Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/kj6AdEjy9JOsvFqy0_xN1HRPuLE.roa
File:                     kj6AdEjy9JOsvFqy0_xN1HRPuLE.roa (raw, json)
Hash identifier:          jUjX+2h/logzyjjq5vcqEML6CvRnPftbOVORRISpPiU=
Subject key identifier:   92:3E:80:74:48:F2:F4:93:AC:BC:5A:B2:D3:FC:4D:D4:74:4F:B8:B1
Certificate issuer:       /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial:       0187B7DAD4C40FE057CCA779DB8D383C5955
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/kj6AdEjy9JOsvFqy0_xN1HRPuLE.roa
Signing time:             Tue 25 Apr 2023 09:59:44 +0000
ROA not before:           Tue 25 Apr 2023 09:59:44 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     394808
IP address blocks:        83.231.150.192/27 maxlen: 27

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 10:33:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:b7:da:d4:c4:0f:e0:57:cc:a7:79:db:8d:38:3c:59:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
        Validity
            Not Before: Apr 25 09:59:44 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=923e807448f2f493acbc5ab2d3fc4dd4744fb8b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:45:e5:4b:af:0d:8d:0c:7e:49:0e:17:33:53:
                    a9:5e:41:80:a6:86:ec:72:27:43:d0:31:0c:5e:97:
                    77:ac:4f:a7:c4:ef:ee:9b:89:66:77:6c:c4:e7:fa:
                    64:45:bd:c5:1d:03:e1:f2:2d:19:33:24:30:b2:a2:
                    95:d9:28:2b:68:41:bf:94:b6:8d:73:78:20:c3:ec:
                    91:88:6d:63:c0:3f:99:b7:35:3a:41:26:20:57:77:
                    dd:7a:0f:d2:40:7e:b0:e0:35:95:6b:94:3e:18:54:
                    54:de:c2:4a:89:26:d8:a6:95:11:d4:8b:e7:84:8d:
                    f0:e7:c5:be:74:84:54:c8:81:c3:2a:b3:e5:da:09:
                    5e:58:fd:ca:9c:28:1c:1c:91:57:d7:7e:94:1c:ee:
                    80:e7:19:8e:9a:9b:f7:1c:c4:65:30:83:62:f1:1a:
                    65:35:b9:61:d5:85:9c:f0:0a:d7:cb:a2:ab:c8:0c:
                    e1:ee:a6:92:92:24:bd:2a:68:46:b5:c5:23:61:40:
                    73:65:24:9a:e7:77:4c:5e:9a:fd:c4:b5:3d:d6:a2:
                    9d:2e:cf:fc:fd:61:ea:d7:d1:2c:a8:98:ad:35:7c:
                    91:32:9f:3f:c7:2a:77:7f:2a:77:ec:53:78:14:b7:
                    13:ab:dd:41:33:5c:d1:8d:0a:88:c6:d2:96:00:25:
                    60:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:3E:80:74:48:F2:F4:93:AC:BC:5A:B2:D3:FC:4D:D4:74:4F:B8:B1
            X509v3 Authority Key Identifier:
                keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/kj6AdEjy9JOsvFqy0_xN1HRPuLE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  83.231.150.192/27

    Signature Algorithm: sha256WithRSAEncryption
         14:b1:13:87:f2:82:bb:c4:01:a4:ed:39:b0:fe:07:59:83:fd:
         a5:81:ec:93:2e:0e:88:50:e2:aa:cd:10:72:d3:27:e6:ec:d8:
         62:ee:97:b8:f9:74:df:fa:84:6c:64:1e:bc:d3:75:5a:ca:ee:
         15:98:2a:08:95:3e:16:91:64:f7:26:9f:93:69:9f:94:0a:4a:
         1f:fa:f2:0f:29:98:9a:44:c5:48:eb:75:f6:15:ce:4e:41:8b:
         52:6c:0b:36:be:c2:42:eb:40:27:d3:76:18:cb:60:b0:87:c1:
         c8:fe:80:13:c9:8b:c2:67:b0:50:14:16:8d:f5:23:8a:57:a8:
         42:76:76:31:4d:04:ed:58:76:aa:e1:ea:3c:59:e0:be:3e:5b:
         64:69:54:6a:d8:c0:3e:f3:de:a0:d3:fd:6b:1e:19:24:3e:2d:
         b0:8e:96:08:d9:43:7b:66:f2:6f:0a:64:8c:f5:99:f0:9e:99:
         e7:08:a3:78:81:46:d1:37:ae:d7:e7:07:ad:da:8b:e8:e8:86:
         1b:9e:ad:9d:e3:cb:af:8a:ec:71:a7:e7:34:56:eb:aa:25:22:
         9e:08:f1:1b:ec:b5:5a:af:0d:7d:18:e7:56:e0:f6:88:a1:ac:
         e1:2d:c5:73:62:61:2a:0a:20:d8:99:e5:96:8d:52:22:25:09:
         6c:3e:29:07
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYe32tTED+BXzKd52404PFlVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNWEyOTIxZmJlYjhhNDQ4ZTdhZTFlYzVhMTFiOGFiODk4
ZDIyZmQwHhcNMjMwNDI1MDk1OTQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjNlODA3NDQ4ZjJmNDkzYWNiYzVhYjJkM2ZjNGRkNDc0NGZiOGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkXlS68NjQx+SQ4XM1OpXkGApobs
cidD0DEMXpd3rE+nxO/um4lmd2zE5/pkRb3FHQPh8i0ZMyQwsqKV2SgraEG/lLaN
c3ggw+yRiG1jwD+ZtzU6QSYgV3fdeg/SQH6w4DWVa5Q+GFRU3sJKiSbYppUR1Ivn
hI3w58W+dIRUyIHDKrPl2gleWP3KnCgcHJFX136UHO6A5xmOmpv3HMRlMINi8Rpl
Nblh1YWc8ArXy6KryAzh7qaSkiS9KmhGtcUjYUBzZSSa53dMXpr9xLU91qKdLs/8
/WHq19EsqJitNXyRMp8/xyp3fyp37FN4FLcTq91BM1zRjQqIxtKWACVgXwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFJI+gHRI8vSTrLxastP8TdR0T7ixMB8GA1UdIwQY
MBaAFE1aKSH764pEjnrh7FoRuKuJjSL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUt
NzgwYTI1Y2QwZGQ5LzEva2o2QWRFank5Sk9zdkZxeTBfeE4xSFJQdUxFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUtNzgwYTI1Y2QwZGQ5
LzEvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFU+eWwDAN
BgkqhkiG9w0BAQsFAAOCAQEAFLETh/KCu8QBpO05sP4HWYP9pYHsky4OiFDiqs0Q
ctMn5uzYYu6XuPl03/qEbGQevNN1WsruFZgqCJU+FpFk9yafk2mflApKH/ryDymY
mkTFSOt19hXOTkGLUmwLNr7CQutAJ9N2GMtgsIfByP6AE8mLwmewUBQWjfUjileo
QnZ2MU0E7Vh2quHqPFngvj5bZGlUatjAPvPeoNP9ax4ZJD4tsI6WCNlDe2bybwpk
jPWZ8J6Z5wijeIFG0Teu1+cHrdqL6OiGG56tnePLr4rscafnNFbrqiUingjxG+y1
Wq8NfRjnVuD2iKGs4S3Fc2JhKgog2Jnllo1SIiUJbD4pBw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:40 2024 by rpki-client on console-fra.rpki-client.org