Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ubfRetbU9mafmTnedTBAO2N_S5k.roa
File:                     ubfRetbU9mafmTnedTBAO2N_S5k.roa (raw, json)
Hash identifier:          SuEwEq/Z63Y+6KOw9/wDwGuacqJmIFQHXpEEElob51g=
Subject key identifier:   B9:B7:D1:7A:D6:D4:F6:66:9F:99:39:DE:75:30:40:3B:63:7F:4B:99
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       019086A1F3E1C7CADE39DA6A07FDB2C2F220
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ubfRetbU9mafmTnedTBAO2N_S5k.roa
Signing time:             Sat 06 Jul 2024 06:01:19 +0000
ROA not before:           Sat 06 Jul 2024 06:01:19 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     216030
IP address blocks:        93.123.119.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Sat 13 Jul 2024 08:26:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:86:a1:f3:e1:c7:ca:de:39:da:6a:07:fd:b2:c2:f2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Jul  6 06:01:19 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b9b7d17ad6d4f6669f9939de7530403b637f4b99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c1:c8:f6:aa:8c:90:08:b6:33:f4:d2:2d:b3:
                    7b:1b:fe:ab:ef:fa:0e:4c:2f:31:b5:a9:d1:ee:a6:
                    2b:b5:4e:86:6f:1f:c0:37:e8:db:b0:71:20:a2:07:
                    c1:eb:f5:e4:76:e8:cd:5b:30:e7:24:05:bd:d1:27:
                    50:50:cd:1a:4b:de:8f:98:d7:c4:d1:5b:1f:cf:2d:
                    9a:7f:fb:e3:af:3b:2f:ab:dd:d3:11:8c:52:12:1f:
                    b5:a1:dc:48:17:ac:0b:98:d2:7f:c3:52:9d:d7:0e:
                    4f:b7:f4:bb:d5:2f:6c:fd:c4:94:61:75:18:1d:29:
                    2f:6a:4d:90:4f:be:17:05:c6:e9:1b:20:f9:1e:68:
                    5e:d0:51:c4:d9:c9:75:01:43:d5:72:94:f8:40:cb:
                    9d:9d:5b:87:13:65:34:b3:27:78:90:cb:ce:f5:d0:
                    3c:a6:e2:fc:b7:e2:bd:fb:81:d1:2f:94:f2:5e:2f:
                    ef:fe:35:b2:6f:56:f6:e0:88:5f:3c:bb:90:de:16:
                    aa:47:cf:82:a1:f9:79:e5:32:d0:d8:f5:a1:84:f5:
                    97:29:1f:3e:cf:1a:b4:df:8e:9a:6e:86:85:7f:f3:
                    47:1f:5a:bc:aa:b5:87:76:55:84:77:fd:cf:1c:e2:
                    0a:9f:78:d5:17:5b:de:8c:f8:c9:1f:6e:1f:3c:ae:
                    ca:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B7:D1:7A:D6:D4:F6:66:9F:99:39:DE:75:30:40:3B:63:7F:4B:99
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ubfRetbU9mafmTnedTBAO2N_S5k.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.123.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:8f:9e:59:08:29:03:99:63:51:41:78:12:78:20:7b:d2:fb:
         bd:a1:78:0e:dd:00:ad:96:1f:66:8b:56:47:a1:d0:b7:85:fd:
         32:73:aa:d9:86:f8:03:1c:86:13:39:b7:d4:dd:26:2f:32:92:
         da:5d:2e:1c:a5:f1:51:4f:6b:e5:d1:22:28:10:b8:c9:ed:60:
         0c:53:88:26:92:c9:eb:94:c0:c4:43:9e:08:a6:27:e1:31:d4:
         51:76:71:5c:a3:f8:9c:5c:b7:fb:01:4e:b9:63:23:f1:92:39:
         2f:35:6a:c9:d9:1b:37:ba:36:f9:34:d9:60:f5:7d:02:0c:a2:
         74:3a:6b:a7:1d:64:6a:30:d6:fe:8e:c9:48:49:4c:9a:87:bd:
         ee:fc:2a:cb:fa:0d:2f:f8:58:ea:64:b5:85:a8:86:4d:53:c7:
         bd:31:12:df:de:cb:df:3e:6a:51:15:94:72:8f:9d:e9:70:6c:
         42:5a:17:56:39:74:73:c7:33:34:01:f0:93:ac:c1:47:da:bc:
         ce:00:31:56:8d:67:63:1a:79:b5:4e:94:99:db:dc:1f:9b:f1:
         71:97:2b:81:4a:b0:a3:22:2b:b0:a1:3b:76:81:16:d3:8f:dc:
         bd:da:9e:03:d0:c4:53:92:77:1a:bf:32:5d:53:9c:8d:30:60:
         02:7f:8f:47
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZCGofPhx8reOdpqB/2ywvIgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwNzA2MDYwMTE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOWI3ZDE3YWQ2ZDRmNjY2OWY5OTM5ZGU3NTMwNDAzYjYzN2Y0Yjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMHI9qqMkAi2M/TSLbN7G/6r7/oO
TC8xtanR7qYrtU6Gbx/AN+jbsHEgogfB6/XkdujNWzDnJAW90SdQUM0aS96PmNfE
0Vsfzy2af/vjrzsvq93TEYxSEh+1odxIF6wLmNJ/w1Kd1w5Pt/S71S9s/cSUYXUY
HSkvak2QT74XBcbpGyD5Hmhe0FHE2cl1AUPVcpT4QMudnVuHE2U0syd4kMvO9dA8
puL8t+K9+4HRL5TyXi/v/jWyb1b24IhfPLuQ3haqR8+Cofl55TLQ2PWhhPWXKR8+
zxq0346aboaFf/NHH1q8qrWHdlWEd/3PHOIKn3jVF1vejPjJH24fPK7KGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLm30XrW1PZmn5k53nUwQDtjf0uZMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvdWJmUmV0YlU5bWFmbVRuZWRUQkFPMk5fUzVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXt3MA0G
CSqGSIb3DQEBCwUAA4IBAQBoj55ZCCkDmWNRQXgSeCB70vu9oXgO3QCtlh9mi1ZH
odC3hf0yc6rZhvgDHIYTObfU3SYvMpLaXS4cpfFRT2vl0SIoELjJ7WAMU4gmksnr
lMDEQ54IpifhMdRRdnFco/icXLf7AU65YyPxkjkvNWrJ2Rs3ujb5NNlg9X0CDKJ0
OmunHWRqMNb+jslISUyah73u/CrL+g0v+FjqZLWFqIZNU8e9MRLf3svfPmpRFZRy
j53pcGxCWhdWOXRzxzM0AfCTrMFH2rzOADFWjWdjGnm1TpSZ29wfm/FxlyuBSrCj
IiuwoTt2gRbTj9y92p4D0MRTkncavzJdU5yNMGACf49H
-----END CERTIFICATE-----
Generated at Sat Jul 13 09:45:19 2024 by rpki-client on console-fra.rpki-client.org