Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/1m75ejJUCMy2JkKGsTz33HCeOeI.roa
File:                     1m75ejJUCMy2JkKGsTz33HCeOeI.roa (raw, json)
Hash identifier:          u5aIoe2j/Ri/hnTHlNzcWPl0lMvnoHyl/AeW1d2/JG8=
Subject key identifier:   D6:6E:F9:7A:32:54:08:CC:B6:26:42:86:B1:3C:F7:DC:70:9E:39:E2
Certificate issuer:       /CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
Certificate serial:       018570D51537E07BAC29C664B7661067EE1D
Authority key identifier: 74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/1m75ejJUCMy2JkKGsTz33HCeOeI.roa
Signing time:             Mon 02 Jan 2023 04:54:50 +0000
ROA not before:           Mon 02 Jan 2023 04:54:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     12350
IP address blocks:        193.246.207.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 00:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:d5:15:37:e0:7b:ac:29:c6:64:b7:66:10:67:ee:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c
        Validity
            Not Before: Jan  2 04:54:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=d66ef97a325408ccb6264286b13cf7dc709e39e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:dc:d0:d0:80:b0:fe:e0:f8:36:fa:f1:71:07:
                    4e:ad:68:58:28:20:47:7c:cf:4b:e1:2c:c4:18:66:
                    11:26:a8:6e:a0:71:0a:33:e2:20:1c:89:de:3c:66:
                    87:69:a5:1d:18:3c:76:5a:a8:9a:92:3d:6c:14:69:
                    85:e7:ae:a9:e8:d1:84:74:3a:17:7a:2c:9a:ea:70:
                    d9:d7:d6:94:19:9e:85:7f:67:7c:e6:c3:a1:38:bf:
                    37:b2:9d:06:09:f7:cc:30:c0:cb:8d:be:0a:d1:78:
                    c2:c9:ce:fe:cd:86:be:bc:82:95:51:00:61:6b:4a:
                    ad:ba:61:18:3c:c7:9c:98:31:0d:e4:cf:03:36:e6:
                    dc:69:5b:f1:08:14:d7:80:d9:4c:ae:67:e0:2c:03:
                    cf:78:77:87:dd:22:ac:c0:a6:66:4c:65:28:6a:62:
                    d8:cc:6b:62:ff:eb:5b:91:88:7c:53:42:47:6d:fb:
                    f7:e2:d3:ca:84:cf:4c:2f:3f:04:92:4f:ab:a1:0b:
                    81:35:28:2d:8e:39:31:70:db:a1:69:75:29:1d:d3:
                    d8:9c:80:8a:58:6b:8e:5b:f9:4f:f7:d4:d8:e6:bd:
                    fe:e4:2e:58:5a:ba:e8:2f:b5:af:c0:4d:4a:04:5c:
                    a5:fe:82:a3:36:dc:79:ee:c6:bd:e2:b3:3d:26:c7:
                    74:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:6E:F9:7A:32:54:08:CC:B6:26:42:86:B1:3C:F7:DC:70:9E:39:E2
            X509v3 Authority Key Identifier:
                keyid:74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/1m75ejJUCMy2JkKGsTz33HCeOeI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.246.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:7b:21:fc:c4:dd:98:e9:01:b8:60:96:8a:d5:56:87:09:df:
         8f:a0:05:e9:0a:2b:fa:0a:14:3b:4e:8a:9a:bc:82:bc:48:2f:
         9a:5d:92:41:90:c5:42:97:f9:c6:fc:7f:19:0a:fc:f2:01:dc:
         39:16:95:99:be:a8:94:1b:6e:cb:81:77:4f:18:69:02:8a:59:
         3b:6c:c3:82:5b:c6:dc:53:71:46:b8:c2:61:e2:d9:ec:bd:3e:
         16:65:47:cc:a5:03:d7:35:ce:74:35:fa:23:fc:c0:dc:6a:a4:
         23:3e:73:39:e9:f7:fe:77:1b:98:0d:a4:44:33:ce:87:a9:10:
         9f:6a:69:b9:e8:8c:26:44:82:1a:d1:2c:62:39:35:c6:59:03:
         3d:14:31:e6:24:02:5c:61:57:45:5d:0a:74:6d:bd:34:39:5b:
         d4:2d:17:da:ae:24:e5:dc:7f:17:21:f0:c3:87:05:b3:46:6b:
         d7:89:85:c9:1d:94:d6:24:5c:e3:8e:4e:c2:54:6d:66:3f:1a:
         fb:9f:50:a2:6b:51:e0:89:6b:cb:0a:46:66:ff:70:aa:4f:d0:
         e6:fd:ed:a8:64:32:ba:a5:10:07:fd:de:c5:6b:8e:21:92:c1:
         44:8b:a7:e1:7a:7a:a1:db:91:34:fd:5a:28:b9:42:0c:c9:16:
         1d:84:36:e9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVw1RU34HusKcZkt2YQZ+4dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NGRjYjcyZThjYjQ3OGNmYzRiMjVhZWIxZjAzYjQwNjI2
NjM3NWMwHhcNMjMwMTAyMDQ1NDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjZlZjk3YTMyNTQwOGNjYjYyNjQyODZiMTNjZjdkYzcwOWUzOWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptzQ0ICw/uD4NvrxcQdOrWhYKCBH
fM9L4SzEGGYRJqhuoHEKM+IgHInePGaHaaUdGDx2Wqiakj1sFGmF566p6NGEdDoX
eiya6nDZ19aUGZ6Ff2d85sOhOL83sp0GCffMMMDLjb4K0XjCyc7+zYa+vIKVUQBh
a0qtumEYPMecmDEN5M8DNubcaVvxCBTXgNlMrmfgLAPPeHeH3SKswKZmTGUoamLY
zGti/+tbkYh8U0JHbfv34tPKhM9MLz8Ekk+roQuBNSgtjjkxcNuhaXUpHdPYnICK
WGuOW/lP99TY5r3+5C5YWrroL7WvwE1KBFyl/oKjNtx57sa94rM9Jsd0jwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNZu+XoyVAjMtiZChrE899xwnjniMB8GA1UdIwQY
MBaAFHRNy3Loy0eM/EslrrHwO0BiZjdcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEUzTGN1akxSNHo4U3lXdXNmQTdRR0ptTjF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81ZTFiZTktZTRlYS00Yzg0LWE4Yjct
ZDBkNDc2ZjQxZmQ2LzEvMW03NWVqSlVDTXkySmtLR3NUejMzSENlT2VJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi81ZTFiZTktZTRlYS00Yzg0LWE4YjctZDBkNDc2ZjQxZmQ2
LzEvZEUzTGN1akxSNHo4U3lXdXNmQTdRR0ptTjF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwfbPMA0G
CSqGSIb3DQEBCwUAA4IBAQB9eyH8xN2Y6QG4YJaK1VaHCd+PoAXpCiv6ChQ7Toqa
vIK8SC+aXZJBkMVCl/nG/H8ZCvzyAdw5FpWZvqiUG27LgXdPGGkCilk7bMOCW8bc
U3FGuMJh4tnsvT4WZUfMpQPXNc50Nfoj/MDcaqQjPnM56ff+dxuYDaREM86HqRCf
amm56IwmRIIa0SxiOTXGWQM9FDHmJAJcYVdFXQp0bb00OVvULRfariTl3H8XIfDD
hwWzRmvXiYXJHZTWJFzjjk7CVG1mPxr7n1Cia1HgiWvLCkZm/3CqT9Dm/e2oZDK6
pRAH/d7Fa44hksFEi6fhenqh25E0/VoouUIMyRYdhDbp
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:16 2024 by rpki-client on console-ams.rpki-client.org