Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/E_FQ5LIxJSjj3zjI8FkHz2_C4ko.roa
File:                     E_FQ5LIxJSjj3zjI8FkHz2_C4ko.roa (raw, json)
Hash identifier:          1HsxzgfipOLqW1Ro/KBSR5YnKHPGIA42el/OVF5JdtI=
Subject key identifier:   13:F1:50:E4:B2:31:25:28:E3:DF:38:C8:F0:59:07:CF:6F:C2:E2:4A
Certificate issuer:       /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial:       0187B7DACFA85FFD55B567F2406A07B60766
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/E_FQ5LIxJSjj3zjI8FkHz2_C4ko.roa
Signing time:             Tue 25 Apr 2023 09:59:43 +0000
ROA not before:           Tue 25 Apr 2023 09:59:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     46746
IP address blocks:        82.112.107.0/28 maxlen: 28

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 10:33:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:b7:da:cf:a8:5f:fd:55:b5:67:f2:40:6a:07:b6:07:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
        Validity
            Not Before: Apr 25 09:59:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=13f150e4b2312528e3df38c8f05907cf6fc2e24a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:07:34:46:d4:be:59:b1:b6:c2:31:12:ab:10:
                    d9:c5:cf:58:57:d4:32:ec:b1:11:81:14:31:51:09:
                    df:ed:e1:66:74:ec:9e:11:bc:32:b0:35:25:8f:fd:
                    9e:7b:2a:a1:e3:91:d6:54:86:07:5c:5c:1e:17:e9:
                    b4:c4:61:12:6c:c8:12:c8:84:75:cd:75:f0:1e:4a:
                    cf:b3:af:03:42:fe:75:ae:f4:36:aa:01:b3:92:be:
                    c1:78:31:d5:e6:1c:e8:c9:b9:b9:d1:66:3b:67:03:
                    56:15:97:b8:9b:bc:c9:fc:15:8d:40:9a:53:35:e8:
                    bc:2c:73:b7:d6:26:cb:e3:e9:cc:c3:2f:ab:91:3e:
                    7e:54:b5:23:fe:e0:49:b3:99:f5:2d:46:3f:a6:11:
                    b7:41:b2:45:c0:1b:56:e3:8c:84:75:94:42:91:ac:
                    a6:fa:e4:87:53:82:7b:5a:e0:4a:fd:7d:a9:73:6f:
                    d5:b2:36:a5:50:71:97:e6:85:a8:35:ca:e2:68:d5:
                    19:0a:f4:dc:12:d8:b8:3c:4b:bf:69:a2:ee:d9:2c:
                    56:8a:87:2c:43:53:05:25:97:eb:0a:18:67:59:66:
                    47:e1:98:11:c3:3d:db:e7:65:77:65:33:9c:bb:4a:
                    9c:9a:ab:33:4d:ac:15:98:ad:8c:a3:b5:23:f3:63:
                    64:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F1:50:E4:B2:31:25:28:E3:DF:38:C8:F0:59:07:CF:6F:C2:E2:4A
            X509v3 Authority Key Identifier:
                keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/E_FQ5LIxJSjj3zjI8FkHz2_C4ko.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  82.112.107.0/28

    Signature Algorithm: sha256WithRSAEncryption
         b1:81:ee:87:f9:67:05:6a:6c:3f:8f:6f:4d:2f:49:83:69:ae:
         f3:4c:c1:9e:b6:93:f3:59:af:54:db:07:a1:52:ee:e1:ae:56:
         e2:b6:0d:b1:ea:79:53:77:ce:1a:e5:fd:08:14:e9:a7:01:dd:
         5e:b0:ef:02:f3:74:a0:82:18:3b:f7:71:4f:00:82:35:66:53:
         9d:24:ae:a2:d9:29:f1:ad:59:a6:3e:80:34:ef:8f:f2:c8:2b:
         a4:c9:d6:66:6a:9a:ec:86:59:14:b0:0c:81:38:7a:78:58:2a:
         41:30:ee:7d:d1:71:eb:7f:7e:67:fd:b9:db:da:66:40:4b:4d:
         80:72:43:42:68:72:ba:77:97:f1:7a:e8:7b:f8:09:91:68:93:
         b1:88:25:ef:bf:7b:76:0f:16:d1:4c:83:95:ba:c2:e5:18:83:
         de:5c:73:e2:92:bf:1d:07:df:66:51:b2:89:9b:98:18:b0:0c:
         9c:dc:dd:28:15:ce:c5:90:a3:cf:4c:16:ad:9e:cf:55:6e:0c:
         de:5c:8f:a5:bb:8e:c6:b2:89:b3:58:09:9a:c8:c8:69:84:e8:
         7f:84:0b:93:cc:36:b0:74:c0:a9:ec:7e:66:6c:31:ab:bc:46:
         47:42:b1:fe:cf:08:24:45:0a:da:5e:98:34:fc:30:a2:14:73:
         cd:81:3d:b2
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYe32s+oX/1VtWfyQGoHtgdmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNWEyOTIxZmJlYjhhNDQ4ZTdhZTFlYzVhMTFiOGFiODk4
ZDIyZmQwHhcNMjMwNDI1MDk1OTQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2YxNTBlNGIyMzEyNTI4ZTNkZjM4YzhmMDU5MDdjZjZmYzJlMjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwc0RtS+WbG2wjESqxDZxc9YV9Qy
7LERgRQxUQnf7eFmdOyeEbwysDUlj/2eeyqh45HWVIYHXFweF+m0xGESbMgSyIR1
zXXwHkrPs68DQv51rvQ2qgGzkr7BeDHV5hzoybm50WY7ZwNWFZe4m7zJ/BWNQJpT
Nei8LHO31ibL4+nMwy+rkT5+VLUj/uBJs5n1LUY/phG3QbJFwBtW44yEdZRCkaym
+uSHU4J7WuBK/X2pc2/VsjalUHGX5oWoNcriaNUZCvTcEti4PEu/aaLu2SxWiocs
Q1MFJZfrChhnWWZH4ZgRwz3b52V3ZTOcu0qcmqszTawVmK2Mo7Uj82Nk6QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFBPxUOSyMSUo4984yPBZB89vwuJKMB8GA1UdIwQY
MBaAFE1aKSH764pEjnrh7FoRuKuJjSL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUt
NzgwYTI1Y2QwZGQ5LzEvRV9GUTVMSXhKU2pqM3pqSThGa0h6Ml9DNGtvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUtNzgwYTI1Y2QwZGQ5
LzEvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEUnBrADAN
BgkqhkiG9w0BAQsFAAOCAQEAsYHuh/lnBWpsP49vTS9Jg2mu80zBnraT81mvVNsH
oVLu4a5W4rYNsep5U3fOGuX9CBTppwHdXrDvAvN0oIIYO/dxTwCCNWZTnSSuotkp
8a1Zpj6ANO+P8sgrpMnWZmqa7IZZFLAMgTh6eFgqQTDufdFx639+Z/2529pmQEtN
gHJDQmhyuneX8Xroe/gJkWiTsYgl7797dg8W0UyDlbrC5RiD3lxz4pK/HQffZlGy
iZuYGLAMnNzdKBXOxZCjz0wWrZ7PVW4M3lyPpbuOxrKJs1gJmsjIaYTof4QLk8w2
sHTAqex+Zmwxq7xGR0Kx/s8IJEUK2l6YNPwwohRzzYE9sg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:40 2024 by rpki-client on console-fra.rpki-client.org