK93xeTi29Uvnwzjff4VUbwVf8iL8VBHjKC0XaFWsGjhpqqy91B6UUKCQtIz+
+3Bj4mHj5Ah7Qkn4K/bPIpNg1gPi38ZVjLtIrg/g+3YbBPU8auJoqtHW+8nPTR55
iMngaYfI3o7MZyMngvHFmfxzjSgCtU8FSxIa/PNYPIH6
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:49:50 2024 by rpki-client on console-ams.rpki-client.org