Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/tju8bCG_9MVr-jywK4MOduaMYAY.roa
File:                     tju8bCG_9MVr-jywK4MOduaMYAY.roa (raw, json)
Hash identifier:          /740f5u1lrGMa1qYGE9U6+jmQ0r+y33WUYBfSY0RDmk=
Subject key identifier:   B6:3B:BC:6C:21:BF:F4:C5:6B:FA:3C:B0:2B:83:0E:76:E6:8C:60:06
Certificate issuer:       /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial:       01900B3BEAAA7A6A3EA38C178CCBBF45C660
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/tju8bCG_9MVr-jywK4MOduaMYAY.roa
Signing time:             Wed 12 Jun 2024 06:56:34 +0000
ROA not before:           Wed 12 Jun 2024 06:56:34 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     10753
IP address blocks:        185.131.207.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Fri 12 Jul 2024 10:15:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:0b:3b:ea:aa:7a:6a:3e:a3:8c:17:8c:cb:bf:45:c6:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
        Validity
            Not Before: Jun 12 06:56:34 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=b63bbc6c21bff4c56bfa3cb02b830e76e68c6006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e3:4c:44:1b:23:ef:54:48:de:06:05:04:c8:
                    3c:b3:90:36:2d:ed:67:d2:a3:89:cf:49:1d:6a:40:
                    d3:a2:39:8f:58:56:7a:85:7a:8c:3f:de:d2:65:a9:
                    a0:15:ff:fe:c6:6a:a9:68:9b:6f:73:ce:e5:2a:94:
                    1e:49:47:e0:a2:7f:5f:df:37:b5:85:6e:92:ac:fb:
                    6e:63:c1:74:f6:5f:0b:76:85:bb:b2:0d:ef:e8:ac:
                    ce:c3:ef:ec:8c:f3:35:00:30:a7:7a:b1:3d:a5:e2:
                    70:b1:f4:82:5b:0f:04:01:61:93:27:27:66:2e:3d:
                    a9:35:23:3b:dc:79:df:f8:54:69:67:cf:c8:f6:84:
                    0b:3f:e5:f7:cd:d7:2c:50:6b:5d:16:8a:5c:02:fa:
                    79:49:5f:3a:9b:06:fe:dd:85:9b:78:db:cd:79:c0:
                    89:ac:6a:5d:56:44:80:b7:2b:02:0d:da:13:fe:9c:
                    4c:33:36:c9:57:0f:ed:3c:06:73:ec:ea:e7:59:16:
                    10:68:9e:50:90:fc:74:f4:bd:ad:24:cc:6c:6d:62:
                    a5:7a:ea:be:c0:b0:9f:8d:36:61:d2:4b:78:d1:3d:
                    9e:87:75:f7:60:3f:d0:2c:06:14:f6:e2:5d:89:38:
                    20:81:cb:2a:d7:b8:cd:ba:55:14:d7:fa:84:0c:54:
                    c2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3B:BC:6C:21:BF:F4:C5:6B:FA:3C:B0:2B:83:0E:76:E6:8C:60:06
            X509v3 Authority Key Identifier:
                keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/tju8bCG_9MVr-jywK4MOduaMYAY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.131.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:67:4f:1d:de:b5:67:03:a2:68:45:50:69:31:87:eb:7e:db:
         9a:35:38:88:93:cf:3d:69:51:ea:b9:5e:7c:4c:17:d1:83:17:
         9c:0f:cd:f0:61:84:27:29:86:84:b6:1a:e0:72:44:bd:13:d8:
         ec:f4:a1:e8:6b:58:5c:dc:4a:b4:a5:07:b1:42:83:a7:0d:a8:
         0a:0e:d0:62:96:c7:1b:2f:cf:f7:a5:61:24:b4:56:04:65:db:
         43:c8:c1:97:31:c7:80:45:ab:01:1b:c6:74:d3:09:57:71:4c:
         ad:4d:c7:0c:2c:7a:58:9a:e1:88:61:42:1d:c0:b6:24:27:79:
         7e:c3:17:68:23:16:2f:c6:b7:b3:d1:bc:7a:e8:ed:00:cb:79:
         d8:f1:73:2f:ab:26:d0:a7:62:90:5f:41:ed:0e:01:82:cd:8b:
         c9:9f:24:7f:7c:26:a9:4c:01:4d:68:9c:1c:ea:e6:a1:bf:e6:
         8a:6a:fb:d8:ba:26:cb:5b:94:a8:35:c7:6d:d9:a0:e5:2e:b7:
         a2:46:e7:58:1f:59:00:2b:35:6f:d0:84:4f:ed:d9:ef:8b:0c:
         63:17:8d:53:da:e9:18:cf:56:83:d2:d5:31:2c:bc:5c:46:04:
         55:b9:c2:cd:f9:c0:4b:77:1c:51:6c:1e:24:61:6b:e3:e5:02:
         21:6f:23:b9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZALO+qqemo+o4wXjMu/RcZgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMjY0N2M4MDFmYjU4ZmNmYWFjMTM1YmI0OGY1ZTYxZmVh
N2U1NjYwHhcNMjQwNjEyMDY1NjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjNiYmM2YzIxYmZmNGM1NmJmYTNjYjAyYjgzMGU3NmU2OGM2MDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ONMRBsj71RI3gYFBMg8s5A2Le1n
0qOJz0kdakDTojmPWFZ6hXqMP97SZamgFf/+xmqpaJtvc87lKpQeSUfgon9f3ze1
hW6SrPtuY8F09l8LdoW7sg3v6KzOw+/sjPM1ADCnerE9peJwsfSCWw8EAWGTJydm
Lj2pNSM73Hnf+FRpZ8/I9oQLP+X3zdcsUGtdFopcAvp5SV86mwb+3YWbeNvNecCJ
rGpdVkSAtysCDdoT/pxMMzbJVw/tPAZz7OrnWRYQaJ5QkPx09L2tJMxsbWKleuq+
wLCfjTZh0kt40T2eh3X3YD/QLAYU9uJdiTgggcsq17jNulUU1/qEDFTC0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLY7vGwhv/TFa/o8sCuDDnbmjGAGMB8GA1UdIwQY
MBaAFAAmR8gB+1j8+qwTW7SPXmH+p+VmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODIt
OTRlZmJmNWNlY2Q0LzEvdGp1OGJDR185TVZyLWp5d0s0TU9kdWFNWUFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODItOTRlZmJmNWNlY2Q0
LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYPPMA0G
CSqGSIb3DQEBCwUAA4IBAQBbZ08d3rVnA6JoRVBpMYfrftuaNTiIk889aVHquV58
TBfRgxecD83wYYQnKYaEthrgckS9E9js9KHoa1hc3Eq0pQexQoOnDagKDtBilscb
L8/3pWEktFYEZdtDyMGXMceARasBG8Z00wlXcUytTccMLHpYmuGIYUIdwLYkJ3l+
wxdoIxYvxrez0bx66O0Ay3nY8XMvqybQp2KQX0HtDgGCzYvJnyR/fCapTAFNaJwc
6uahv+aKavvYuibLW5SoNcdt2aDlLreiRudYH1kAKzVv0IRP7dnviwxjF41T2ukY
z1aD0tUxLLxcRgRVucLN+cBLdxxRbB4kYWvj5QIhbyO5
-----END CERTIFICATE-----
Generated at Fri Jul 12 11:38:41 2024 by rpki-client on console-fra.rpki-client.org