Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mYoBcuBE5f08dUpuzazEjwff5kc.roa
File:                     mYoBcuBE5f08dUpuzazEjwff5kc.roa (raw, json)
Hash identifier:          OvhbL5OTMTOLQvvfAnXD1Zw4btvErHPFHm1m+mTQl90=
Subject key identifier:   99:8A:01:72:E0:44:E5:FD:3C:75:4A:6E:CD:AC:C4:8F:07:DF:E6:47
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       0187A6DD1F48F9D3C1BCCC4F89709584CD2A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mYoBcuBE5f08dUpuzazEjwff5kc.roa
Signing time:             Sat 22 Apr 2023 02:48:41 +0000
ROA not before:           Sat 22 Apr 2023 02:48:41 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     834
IP address blocks:        87.120.69.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sun 23 Apr 2023 00:33:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:a6:dd:1f:48:f9:d3:c1:bc:cc:4f:89:70:95:84:cd:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Apr 22 02:48:41 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=998a0172e044e5fd3c754a6ecdacc48f07dfe647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b9:a0:c2:67:7f:40:68:d6:25:d6:ae:8b:ba:
                    d6:2e:28:48:fe:c4:41:7e:91:d7:ba:36:0c:6d:9e:
                    60:0a:1c:07:ec:86:e4:99:32:d4:1b:e2:94:47:86:
                    75:e8:d2:3c:3b:a4:61:81:94:8a:bc:95:c9:53:69:
                    79:01:87:43:20:39:a5:52:46:07:76:f7:42:51:ee:
                    16:a6:1c:fb:9a:06:1e:12:87:43:3a:fe:af:11:10:
                    0c:3c:78:2b:dd:cc:7d:6b:7a:d9:1c:be:6b:1e:49:
                    cc:04:49:08:0c:a9:fc:76:1d:6e:98:f5:7b:60:e3:
                    43:7b:07:98:aa:1a:65:62:83:17:d4:4e:42:b0:9b:
                    3a:b6:c5:8e:c7:54:48:9e:f4:24:6b:b4:de:68:db:
                    ce:29:02:84:e8:ea:16:86:67:19:08:f6:24:66:11:
                    2c:f6:e7:92:6c:50:1d:df:e3:db:7b:6f:e1:d0:35:
                    44:ba:f5:57:a1:c2:6b:50:7f:d2:d7:b1:83:cf:f6:
                    3e:7a:ba:90:1f:10:e4:3f:dd:42:ae:8d:8e:6d:84:
                    94:4f:90:d2:a0:8b:38:ae:79:18:b9:c7:02:62:5c:
                    8d:a9:ed:3e:e0:2d:57:e0:91:53:9d:4f:d4:4c:14:
                    ee:22:aa:ee:32:16:87:69:f6:cd:a1:08:fa:9f:1e:
                    6a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:8A:01:72:E0:44:E5:FD:3C:75:4A:6E:CD:AC:C4:8F:07:DF:E6:47
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/mYoBcuBE5f08dUpuzazEjwff5kc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.120.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:9d:60:aa:c4:b2:c6:ca:20:03:ee:97:ab:15:2f:c4:e6:1d:
         10:d8:db:25:4e:23:7b:28:da:8b:ba:02:ad:db:12:f6:6f:7a:
         0a:bb:16:f8:69:74:b2:df:7a:c5:10:60:08:f7:e0:d5:5f:0e:
         ae:ca:f6:c2:6a:1c:5c:f3:32:ad:60:50:bb:9c:df:35:e8:6b:
         e7:1b:36:27:a3:a4:65:ae:07:f2:1e:b4:89:06:43:2f:70:59:
         d2:99:dd:5a:cb:d4:24:6b:e4:2a:a6:c9:3e:d6:be:50:e8:e7:
         39:f8:e5:ae:d2:8c:6f:fb:ef:e1:54:d5:cd:cd:df:aa:69:59:
         22:40:ca:91:fe:de:e8:bd:a7:61:01:bc:1f:2d:9e:19:c7:ad:
         38:2d:dc:f2:8f:fa:55:a0:9a:56:71:7c:61:72:07:3e:b1:57:
         c7:71:12:61:33:6d:23:5a:26:92:6b:69:37:7b:1c:8f:c3:58:
         75:8b:8c:38:f7:c8:78:c7:2a:74:a4:a7:2a:be:ff:51:a5:b7:
         e8:0f:b4:9a:15:e2:7d:aa:cb:31:f4:4c:fd:11:a3:07:de:92:
         5f:30:b9:67:64:05:45:a5:44:e8:bf:fe:bc:96:92:3c:0e:8e:
         0c:d0:16:4f:f6:fe:71:d7:58:77:4f:84:be:96:61:e2:4c:fe:
         34:74:52:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYem3R9I+dPBvMxPiXCVhM0qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwNDIyMDI0ODQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OThhMDE3MmUwNDRlNWZkM2M3NTRhNmVjZGFjYzQ4ZjA3ZGZlNjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLmgwmd/QGjWJdaui7rWLihI/sRB
fpHXujYMbZ5gChwH7IbkmTLUG+KUR4Z16NI8O6RhgZSKvJXJU2l5AYdDIDmlUkYH
dvdCUe4Wphz7mgYeEodDOv6vERAMPHgr3cx9a3rZHL5rHknMBEkIDKn8dh1umPV7
YONDeweYqhplYoMX1E5CsJs6tsWOx1RInvQka7TeaNvOKQKE6OoWhmcZCPYkZhEs
9ueSbFAd3+Pbe2/h0DVEuvVXocJrUH/S17GDz/Y+erqQHxDkP91Cro2ObYSUT5DS
oIs4rnkYuccCYlyNqe0+4C1X4JFTnU/UTBTuIqruMhaHafbNoQj6nx5qgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJmKAXLgROX9PHVKbs2sxI8H3+ZHMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvbVlvQmN1QkU1ZjA4ZFVwdXphekVqd2ZmNWtjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3hFMA0G
CSqGSIb3DQEBCwUAA4IBAQCvnWCqxLLGyiAD7perFS/E5h0Q2NslTiN7KNqLugKt
2xL2b3oKuxb4aXSy33rFEGAI9+DVXw6uyvbCahxc8zKtYFC7nN816GvnGzYno6Rl
rgfyHrSJBkMvcFnSmd1ay9Qka+Qqpsk+1r5Q6Oc5+OWu0oxv++/hVNXNzd+qaVki
QMqR/t7ovadhAbwfLZ4Zx604Ldzyj/pVoJpWcXxhcgc+sVfHcRJhM20jWiaSa2k3
exyPw1h1i4w498h4xyp0pKcqvv9RpbfoD7SaFeJ9qssx9Ez9EaMH3pJfMLlnZAVF
pUTov/68lpI8Do4M0BZP9v5x11h3T4S+lmHiTP40dFJI
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:18 2024 by rpki-client on console-fra.rpki-client.org