Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/cCU1AxrERTc7Igy4JCbH24evs4E.roa
File:                     cCU1AxrERTc7Igy4JCbH24evs4E.roa (raw, json)
Hash identifier:          b4iCIgc3doM04HY8VZRXFg4oihwBS4Hob//xNMS1vxY=
Subject key identifier:   70:25:35:03:1A:C4:45:37:3B:22:0C:B8:24:26:C7:DB:87:AF:B3:81
Certificate issuer:       /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial:       018570676A79502A740F537196ACEEC81162
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/cCU1AxrERTc7Igy4JCbH24evs4E.roa
Signing time:             Mon 02 Jan 2023 02:55:03 +0000
ROA not before:           Mon 02 Jan 2023 02:55:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     208621
IP address blocks:        80.64.218.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 12:30:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:67:6a:79:50:2a:74:0f:53:71:96:ac:ee:c8:11:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
        Validity
            Not Before: Jan  2 02:55:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=702535031ac445373b220cb82426c7db87afb381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4c:7f:8f:cf:ed:ba:13:4c:a5:a2:9d:ad:f4:
                    e4:23:b9:30:83:dd:f8:d5:21:64:fd:48:33:58:c1:
                    ca:2d:81:d0:7e:9c:58:87:da:f5:30:dc:8b:f5:61:
                    3e:aa:ea:42:e3:20:2b:a2:27:9a:52:88:33:a1:0a:
                    3a:74:1e:7f:cd:32:c8:ae:a9:36:81:13:11:46:27:
                    60:a2:5f:75:69:9a:ff:b7:2f:00:28:5e:6a:59:85:
                    85:5c:3a:9b:bc:0c:87:0b:97:be:95:d4:2c:01:4b:
                    9d:ba:20:09:ea:c0:16:3e:72:00:17:51:95:11:83:
                    6e:b7:d9:82:7f:cb:b3:8c:ef:a1:2e:1b:d5:74:f9:
                    d1:a9:d5:cc:05:52:59:7e:2a:82:11:ae:e2:74:9f:
                    1a:ec:af:2a:35:3d:13:6e:12:44:f8:4f:45:26:a1:
                    11:7d:87:fa:a3:a4:22:0b:76:44:a8:29:ae:b0:4e:
                    64:2e:54:35:41:ba:b7:f4:6f:ff:fc:3a:d7:a6:05:
                    d4:41:cb:e6:e9:d9:ea:c9:a3:67:46:e5:7b:64:31:
                    7a:b0:3c:c1:2e:7d:d3:3a:9d:ae:f5:0c:1e:3a:a8:
                    7f:cb:10:a3:94:54:a0:12:c8:2a:03:3c:19:d0:00:
                    c7:8d:34:18:fa:69:a2:1c:87:38:b6:36:48:65:c4:
                    2d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:25:35:03:1A:C4:45:37:3B:22:0C:B8:24:26:C7:DB:87:AF:B3:81
            X509v3 Authority Key Identifier:
                keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/cCU1AxrERTc7Igy4JCbH24evs4E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.64.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         be:77:00:94:d6:74:2e:0b:5f:27:f7:f5:6c:95:0e:50:30:25:
         68:3b:7f:d3:ea:60:36:eb:9b:4d:3c:52:53:c5:9b:8e:60:a4:
         d6:4d:e0:98:4d:34:d7:40:b7:6c:52:ea:e1:89:fe:e9:f4:bb:
         92:fb:99:9d:f3:3e:52:1b:10:e8:54:b6:78:e8:c3:38:50:23:
         c0:ee:ad:b8:66:59:bd:f3:6c:90:25:92:cc:71:f4:b6:6d:39:
         a2:bd:41:66:55:5f:41:68:d6:f3:68:33:2a:26:c9:14:cf:cf:
         a1:a5:11:cc:b1:f1:ce:9d:20:82:40:a1:69:0d:8c:c1:e9:2b:
         1a:d3:8e:16:40:51:6c:8e:69:c9:e9:ef:de:ec:ed:e2:34:3b:
         a6:e2:09:0d:0f:05:c4:37:b5:9f:7e:eb:0b:22:a7:3c:51:be:
         54:5e:e5:e8:0b:c7:3a:ba:51:55:d7:bf:5f:69:b7:bc:f2:9e:
         71:e7:52:ea:51:63:0d:b7:58:19:e8:ed:ca:3a:69:1f:8f:46:
         01:b3:7a:04:30:a7:85:6e:c8:eb:83:3b:07:5b:c6:fe:9b:1f:
         66:64:e2:53:63:60:51:08:4c:3e:5f:01:4b:62:79:64:f7:5f:
         0a:7c:4c:1d:a7:f7:65:51:e0:b2:51:5a:35:33:3a:2c:e8:be:
         b5:4f:ba:4e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwZ2p5UCp0D1NxlqzuyBFiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw
MTRiOGQwHhcNMjMwMTAyMDI1NTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDI1MzUwMzFhYzQ0NTM3M2IyMjBjYjgyNDI2YzdkYjg3YWZiMzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEx/j8/tuhNMpaKdrfTkI7kwg934
1SFk/UgzWMHKLYHQfpxYh9r1MNyL9WE+qupC4yAroieaUogzoQo6dB5/zTLIrqk2
gRMRRidgol91aZr/ty8AKF5qWYWFXDqbvAyHC5e+ldQsAUuduiAJ6sAWPnIAF1GV
EYNut9mCf8uzjO+hLhvVdPnRqdXMBVJZfiqCEa7idJ8a7K8qNT0TbhJE+E9FJqER
fYf6o6QiC3ZEqCmusE5kLlQ1Qbq39G///DrXpgXUQcvm6dnqyaNnRuV7ZDF6sDzB
Ln3TOp2u9QweOqh/yxCjlFSgEsgqAzwZ0ADHjTQY+mmiHIc4tjZIZcQtZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHAlNQMaxEU3OyIMuCQmx9uHr7OBMB8GA1UdIwQY
MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt
NmJjNzU1NzhiNGMzLzEvY0NVMUF4ckVSVGM3SWd5NEpDYkgyNGV2czRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz
LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUEDaMA0G
CSqGSIb3DQEBCwUAA4IBAQC+dwCU1nQuC18n9/VslQ5QMCVoO3/T6mA265tNPFJT
xZuOYKTWTeCYTTTXQLdsUurhif7p9LuS+5md8z5SGxDoVLZ46MM4UCPA7q24Zlm9
82yQJZLMcfS2bTmivUFmVV9BaNbzaDMqJskUz8+hpRHMsfHOnSCCQKFpDYzB6Ssa
044WQFFsjmnJ6e/e7O3iNDum4gkNDwXEN7WffusLIqc8Ub5UXuXoC8c6ulFV179f
abe88p5x51LqUWMNt1gZ6O3KOmkfj0YBs3oEMKeFbsjrgzsHW8b+mx9mZOJTY2BR
CEw+XwFLYnlk918KfEwdp/dlUeCyUVo1Mzos6L61T7pO
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:17 2024 by rpki-client on console-ams.rpki-client.org