Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/eoIaD504SJd9hIAzJOO7c_G_13M.roa
File:                     eoIaD504SJd9hIAzJOO7c_G_13M.roa (raw, json)
Hash identifier:          kcT9G+brE/GyGtayf3gq+ifNbaoq0hNKZmM2FIx6YyQ=
Subject key identifier:   7A:82:1A:0F:9D:38:48:97:7D:84:80:33:24:E3:BB:73:F1:BF:D7:73
Certificate issuer:       /CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
Certificate serial:       018A86161AC93AA8CDA78E8E40BD9BC7ADB2
Authority key identifier: 9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/eoIaD504SJd9hIAzJOO7c_G_13M.roa
Signing time:             Mon 11 Sep 2023 21:11:50 +0000
ROA not before:           Mon 11 Sep 2023 21:11:50 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     9087
IP address blocks:        178.236.184.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8a:86:16:1a:c9:3a:a8:cd:a7:8e:8e:40:bd:9b:c7:ad:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
        Validity
            Not Before: Sep 11 21:11:50 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7a821a0f9d3848977d84803324e3bb73f1bfd773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:31:ee:10:bd:e3:58:38:a2:4c:2d:ea:b1:4a:
                    59:cf:4b:71:dc:29:f4:c8:b1:fb:54:d4:4d:d5:2f:
                    7f:74:9f:e9:6c:54:e7:da:ff:43:9c:7e:19:b7:e6:
                    ea:25:42:05:0b:12:c5:f6:e6:cc:91:06:59:04:3b:
                    f4:c0:9b:be:d4:41:93:59:75:f8:b1:c4:11:f0:78:
                    6d:12:56:d2:25:ac:f5:2e:0b:55:36:d2:93:12:ab:
                    eb:c3:2e:fc:41:ee:52:93:ed:e9:d4:61:a2:b2:a4:
                    a1:0e:38:42:ee:63:47:9c:d8:50:ee:c3:4a:d5:28:
                    04:2c:f2:ed:8b:2e:49:bf:15:4a:27:3f:ca:d5:a7:
                    25:57:32:40:04:dd:03:91:d4:bd:7e:44:39:f2:9b:
                    2c:c2:35:9a:ce:e3:07:4b:35:36:12:69:22:0e:1a:
                    ed:dd:ac:e4:fa:2c:97:3a:74:4f:5b:b1:bf:76:9f:
                    ef:79:d3:4a:5b:be:52:0c:99:43:3d:ab:ca:dd:e0:
                    5f:44:c6:c9:d2:ba:c4:42:e0:45:3b:21:d5:6f:48:
                    17:94:40:2e:3f:8a:a0:aa:b7:c0:33:f0:ad:a2:83:
                    73:44:8d:af:ce:66:71:18:9f:4e:11:0d:55:c0:d8:
                    7c:eb:26:93:4f:6c:8e:08:ac:6b:a6:74:bc:55:40:
                    75:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:82:1A:0F:9D:38:48:97:7D:84:80:33:24:E3:BB:73:F1:BF:D7:73
            X509v3 Authority Key Identifier:
                keyid:9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/eoIaD504SJd9hIAzJOO7c_G_13M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  178.236.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:66:d7:94:b3:7b:6e:6e:0f:8e:07:f2:76:7b:5d:91:bf:09:
         0d:d5:4a:bd:07:e7:e0:ea:5e:80:ed:c4:b6:4d:01:87:ed:2e:
         ec:38:f1:45:ea:80:d3:f9:70:82:66:9a:62:3a:eb:56:b9:3c:
         47:02:33:6f:1d:e9:65:85:3e:f3:ee:88:4b:20:67:ea:cf:88:
         51:3b:c1:87:e9:7b:af:ef:f3:75:09:96:dd:c0:9a:4a:f6:0a:
         9b:7d:1a:63:2b:52:a9:20:c7:22:a3:35:a4:9d:59:9a:0f:a8:
         84:b9:53:fb:37:39:64:52:dc:48:2b:aa:a3:20:11:f1:b2:90:
         ef:68:df:39:54:82:f2:d7:be:cb:66:7f:82:26:4c:a0:8b:ea:
         f5:1d:e3:05:e6:79:ab:5f:d8:06:ae:ac:5f:f8:3f:0a:a2:7d:
         eb:cd:9a:f7:4d:3c:e7:dd:8b:e1:a0:0c:a4:e9:23:4e:05:7d:
         29:a9:31:c7:a1:a4:68:b5:9a:62:77:a6:35:83:f5:d5:4f:82:
         15:0d:a1:fb:1e:f7:cc:8d:96:ae:4d:33:9e:41:a3:fa:26:8d:
         a9:56:b1:4e:ea:a8:e1:59:e1:6a:16:d2:70:7c:4e:6c:42:57:
         a4:1d:3a:1c:22:f0:42:b9:ca:2f:d1:58:df:c0:fa:b6:07:3c:
         2e:71:62:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqGFhrJOqjNp46OQL2bx62yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjNmNGNiNGJhYjVjMTA4MDFhNzcwNjU4ZGY4OTFjZmI4
YzY4YzYwHhcNMjMwOTExMjExMTUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTgyMWEwZjlkMzg0ODk3N2Q4NDgwMzMyNGUzYmI3M2YxYmZkNzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDHuEL3jWDiiTC3qsUpZz0tx3Cn0
yLH7VNRN1S9/dJ/pbFTn2v9DnH4Zt+bqJUIFCxLF9ubMkQZZBDv0wJu+1EGTWXX4
scQR8HhtElbSJaz1LgtVNtKTEqvrwy78Qe5Sk+3p1GGisqShDjhC7mNHnNhQ7sNK
1SgELPLtiy5JvxVKJz/K1aclVzJABN0DkdS9fkQ58psswjWazuMHSzU2EmkiDhrt
3azk+iyXOnRPW7G/dp/vedNKW75SDJlDPavK3eBfRMbJ0rrEQuBFOyHVb0gXlEAu
P4qgqrfAM/CtooNzRI2vzmZxGJ9OEQ1VwNh86yaTT2yOCKxrpnS8VUB1pQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHqCGg+dOEiXfYSAMyTju3Pxv9dzMB8GA1UdIwQY
MBaAFJ0j9MtLq1wQgBp3BljfiRz7jGjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNQMHkwdXJYQkNBR25jR1dOLUpIUHVNYU1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZWNhNGQtM2EyZS00YTg0LWE3ODkt
MDE1NzdhOTI3ZmE5LzEvZW9JYUQ1MDRTSmQ5aElBekpPTzdjX0dfMTNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS80ZWNhNGQtM2EyZS00YTg0LWE3ODktMDE1NzdhOTI3ZmE5
LzEvblNQMHkwdXJYQkNBR25jR1dOLUpIUHVNYU1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsuy4MA0G
CSqGSIb3DQEBCwUAA4IBAQAAZteUs3tubg+OB/J2e12RvwkN1Uq9B+fg6l6A7cS2
TQGH7S7sOPFF6oDT+XCCZppiOutWuTxHAjNvHellhT7z7ohLIGfqz4hRO8GH6Xuv
7/N1CZbdwJpK9gqbfRpjK1KpIMciozWknVmaD6iEuVP7NzlkUtxIK6qjIBHxspDv
aN85VILy177LZn+CJkygi+r1HeMF5nmrX9gGrqxf+D8Kon3rzZr3TTzn3YvhoAyk
6SNOBX0pqTHHoaRotZpid6Y1g/XVT4IVDaH7HvfMjZauTTOeQaP6Jo2pVrFO6qjh
WeFqFtJwfE5sQlekHTocIvBCucov0VjfwPq2BzwucWLk
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:16 2024 by rpki-client on console-fra.rpki-client.org