Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/S7tAHT1_OdOfKOvarV3lOZQHYgg.roa
File:                     S7tAHT1_OdOfKOvarV3lOZQHYgg.roa (raw, json)
Hash identifier:          8CQhIec72Ay+d0Iw6YagP0w7Qo1WLHC4X18lVHQho0U=
Subject key identifier:   4B:BB:40:1D:3D:7F:39:D3:9F:28:EB:DA:AD:5D:E5:39:94:07:62:08
Certificate issuer:       /CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
Certificate serial:       01856FD537896FFD93822631FCA8E6FECA6F
Authority key identifier: A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/S7tAHT1_OdOfKOvarV3lOZQHYgg.roa
Signing time:             Mon 02 Jan 2023 00:15:22 +0000
ROA not before:           Mon 02 Jan 2023 00:15:22 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     206459
IP address blocks:        5.181.160.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 22:30:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:d5:37:89:6f:fd:93:82:26:31:fc:a8:e6:fe:ca:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1f7882861c29ed599be4a937480c4d13e25bfc2
        Validity
            Not Before: Jan  2 00:15:22 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=4bbb401d3d7f39d39f28ebdaad5de53994076208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a3:d2:e7:de:94:df:54:02:1d:84:09:6c:0c:
                    58:a7:34:b2:f6:5d:56:cf:53:b3:a6:ec:c4:51:e8:
                    e2:e6:4d:13:3e:dc:9f:1c:fe:59:b2:20:25:ee:14:
                    e4:00:db:23:1d:92:81:c5:d6:03:24:28:c1:14:da:
                    78:23:79:2e:de:df:b7:b4:6c:ef:08:d6:de:73:fc:
                    6a:c1:43:bb:0a:b8:bb:58:ba:be:fb:63:90:fd:a7:
                    e0:ed:46:f1:ff:f4:ed:58:17:15:51:bb:2d:6c:e4:
                    5f:e9:0e:c7:b0:e3:75:e0:b2:61:fc:fb:70:f5:81:
                    98:e1:76:00:b7:f9:24:4a:71:f3:a2:9d:a4:b9:2f:
                    af:3a:d2:3d:8a:36:58:33:aa:56:46:d2:38:db:24:
                    69:5f:73:c3:9a:a3:5c:6c:b7:92:ff:78:0c:63:ac:
                    ec:f8:ac:b2:7e:a5:07:93:c4:40:40:e8:8e:be:c2:
                    ec:93:69:ae:2f:1f:29:99:4d:d6:82:1c:4b:da:09:
                    38:26:b7:3b:13:21:fb:e0:f4:bb:15:e0:79:b7:3c:
                    c2:64:75:2a:0d:92:ee:2b:75:4d:a6:34:b2:65:b9:
                    18:10:af:85:40:35:72:18:78:e2:42:8a:0d:c9:89:
                    f2:31:ad:79:1a:b0:34:04:29:19:fd:9c:7e:40:ad:
                    e3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BB:40:1D:3D:7F:39:D3:9F:28:EB:DA:AD:5D:E5:39:94:07:62:08
            X509v3 Authority Key Identifier:
                keyid:A1:F7:88:28:61:C2:9E:D5:99:BE:4A:93:74:80:C4:D1:3E:25:BF:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ofeIKGHCntWZvkqTdIDE0T4lv8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/S7tAHT1_OdOfKOvarV3lOZQHYgg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03bab8-6c43-4a20-a960-c37a5982f466/1/ofeIKGHCntWZvkqTdIDE0T4lv8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.181.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:a5:d2:d4:12:3f:a9:29:f4:9a:32:cf:63:df:27:c8:28:31:
         21:f2:1e:1e:14:4c:e4:ba:a5:41:f4:9f:22:91:50:a2:fb:ea:
         38:94:4b:02:e6:4b:39:71:94:e4:aa:3f:31:0f:e0:a7:9c:ac:
         56:26:41:01:56:9c:3f:f8:74:0d:f3:95:c5:4d:04:2a:fe:b4:
         a2:12:e1:2b:95:6c:bc:75:9c:26:fe:ec:b0:9d:d9:79:11:27:
         de:e7:44:9d:fd:3a:cf:48:6d:c2:6c:59:8f:38:85:88:63:38:
         de:20:5f:86:6d:b7:b4:c5:d7:d0:1e:56:8f:9a:29:54:1d:ed:
         c1:21:c7:f6:50:e3:70:b4:3a:b9:8c:a6:ef:a6:56:d1:29:5f:
         21:6a:08:e1:75:7a:2b:d3:1f:30:09:b4:54:0e:d7:cb:91:d3:
         42:78:b2:11:2d:02:93:6d:f4:cd:e9:d8:05:1b:88:86:9a:09:
         c0:8e:71:56:2c:7f:25:39:f2:10:60:ae:26:2e:ec:cb:a5:22:
         77:51:c9:e0:1c:04:0f:31:1b:9e:c9:c1:2f:37:00:9f:6f:15:
         86:a5:00:49:71:92:dc:75:ab:d8:13:80:3d:7e:0c:e1:13:fa:
         64:63:fb:b5:8a:10:64:96:f8:70:8e:2b:f2:60:82:e9:40:16:
         df:c7:f3:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVv1TeJb/2TgiYx/Kjm/spvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZjc4ODI4NjFjMjllZDU5OWJlNGE5Mzc0ODBjNGQxM2Uy
NWJmYzIwHhcNMjMwMTAyMDAxNTIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmJiNDAxZDNkN2YzOWQzOWYyOGViZGFhZDVkZTUzOTk0MDc2MjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKPS596U31QCHYQJbAxYpzSy9l1W
z1OzpuzEUeji5k0TPtyfHP5ZsiAl7hTkANsjHZKBxdYDJCjBFNp4I3ku3t+3tGzv
CNbec/xqwUO7Cri7WLq++2OQ/afg7Ubx//TtWBcVUbstbORf6Q7HsON14LJh/Ptw
9YGY4XYAt/kkSnHzop2kuS+vOtI9ijZYM6pWRtI42yRpX3PDmqNcbLeS/3gMY6zs
+KyyfqUHk8RAQOiOvsLsk2muLx8pmU3WghxL2gk4Jrc7EyH74PS7FeB5tzzCZHUq
DZLuK3VNpjSyZbkYEK+FQDVyGHjiQooNyYnyMa15GrA0BCkZ/Zx+QK3jHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEu7QB09fznTnyjr2q1d5TmUB2IIMB8GA1UdIwQY
MBaAFKH3iChhwp7Vmb5Kk3SAxNE+Jb/CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2ZlSUtHSENudFdadmtxVGRJREUwVDRsdjhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wM2JhYjgtNmM0My00YTIwLWE5NjAt
YzM3YTU5ODJmNDY2LzEvUzd0QUhUMV9PZE9mS092YXJWM2xPWlFIWWdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8wM2JhYjgtNmM0My00YTIwLWE5NjAtYzM3YTU5ODJmNDY2
LzEvb2ZlSUtHSENudFdadmtxVGRJREUwVDRsdjhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbWgMA0G
CSqGSIb3DQEBCwUAA4IBAQAjpdLUEj+pKfSaMs9j3yfIKDEh8h4eFEzkuqVB9J8i
kVCi++o4lEsC5ks5cZTkqj8xD+CnnKxWJkEBVpw/+HQN85XFTQQq/rSiEuErlWy8
dZwm/uywndl5ESfe50Sd/TrPSG3CbFmPOIWIYzjeIF+Gbbe0xdfQHlaPmilUHe3B
Icf2UONwtDq5jKbvplbRKV8hagjhdXor0x8wCbRUDtfLkdNCeLIRLQKTbfTN6dgF
G4iGmgnAjnFWLH8lOfIQYK4mLuzLpSJ3UcngHAQPMRueycEvNwCfbxWGpQBJcZLc
davYE4A9fgzhE/pkY/u1ihBklvhwjivyYILpQBbfx/NR
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:28 2024 by rpki-client on console-fra.rpki-client.org