Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vDqPHsTBp6YM-QzY4Xnj8_2VCm8.roa
File:                     vDqPHsTBp6YM-QzY4Xnj8_2VCm8.roa (raw, json)
Hash identifier:          +Cr7wJ7tkNCnmhkdtNMka0pgYziYPuAzGz8q0Ph84mY=
Subject key identifier:   BC:3A:8F:1E:C4:C1:A7:A6:0C:F9:0C:D8:E1:79:E3:F3:FD:95:0A:6F
Certificate issuer:       /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial:       01856D81F4FAB9EA818AB226B8F7944AB752
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vDqPHsTBp6YM-QzY4Xnj8_2VCm8.roa
Signing time:             Sun 01 Jan 2023 13:25:11 +0000
ROA not before:           Sun 01 Jan 2023 13:25:11 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     60202
IP address blocks:        94.156.58.0/24 maxlen: 24
                          94.156.56.0/24 maxlen: 24
                          94.156.57.0/24 maxlen: 24
                          94.156.60.0/24 maxlen: 24
                          94.156.59.0/24 maxlen: 24
                          87.120.231.0/24 maxlen: 24
                          87.120.230.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6d:81:f4:fa:b9:ea:81:8a:b2:26:b8:f7:94:4a:b7:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
        Validity
            Not Before: Jan  1 13:25:11 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bc3a8f1ec4c1a7a60cf90cd8e179e3f3fd950a6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:62:31:77:23:92:70:50:7a:f6:ad:56:a0:7b:
                    83:5e:f7:ec:21:32:b4:13:4c:e2:4a:78:f5:69:8b:
                    a3:69:8f:19:75:9f:87:d1:66:1f:d9:74:6d:79:b7:
                    50:68:95:db:16:50:f7:b1:9d:1d:fb:5d:ee:4e:75:
                    83:de:d9:8c:0f:42:ad:0a:80:58:b6:15:0a:2a:8d:
                    4a:4e:18:6d:bc:fa:e6:c5:2d:ac:ff:b6:47:f3:c4:
                    6c:73:5c:5b:36:82:6b:4d:1f:8a:b0:d4:fe:81:12:
                    f7:6d:6f:e7:7a:99:28:33:70:2e:b9:c3:ab:8b:42:
                    f6:87:34:cb:2f:6e:2d:4b:06:01:ab:14:19:83:40:
                    1b:5b:52:de:3f:83:f9:46:fc:b8:fb:56:a6:30:9c:
                    ca:9d:80:ec:8a:fb:ce:68:bb:de:bc:50:6b:00:01:
                    85:d0:c3:43:c9:c1:64:21:02:3c:17:22:bc:48:7d:
                    8c:02:6d:a3:1a:89:22:79:45:e0:d9:b4:80:53:08:
                    9f:ce:7f:e3:4d:18:e9:6e:7c:e9:fd:c0:67:7f:b2:
                    05:de:54:bb:43:3d:36:3e:02:7c:f8:18:5c:27:4d:
                    a7:3e:80:f0:66:62:32:bd:42:ba:5f:fa:23:b2:e9:
                    60:e7:c5:c0:b3:24:f7:ef:c0:e3:ce:67:d8:70:03:
                    7b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:3A:8F:1E:C4:C1:A7:A6:0C:F9:0C:D8:E1:79:E3:F3:FD:95:0A:6F
            X509v3 Authority Key Identifier:
                keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vDqPHsTBp6YM-QzY4Xnj8_2VCm8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  87.120.230.0/23
                  94.156.56.0-94.156.60.255

    Signature Algorithm: sha256WithRSAEncryption
         32:f1:cd:e6:19:68:a1:77:e6:c9:d1:13:39:95:00:63:a9:71:
         96:59:f9:87:93:1a:0e:3b:f0:9e:10:e7:2e:75:1f:5a:ea:a1:
         04:c6:2a:05:84:4d:d2:c1:f2:c2:7e:6e:fc:c3:b6:d0:2f:1f:
         d2:9e:54:48:c4:be:2a:cb:c7:b2:aa:20:80:af:00:8c:2f:c1:
         92:59:20:7f:32:a5:5c:bf:db:cc:aa:aa:a8:2d:4b:f5:12:5c:
         fe:52:c6:0f:1a:09:c5:63:82:fc:99:08:a6:0f:54:d5:f8:00:
         a6:2f:78:69:ba:40:e5:36:6f:17:31:20:b7:0f:b7:e8:91:0c:
         5b:f3:f8:3b:98:05:1c:42:90:3c:4b:fe:4b:b9:3e:6e:ea:b1:
         cb:01:43:a4:dd:1e:75:17:9e:7f:80:83:3e:07:0b:73:2b:37:
         93:f2:9f:b8:2f:e0:6f:4c:7b:9e:e2:f8:6a:38:8e:75:e9:d5:
         f6:e0:37:b0:d5:49:e2:66:0e:82:ce:8e:57:89:4c:bb:9e:4b:
         41:09:e7:a6:6a:be:cb:e7:9c:16:96:d5:d0:6a:5f:bd:04:b9:
         a1:c0:1f:05:e1:b9:6d:b1:d5:3a:88:ca:fe:5c:d5:2b:77:fe:
         eb:dd:44:59:c9:ac:25:1d:47:ef:b9:00:5c:ce:59:22:6d:5b:
         d3:21:c3:9c
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYVtgfT6ueqBirImuPeUSrdSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwMTAxMTMyNTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzNhOGYxZWM0YzFhN2E2MGNmOTBjZDhlMTc5ZTNmM2ZkOTUwYTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmIxdyOScFB69q1WoHuDXvfsITK0
E0ziSnj1aYujaY8ZdZ+H0WYf2XRtebdQaJXbFlD3sZ0d+13uTnWD3tmMD0KtCoBY
thUKKo1KThhtvPrmxS2s/7ZH88Rsc1xbNoJrTR+KsNT+gRL3bW/nepkoM3AuucOr
i0L2hzTLL24tSwYBqxQZg0AbW1LeP4P5Rvy4+1amMJzKnYDsivvOaLvevFBrAAGF
0MNDycFkIQI8FyK8SH2MAm2jGokieUXg2bSAUwifzn/jTRjpbnzp/cBnf7IF3lS7
Qz02PgJ8+BhcJ02nPoDwZmIyvUK6X/ojsulg58XAsyT378DjzmfYcAN7xwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFLw6jx7EwaemDPkM2OF54/P9lQpvMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvdkRxUEhzVEJwNllNLVF6WTRYbmo4XzJWQ204LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBV3jmMAwD
BANenDgDBABenDwwDQYJKoZIhvcNAQELBQADggEBADLxzeYZaKF35snREzmVAGOp
cZZZ+YeTGg478J4Q5y51H1rqoQTGKgWETdLB8sJ+bvzDttAvH9KeVEjEvirLx7Kq
IICvAIwvwZJZIH8ypVy/28yqqqgtS/USXP5Sxg8aCcVjgvyZCKYPVNX4AKYveGm6
QOU2bxcxILcPt+iRDFvz+DuYBRxCkDxL/ku5Pm7qscsBQ6TdHnUXnn+Agz4HC3Mr
N5Pyn7gv4G9Me57i+Go4jnXp1fbgN7DVSeJmDoLOjleJTLueS0EJ56ZqvsvnnBaW
1dBqX70EuaHAHwXhuW2x1TqIyv5c1St3/uvdRFnJrCUdR++5AFzOWSJtW9Mhw5w=
-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:14 2024 by rpki-client on console-ams.rpki-client.org