Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mDYaWE0B79kG_GhpD5HdK-RC-A8.roa
File:                     mDYaWE0B79kG_GhpD5HdK-RC-A8.roa (raw, json)
Hash identifier:          QoUXB3JQ/u9C/MG2aAePOevMpQ+Zc9EOo0wDwR8K31c=
Subject key identifier:   98:36:1A:58:4D:01:EF:D9:06:FC:68:69:0F:91:DD:2B:E4:42:F8:0F
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       018D0C5829E061D4996DE9B5483AB26359FB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mDYaWE0B79kG_GhpD5HdK-RC-A8.roa
Signing time:             Mon 15 Jan 2024 08:58:40 +0000
ROA not before:           Mon 15 Jan 2024 08:58:40 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     0
IP address blocks:        185.218.84.0/22 maxlen: 24
                          178.215.224.0/24 maxlen: 24
                          178.215.226.0/24 maxlen: 24
                          94.156.239.0/24 maxlen: 24
                          178.215.236.0/24 maxlen: 24
                          45.12.255.0/24 maxlen: 24
                          171.22.72.0/22 maxlen: 24
                          185.252.176.0/24 maxlen: 24
                          147.78.101.0/24 maxlen: 24
                          147.78.102.0/24 maxlen: 24
                          45.84.89.0/24 maxlen: 24
                          194.55.186.0/24 maxlen: 24
                          185.226.173.0/24 maxlen: 24
                          185.226.175.0/24 maxlen: 24
                          92.119.196.0/23 maxlen: 24
                          185.216.84.0/22 maxlen: 24
                          45.88.90.0/24 maxlen: 24
                          87.121.45.0/24 maxlen: 24
                          87.120.87.0/24 maxlen: 24
                          94.154.162.0/23 maxlen: 24
                          94.154.161.0/24 maxlen: 24
                          94.154.172.0/24 maxlen: 24
                          87.121.221.0/24 maxlen: 24
                          45.151.89.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 15 Jan 2024 12:56:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:0c:58:29:e0:61:d4:99:6d:e9:b5:48:3a:b2:63:59:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Jan 15 08:58:40 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=98361a584d01efd906fc68690f91dd2be442f80f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:45:5e:87:ed:f8:c7:43:85:96:b9:17:f4:4e:
                    b7:e2:43:05:c0:41:c7:8d:6c:b8:b5:ce:22:f3:5d:
                    d5:6b:75:d0:c6:8c:a4:7e:f9:2f:0c:00:bb:02:d8:
                    48:ce:9a:d5:db:69:e9:c4:31:5a:8f:14:0c:6f:9a:
                    3c:e5:f2:9b:ec:ee:32:10:20:e8:a4:7e:17:f1:be:
                    25:62:e3:ab:fd:e7:77:6c:13:c6:f7:d2:c1:bd:d1:
                    84:aa:79:86:3e:f3:7a:48:a9:fe:77:66:3f:58:c6:
                    4f:3d:28:a8:37:fd:38:14:c4:77:5e:63:de:34:a5:
                    77:09:01:db:68:7a:b3:da:e4:55:9e:fb:55:9c:66:
                    40:d9:a3:d1:21:80:53:2b:cf:e6:0d:f2:36:6b:da:
                    d6:c4:34:ad:c0:36:b6:e4:a2:da:d1:00:5c:79:de:
                    9f:fc:78:9c:97:c8:67:37:0c:40:ba:97:b2:1e:e8:
                    50:25:e7:2f:75:d9:a5:b2:ab:2b:5d:53:70:e6:aa:
                    81:c3:de:7a:6e:73:c3:fa:3d:cf:2a:31:86:01:ed:
                    52:cc:df:17:21:db:c7:07:82:c7:16:03:2a:8e:64:
                    af:58:b3:83:59:04:72:c7:0b:6f:81:a0:b6:a3:44:
                    3a:a3:f4:85:34:2c:98:21:69:95:ea:26:66:2b:a2:
                    2f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:36:1A:58:4D:01:EF:D9:06:FC:68:69:0F:91:DD:2B:E4:42:F8:0F
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mDYaWE0B79kG_GhpD5HdK-RC-A8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.12.255.0/24
                  45.84.89.0/24
                  45.88.90.0/24
                  45.151.89.0/24
                  87.120.87.0/24
                  87.121.45.0/24
                  87.121.221.0/24
                  92.119.196.0/23
                  94.154.161.0-94.154.163.255
                  94.154.172.0/24
                  94.156.239.0/24
                  147.78.101.0-147.78.102.255
                  171.22.72.0/22
                  178.215.224.0/24
                  178.215.226.0/24
                  178.215.236.0/24
                  185.216.84.0/22
                  185.218.84.0/22
                  185.226.173.0/24
                  185.226.175.0/24
                  185.252.176.0/24
                  194.55.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:1b:36:99:55:e6:10:d2:af:4e:df:0d:9a:4f:1d:28:78:c1:
         72:51:e1:2a:dd:c4:39:36:f2:d5:a7:18:a2:c6:d4:d0:e4:56:
         5d:d5:9e:79:a0:bb:5e:07:2f:e2:29:00:9a:8f:a9:62:db:85:
         a4:13:58:9f:85:36:d6:bc:ea:d2:63:07:4d:30:1e:40:b4:61:
         37:9b:93:d5:44:2e:75:95:41:aa:ec:41:88:9b:25:5f:e0:23:
         f1:59:f4:f8:1a:61:e4:4d:c2:94:9e:b2:c1:90:17:fd:82:86:
         34:a5:ad:33:05:50:f5:13:2b:01:b8:40:c2:46:55:00:20:61:
         75:99:22:77:e1:5d:05:e4:13:48:44:3a:87:f7:f5:83:16:9a:
         f1:2d:67:6a:5e:48:be:08:bd:7f:03:12:43:44:63:38:6a:c5:
         ad:6d:d7:fb:e5:50:36:53:3e:3d:1b:0a:00:6e:a0:ff:8e:15:
         7b:2b:ee:a7:66:7d:b2:43:72:02:9e:13:cf:f1:f3:8b:25:57:
         fa:6e:77:f1:14:5e:c8:7d:56:c3:bf:4a:d0:13:f5:02:0d:eb:
         bc:f3:90:62:b3:50:3a:5d:9f:47:f9:9d:93:ca:03:76:bc:3b:
         7d:f6:bc:93:2b:53:c3:6a:71:a1:47:29:a8:1b:9d:03:40:7c:
         e9:89:c2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:42 2024 by rpki-client on console-ams.rpki-client.org