Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/geUyC5yCn8agq-tfVa7KDg4Sg6s.roa
File:                     geUyC5yCn8agq-tfVa7KDg4Sg6s.roa (raw, json)
Hash identifier:          /67K4DOKUNhAJiycQYAW2q2Qzsfv/Ca120ivKixapHQ=
Subject key identifier:   81:E5:32:0B:9C:82:9F:C6:A0:AB:EB:5F:55:AE:CA:0E:0E:12:83:AB
Certificate issuer:       /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial:       01856F14F1C18DFDE142E0705B0F89195CC1
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/geUyC5yCn8agq-tfVa7KDg4Sg6s.roa
Signing time:             Sun 01 Jan 2023 20:45:21 +0000
ROA not before:           Sun 01 Jan 2023 20:45:21 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     24858
IP address blocks:        193.231.93.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 18:30:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:14:f1:c1:8d:fd:e1:42:e0:70:5b:0f:89:19:5c:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
        Validity
            Not Before: Jan  1 20:45:21 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=81e5320b9c829fc6a0abeb5f55aeca0e0e1283ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c0:e1:83:c7:0e:47:d0:48:97:94:07:a3:34:
                    ae:6b:fb:83:e2:55:96:75:73:a5:d7:bd:cc:29:0f:
                    9c:a4:0c:0f:f5:81:40:75:d0:bf:71:e6:b7:67:9d:
                    fa:81:22:0a:07:b6:78:d1:cd:91:14:01:c6:e6:eb:
                    a7:49:6b:a2:f2:7f:98:62:81:4d:19:89:9f:15:6d:
                    39:97:73:3d:84:6e:20:e1:15:69:be:3d:88:af:5c:
                    fa:0c:d3:bf:71:37:1e:7f:5e:2e:8d:c6:eb:46:5a:
                    3c:b5:a2:58:e0:ba:9d:fc:07:37:5c:4c:6f:47:cc:
                    87:c0:51:3c:d2:fe:7f:1e:33:67:b1:c3:24:e5:4f:
                    06:f7:e8:d8:73:04:9d:c4:24:94:c4:31:04:3b:fa:
                    b5:2b:d0:79:d1:57:23:c9:ee:59:2d:af:6f:9e:98:
                    1a:d8:52:a5:ed:bc:13:ab:76:54:30:a8:53:43:b0:
                    aa:65:c3:b3:26:ce:d2:7c:c0:d1:55:6d:15:8f:ba:
                    fb:21:fb:54:58:e8:58:88:57:c8:b7:bf:14:bd:06:
                    b2:09:91:40:fe:3c:9f:50:81:b8:0d:96:84:2b:9c:
                    4f:26:fa:6f:c9:d6:27:e5:43:4b:f2:27:2d:b8:82:
                    2e:36:6c:c9:c5:dc:1c:88:9d:b4:dd:9b:b4:1c:26:
                    31:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E5:32:0B:9C:82:9F:C6:A0:AB:EB:5F:55:AE:CA:0E:0E:12:83:AB
            X509v3 Authority Key Identifier:
                keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/geUyC5yCn8agq-tfVa7KDg4Sg6s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.231.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:b9:27:dc:41:12:e6:57:8c:d6:d6:69:16:03:94:9d:41:07:
         c4:00:70:3b:65:0f:47:f9:df:50:2c:0d:ce:fd:da:88:21:83:
         3f:19:60:a3:0f:82:1f:49:4c:bc:0e:6e:0d:13:07:69:9c:4c:
         75:72:2b:ae:4e:15:f6:59:3e:80:98:65:3e:bb:04:13:10:40:
         ee:8c:77:6d:a1:86:db:b9:51:dc:ae:f9:92:3d:ef:46:1e:2b:
         b7:6a:0b:53:6e:fc:a4:ad:6e:48:67:16:92:26:02:ad:b9:97:
         01:54:7d:83:40:78:fa:38:a0:bd:3c:b6:97:c4:63:0c:e0:89:
         9a:07:50:dd:40:47:5f:e2:c5:03:e5:14:66:e6:ba:25:18:de:
         42:35:f1:58:bb:f6:1e:ca:9b:00:8e:e5:fa:7a:b2:42:b2:14:
         6e:23:01:92:82:8b:6e:4f:41:f3:ae:ca:b3:1d:0d:77:52:1e:
         81:b1:aa:92:63:2f:23:ee:6d:1a:58:07:02:43:36:53:6a:a5:
         2b:3f:dc:e7:a2:d6:e3:87:45:25:95:d0:37:32:67:42:3e:40:
         00:b5:4d:f7:50:5a:68:8f:f6:73:12:d9:d7:8f:50:82:1c:d7:
         6f:5a:ef:d5:44:4e:b1:bf:f1:8a:fa:35:7f:86:0a:cb:46:7d:
         32:9d:9d:e0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvFPHBjf3hQuBwWw+JGVzBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjMwMTAxMjA0NTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWU1MzIwYjljODI5ZmM2YTBhYmViNWY1NWFlY2EwZTBlMTI4M2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMDhg8cOR9BIl5QHozSua/uD4lWW
dXOl173MKQ+cpAwP9YFAddC/cea3Z536gSIKB7Z40c2RFAHG5uunSWui8n+YYoFN
GYmfFW05l3M9hG4g4RVpvj2Ir1z6DNO/cTcef14ujcbrRlo8taJY4Lqd/Ac3XExv
R8yHwFE80v5/HjNnscMk5U8G9+jYcwSdxCSUxDEEO/q1K9B50Vcjye5ZLa9vnpga
2FKl7bwTq3ZUMKhTQ7CqZcOzJs7SfMDRVW0Vj7r7IftUWOhYiFfIt78UvQayCZFA
/jyfUIG4DZaEK5xPJvpvydYn5UNL8ictuIIuNmzJxdwciJ203Zu0HCYxiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIHlMgucgp/GoKvrX1Wuyg4OEoOrMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvZ2VVeUM1eUNuOGFncS10ZlZhN0tEZzRTZzZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAweddMA0G
CSqGSIb3DQEBCwUAA4IBAQC9uSfcQRLmV4zW1mkWA5SdQQfEAHA7ZQ9H+d9QLA3O
/dqIIYM/GWCjD4IfSUy8Dm4NEwdpnEx1ciuuThX2WT6AmGU+uwQTEEDujHdtoYbb
uVHcrvmSPe9GHiu3agtTbvykrW5IZxaSJgKtuZcBVH2DQHj6OKC9PLaXxGMM4Ima
B1DdQEdf4sUD5RRm5rolGN5CNfFYu/YeypsAjuX6erJCshRuIwGSgotuT0Hzrsqz
HQ13Uh6BsaqSYy8j7m0aWAcCQzZTaqUrP9znotbjh0UlldA3MmdCPkAAtU33UFpo
j/ZzEtnXj1CCHNdvWu/VRE6xv/GK+jV/hgrLRn0ynZ3g
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:22 2024 by rpki-client on console-fra.rpki-client.org