Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/b0TyuQBe2A5V-g3w65Ej00SjF5Q.roa
File:                     b0TyuQBe2A5V-g3w65Ej00SjF5Q.roa (raw, json)
Hash identifier:          v/By56gYHKOIMu2CiUEZHZVu+VeFRdYqHrvCSX4PTv4=
Subject key identifier:   6F:44:F2:B9:00:5E:D8:0E:55:FA:0D:F0:EB:91:23:D3:44:A3:17:94
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       018C389D80DFF687480399DF6F2C74914823
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/b0TyuQBe2A5V-g3w65Ej00SjF5Q.roa
Signing time:             Tue 05 Dec 2023 06:14:55 +0000
ROA not before:           Tue 05 Dec 2023 06:14:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     201814
IP address blocks:        194.180.49.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:29:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8c:38:9d:80:df:f6:87:48:03:99:df:6f:2c:74:91:48:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Dec  5 06:14:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=6f44f2b9005ed80e55fa0df0eb9123d344a31794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:67:65:9b:c7:fa:ad:4d:07:26:4a:64:d8:93:
                    60:f2:19:5f:a9:7f:2a:7c:e5:ea:8a:6e:98:39:97:
                    01:05:69:06:9f:49:9d:9b:3a:92:45:fd:06:20:0b:
                    88:9a:93:98:81:69:5c:c1:f7:ac:7a:b3:ac:57:52:
                    a5:71:68:4e:4a:58:b5:b6:0a:a2:9b:ac:0c:4b:73:
                    1d:e8:73:6f:a6:03:47:2d:10:12:d6:39:58:93:40:
                    28:da:12:10:80:2e:52:6b:ab:01:13:60:8b:f4:fb:
                    31:aa:d3:61:a4:52:8b:a3:63:53:b9:1d:a6:d8:d4:
                    5f:97:9d:49:da:6a:c3:7f:e4:ee:5d:24:27:4c:e5:
                    d0:7c:11:42:bb:e2:55:05:60:0b:77:a1:4f:e6:38:
                    5e:50:72:fa:26:69:5a:2e:03:56:6e:93:15:57:ec:
                    cb:5e:15:0b:e9:8b:0e:23:d0:c4:23:d0:c0:17:4e:
                    7b:30:32:12:c4:38:18:72:90:ab:a9:9a:2a:8e:75:
                    4b:a0:04:21:dc:08:e3:55:89:d0:5b:ed:a0:3f:95:
                    ec:88:43:9a:62:c6:c0:43:5d:5d:d4:f9:c2:ff:9b:
                    5c:15:5b:5e:fa:e1:f4:ee:db:16:28:52:12:98:f6:
                    63:4f:ce:18:0b:86:dc:2e:25:5d:4d:04:b6:d2:f9:
                    a5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:44:F2:B9:00:5E:D8:0E:55:FA:0D:F0:EB:91:23:D3:44:A3:17:94
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/b0TyuQBe2A5V-g3w65Ej00SjF5Q.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.180.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:be:38:d0:b3:92:cf:3d:12:a3:40:f9:94:ae:a2:23:41:21:
         c7:e8:bd:b6:21:d1:26:36:15:da:eb:e8:8b:b6:22:de:1a:f6:
         1a:3d:03:d0:1d:78:9d:aa:9b:70:b9:c0:05:ee:32:ca:4a:4f:
         7c:80:19:58:5e:f1:44:16:b9:b8:b4:24:8b:8e:d8:3e:63:16:
         a4:85:e5:6a:55:a7:56:32:cd:17:bf:1b:b9:2c:ae:ec:0d:a9:
         7e:cb:c8:e8:00:5b:9c:cb:4b:6b:e5:2e:72:6a:3e:f6:15:27:
         eb:17:fe:70:bf:f6:78:50:8a:07:58:f5:ca:3e:b3:a4:9d:4d:
         27:6f:52:a8:00:df:2c:8e:81:44:b9:82:2d:fa:31:ab:90:56:
         db:cb:a2:a2:c6:41:94:79:fd:f9:a7:d6:7a:69:32:92:a5:7d:
         4f:cc:f1:10:7d:2a:f6:50:66:23:ac:ae:02:82:52:d1:6f:3c:
         d0:7b:eb:e8:5c:1d:23:ca:57:6a:d7:81:51:4c:4e:8a:f2:5a:
         ce:76:c7:b0:e6:9d:87:07:a9:d0:2a:55:53:74:e7:f8:dd:a3:
         5d:e8:2c:03:9e:e0:c7:f8:66:be:43:0c:96:62:fc:10:71:08:
         a7:7b:4a:9e:1e:a7:f7:45:ed:96:0b:89:53:ed:33:ec:d4:ce:
         50:f7:20:1f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYw4nYDf9odIA5nfbyx0kUgjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMxMjA1MDYxNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjQ0ZjJiOTAwNWVkODBlNTVmYTBkZjBlYjkxMjNkMzQ0YTMxNzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Wdlm8f6rU0HJkpk2JNg8hlfqX8q
fOXqim6YOZcBBWkGn0mdmzqSRf0GIAuImpOYgWlcwfeserOsV1KlcWhOSli1tgqi
m6wMS3Md6HNvpgNHLRAS1jlYk0Ao2hIQgC5Sa6sBE2CL9PsxqtNhpFKLo2NTuR2m
2NRfl51J2mrDf+TuXSQnTOXQfBFCu+JVBWALd6FP5jheUHL6JmlaLgNWbpMVV+zL
XhUL6YsOI9DEI9DAF057MDISxDgYcpCrqZoqjnVLoAQh3AjjVYnQW+2gP5XsiEOa
YsbAQ11d1PnC/5tcFVte+uH07tsWKFISmPZjT84YC4bcLiVdTQS20vmlLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG9E8rkAXtgOVfoN8OuRI9NEoxeUMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvYjBUeXVRQmUyQTVWLWczdzY1RWowMFNqRjVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwrQxMA0G
CSqGSIb3DQEBCwUAA4IBAQAKvjjQs5LPPRKjQPmUrqIjQSHH6L22IdEmNhXa6+iL
tiLeGvYaPQPQHXidqptwucAF7jLKSk98gBlYXvFEFrm4tCSLjtg+YxakheVqVadW
Ms0Xvxu5LK7sDal+y8joAFucy0tr5S5yaj72FSfrF/5wv/Z4UIoHWPXKPrOknU0n
b1KoAN8sjoFEuYIt+jGrkFbby6KixkGUef35p9Z6aTKSpX1PzPEQfSr2UGYjrK4C
glLRbzzQe+voXB0jyldq14FRTE6K8lrOdsew5p2HB6nQKlVTdOf43aNd6CwDnuDH
+Ga+QwyWYvwQcQine0qeHqf3Re2WC4lT7TPs1M5Q9yAf
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:37 2024 by rpki-client on console-ams.rpki-client.org