Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/9bbf75-30d8-4bcc-bc51-1b21765172b6/1/tt6OqZaqPTJtSngk3Wlx73JiG8E.roa
File:                     tt6OqZaqPTJtSngk3Wlx73JiG8E.roa (raw, json)
Hash identifier:          L4iba86oVLDCIAj98SJz3ou2ZdZ9hs9qiYF4gUFDMs4=
Subject key identifier:   B6:DE:8E:A9:96:AA:3D:32:6D:4A:78:24:DD:69:71:EF:72:62:1B:C1
Certificate issuer:       /CN=02e2b228b50cdc90ee498e51bfc915997ca6c590
Certificate serial:       01882008859392B2A60CA270474128DAEC04
Authority key identifier: 02:E2:B2:28:B5:0C:DC:90:EE:49:8E:51:BF:C9:15:99:7C:A6:C5:90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AuKyKLUM3JDuSY5Rv8kVmXymxZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/9bbf75-30d8-4bcc-bc51-1b21765172b6/1/tt6OqZaqPTJtSngk3Wlx73JiG8E.roa
Signing time:             Mon 15 May 2023 15:30:09 +0000
ROA not before:           Mon 15 May 2023 15:30:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     63902
IP address blocks:        188.64.142.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:20:08:85:93:92:b2:a6:0c:a2:70:47:41:28:da:ec:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02e2b228b50cdc90ee498e51bfc915997ca6c590
        Validity
            Not Before: May 15 15:30:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b6de8ea996aa3d326d4a7824dd6971ef72621bc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a9:97:e7:1d:96:75:16:36:a6:79:b3:d1:ca:
                    79:4d:5d:0e:eb:4b:3c:24:bf:c0:5a:0f:b2:17:4b:
                    65:94:5a:49:ce:3f:dc:9a:1d:78:85:e2:66:f5:25:
                    c2:b5:5b:6f:9b:bb:51:0d:0e:c0:38:16:cc:a7:87:
                    e3:ef:58:58:00:a5:20:a7:75:30:ec:f4:e1:42:7a:
                    81:2a:53:71:18:6b:18:7e:7f:7f:91:79:59:05:c6:
                    e5:bb:48:34:b5:c2:49:23:db:a3:6c:af:64:af:ba:
                    35:5a:57:5e:7f:45:15:ef:05:3e:91:dc:44:44:41:
                    d7:03:9d:26:b7:5d:f6:bf:bc:ea:18:87:7b:7b:05:
                    ee:2f:7e:f3:0b:bd:ab:17:48:82:fc:e8:4a:dd:aa:
                    79:19:ce:f4:50:55:0e:9c:95:ab:f8:ab:16:72:93:
                    53:b1:fa:5e:5d:99:b3:b4:d2:ba:2c:12:13:8b:47:
                    90:a4:ea:2b:db:d5:59:ac:4e:be:93:3f:f6:0b:ab:
                    1c:be:01:63:1b:fe:10:72:ad:3c:c2:e2:38:5f:f9:
                    13:a2:e1:08:30:c6:a1:26:df:56:99:bb:87:35:84:
                    da:cf:7c:8b:b7:f7:93:d5:c8:7e:e2:76:30:3f:bf:
                    a0:cd:1f:91:d2:d3:c0:51:df:3c:75:f8:a4:e3:e2:
                    cc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:DE:8E:A9:96:AA:3D:32:6D:4A:78:24:DD:69:71:EF:72:62:1B:C1
            X509v3 Authority Key Identifier:
                keyid:02:E2:B2:28:B5:0C:DC:90:EE:49:8E:51:BF:C9:15:99:7C:A6:C5:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AuKyKLUM3JDuSY5Rv8kVmXymxZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9bbf75-30d8-4bcc-bc51-1b21765172b6/1/tt6OqZaqPTJtSngk3Wlx73JiG8E.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/9bbf75-30d8-4bcc-bc51-1b21765172b6/1/AuKyKLUM3JDuSY5Rv8kVmXymxZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.64.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:6b:82:0b:a1:55:f0:96:c2:8e:f9:9c:a7:a5:6e:10:34:b5:
         24:98:98:08:1c:97:a9:73:44:81:90:8b:50:b4:bc:54:30:21:
         0b:4b:e5:ce:8a:6f:f9:97:ec:9c:4c:9e:df:71:cb:c2:47:3e:
         9e:cd:e2:df:a3:55:aa:c2:09:ad:f0:26:f7:fc:97:1a:ed:f7:
         84:38:db:65:65:aa:22:e4:c5:fb:4a:fa:91:96:c3:51:65:db:
         81:13:21:68:4a:c5:96:6e:b2:ab:1c:4d:26:7f:2c:52:15:fe:
         bc:65:a9:e0:87:89:4f:cf:ff:6c:14:db:96:40:8d:e9:12:8e:
         b3:ef:31:15:0c:0d:db:1d:07:6c:a3:69:56:af:46:cf:ff:b7:
         a4:3e:34:bd:48:71:27:b5:3c:1f:77:5c:ef:b9:19:ad:5a:40:
         9a:47:05:07:a0:6b:92:26:85:c8:ab:29:2f:d5:18:5b:dd:94:
         fd:2e:8b:f6:7a:c9:42:81:88:31:b4:d6:49:16:0f:e3:e1:b5:
         28:d1:28:92:d3:1e:d8:e0:1a:44:cd:1a:b7:c6:fc:ae:e0:d3:
         c3:51:b5:1c:c9:73:c3:e7:54:52:55:4b:d9:c8:f1:bf:52:0a:
         61:29:5a:c2:62:30:37:f4:dc:82:f3:a2:2b:ca:45:cb:2c:74:
         45:fa:8d:5c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYggCIWTkrKmDKJwR0Eo2uwEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyZTJiMjI4YjUwY2RjOTBlZTQ5OGU1MWJmYzkxNTk5N2Nh
NmM1OTAwHhcNMjMwNTE1MTUzMDA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmRlOGVhOTk2YWEzZDMyNmQ0YTc4MjRkZDY5NzFlZjcyNjIxYmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlamX5x2WdRY2pnmz0cp5TV0O60s8
JL/AWg+yF0tllFpJzj/cmh14heJm9SXCtVtvm7tRDQ7AOBbMp4fj71hYAKUgp3Uw
7PThQnqBKlNxGGsYfn9/kXlZBcblu0g0tcJJI9ujbK9kr7o1Wldef0UV7wU+kdxE
REHXA50mt132v7zqGId7ewXuL37zC72rF0iC/OhK3ap5Gc70UFUOnJWr+KsWcpNT
sfpeXZmztNK6LBITi0eQpOor29VZrE6+kz/2C6scvgFjG/4Qcq08wuI4X/kTouEI
MMahJt9WmbuHNYTaz3yLt/eT1ch+4nYwP7+gzR+R0tPAUd88dfik4+LMQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLbejqmWqj0ybUp4JN1pce9yYhvBMB8GA1UdIwQY
MBaAFALisii1DNyQ7kmOUb/JFZl8psWQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXVLeUtMVU0zSkR1U1k1UnY4a1ZtWHlteFpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi85YmJmNzUtMzBkOC00YmNjLWJjNTEt
MWIyMTc2NTE3MmI2LzEvdHQ2T3FaYXFQVEp0U25nazNXbHg3M0ppRzhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi85YmJmNzUtMzBkOC00YmNjLWJjNTEtMWIyMTc2NTE3MmI2
LzEvQXVLeUtMVU0zSkR1U1k1UnY4a1ZtWHlteFpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvECOMA0G
CSqGSIb3DQEBCwUAA4IBAQAxa4ILoVXwlsKO+ZynpW4QNLUkmJgIHJepc0SBkItQ
tLxUMCELS+XOim/5l+ycTJ7fccvCRz6ezeLfo1Wqwgmt8Cb3/Jca7feEONtlZaoi
5MX7SvqRlsNRZduBEyFoSsWWbrKrHE0mfyxSFf68Zangh4lPz/9sFNuWQI3pEo6z
7zEVDA3bHQdso2lWr0bP/7ekPjS9SHEntTwfd1zvuRmtWkCaRwUHoGuSJoXIqykv
1Rhb3ZT9Lov2eslCgYgxtNZJFg/j4bUo0SiS0x7Y4BpEzRq3xvyu4NPDUbUcyXPD
51RSVUvZyPG/UgphKVrCYjA39NyC86IrykXLLHRF+o1c
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:16 2023 by rpki-client on console-fra.rpki-client.org