Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/5nTJoN4y3t5_pHyPt7XG2Cjc_6U.roa
File:                     5nTJoN4y3t5_pHyPt7XG2Cjc_6U.roa (raw, json)
Hash identifier:          dKLrOkLX0MjkG4z29SdSaI+9zkueWPEg5jFP6g3NlP0=
Subject key identifier:   E6:74:C9:A0:DE:32:DE:DE:7F:A4:7C:8F:B7:B5:C6:D8:28:DC:FF:A5
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       01856F150378D94E864B0A472A859D7D8168
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/5nTJoN4y3t5_pHyPt7XG2Cjc_6U.roa
Signing time:             Sun 01 Jan 2023 20:45:26 +0000
ROA not before:           Sun 01 Jan 2023 20:45:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     57136
IP address blocks:        193.226.118.0/24 maxlen: 24
                          217.156.79.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:30:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:15:03:78:d9:4e:86:4b:0a:47:2a:85:9d:7d:81:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Jan  1 20:45:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e674c9a0de32dede7fa47c8fb7b5c6d828dcffa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:4e:94:2d:f6:dd:55:65:16:c2:02:ca:06:a9:
                    bc:a6:d2:16:13:95:54:3e:56:93:83:3b:bb:ef:aa:
                    d3:ad:3b:b7:11:1f:a4:11:74:d3:14:2d:80:21:39:
                    b0:72:f5:b8:91:a4:d2:c4:d7:99:d7:80:12:a0:65:
                    2f:aa:47:ff:42:05:0e:47:88:f4:2c:65:50:a3:ff:
                    01:86:5b:d8:ef:b9:b5:95:38:35:78:3b:aa:e7:d3:
                    b3:12:f0:f0:f9:6b:67:36:d7:07:6f:d4:51:1c:59:
                    e4:59:22:b8:9c:42:8d:83:0e:e5:c6:25:9d:0c:63:
                    f5:3a:60:46:90:5c:00:bc:ee:2e:d9:c1:7b:51:26:
                    41:74:2a:16:78:ae:0a:fa:b0:19:6f:0b:87:b0:6d:
                    15:9c:36:f1:18:77:fc:bf:8f:25:6a:77:6b:0a:61:
                    4d:99:28:ad:66:ba:f9:d8:43:a6:73:2d:48:8d:f9:
                    3d:3f:ad:12:bc:38:82:e0:ae:16:57:e9:bb:ad:78:
                    39:75:db:b5:c2:79:bc:dc:3b:a7:5a:48:6f:01:d1:
                    80:0c:1f:27:9b:27:c6:ac:56:64:93:36:00:20:7a:
                    56:10:85:1b:f5:18:89:c3:82:e4:a2:90:7c:2b:30:
                    60:89:78:1e:57:0d:91:c6:33:31:d0:61:9c:5f:97:
                    5d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:74:C9:A0:DE:32:DE:DE:7F:A4:7C:8F:B7:B5:C6:D8:28:DC:FF:A5
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/5nTJoN4y3t5_pHyPt7XG2Cjc_6U.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.226.118.0/24
                  217.156.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:e8:b8:1f:39:20:78:1e:f0:49:48:b1:16:c0:b3:33:01:1f:
         28:3d:08:d3:89:44:4c:43:1c:f9:d0:5c:55:a2:65:84:db:0b:
         2e:96:d5:11:a7:ca:1f:af:a1:17:c0:ba:28:ce:b1:43:58:17:
         f8:ad:ce:5e:b5:c5:ad:f7:f8:1c:6a:cf:93:fe:9e:dc:44:e1:
         ef:23:17:93:61:28:4a:7d:0c:d7:72:dd:72:69:6f:83:1a:24:
         12:8d:1d:29:3d:f9:0a:7b:81:f0:3d:6c:94:81:90:62:39:5d:
         34:02:9e:5c:e2:ea:1a:44:91:bc:b3:62:90:8c:bb:d5:70:fa:
         cd:b2:06:97:c2:a5:fc:af:56:0d:bc:fa:99:95:f1:c0:91:a8:
         33:f5:d1:e9:dd:6e:bd:a9:52:9c:8c:59:55:62:28:2e:f4:1a:
         da:bc:dd:30:ef:98:11:be:44:c0:ea:18:94:7d:d8:bd:b7:9c:
         d0:49:5d:c5:fe:94:8d:87:5f:0c:6d:8d:95:72:1f:86:21:ff:
         04:2b:82:c4:66:da:3c:06:89:c8:c8:96:64:60:a1:2f:c4:32:
         32:37:b5:1a:50:98:87:12:56:3d:e4:de:87:db:3e:73:08:78:
         43:6d:e8:f8:e5:7b:ea:05:06:a7:e7:d5:a8:c9:d0:20:c3:1e:
         50:c0:42:c3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVvFQN42U6GSwpHKoWdfYFoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjMwMTAxMjA0NTI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjc0YzlhMGRlMzJkZWRlN2ZhNDdjOGZiN2I1YzZkODI4ZGNmZmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk06ULfbdVWUWwgLKBqm8ptIWE5VU
PlaTgzu776rTrTu3ER+kEXTTFC2AITmwcvW4kaTSxNeZ14ASoGUvqkf/QgUOR4j0
LGVQo/8BhlvY77m1lTg1eDuq59OzEvDw+WtnNtcHb9RRHFnkWSK4nEKNgw7lxiWd
DGP1OmBGkFwAvO4u2cF7USZBdCoWeK4K+rAZbwuHsG0VnDbxGHf8v48landrCmFN
mSitZrr52EOmcy1Ijfk9P60SvDiC4K4WV+m7rXg5ddu1wnm83DunWkhvAdGADB8n
myfGrFZkkzYAIHpWEIUb9RiJw4LkopB8KzBgiXgeVw2RxjMx0GGcX5ddLwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOZ0yaDeMt7ef6R8j7e1xtgo3P+lMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvNW5USm9ONHkzdDVfcEh5UHQ3WEcyQ2pjXzZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAweJ2AwQA
2ZxPMA0GCSqGSIb3DQEBCwUAA4IBAQAB6LgfOSB4HvBJSLEWwLMzAR8oPQjTiURM
Qxz50FxVomWE2wsultURp8ofr6EXwLoozrFDWBf4rc5etcWt9/gcas+T/p7cROHv
IxeTYShKfQzXct1yaW+DGiQSjR0pPfkKe4HwPWyUgZBiOV00Ap5c4uoaRJG8s2KQ
jLvVcPrNsgaXwqX8r1YNvPqZlfHAkagz9dHp3W69qVKcjFlVYigu9BravN0w75gR
vkTA6hiUfdi9t5zQSV3F/pSNh18MbY2Vch+GIf8EK4LEZto8BonIyJZkYKEvxDIy
N7UaUJiHElY95N6H2z5zCHhDbej45XvqBQan59WoydAgwx5QwELD
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:04 2024 by rpki-client on console-ams.rpki-client.org