Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/d9Yox_4ktcAMR-VtXAdy2eNvG2g.roa
File:                     d9Yox_4ktcAMR-VtXAdy2eNvG2g.roa (raw, json)
Hash identifier:          PIndjnFW2gw29vZG59zx1XTuDGUIe3K5fvqsBACzMX8=
Subject key identifier:   77:D6:28:C7:FE:24:B5:C0:0C:47:E5:6D:5C:07:72:D9:E3:6F:1B:68
Certificate issuer:       /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial:       01856E1425793E990D3F35C0E2D802230332
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/d9Yox_4ktcAMR-VtXAdy2eNvG2g.roa
Signing time:             Sun 01 Jan 2023 16:04:52 +0000
ROA not before:           Sun 01 Jan 2023 16:04:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212512
IP address blocks:        93.190.8.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 28 Nov 2023 16:49:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:14:25:79:3e:99:0d:3f:35:c0:e2:d8:02:23:03:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
        Validity
            Not Before: Jan  1 16:04:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=77d628c7fe24b5c00c47e56d5c0772d9e36f1b68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:05:a8:ef:c2:83:f2:a0:38:c6:a1:ae:12:88:
                    65:11:b9:18:13:6a:60:60:b9:20:4b:f7:62:b1:74:
                    a1:a5:b6:74:d2:eb:96:2e:58:3f:68:65:65:e7:1c:
                    67:49:94:b0:5b:6f:4e:fa:60:25:ff:7b:1e:e0:dc:
                    d7:62:54:60:03:e5:9c:19:34:53:b1:c4:51:46:fc:
                    79:87:bd:a0:69:1c:f4:25:19:6e:dc:fa:6b:76:0e:
                    de:a9:2d:f2:4a:bd:7b:0a:b0:54:b0:dd:37:e3:ba:
                    4e:99:45:35:6c:9a:e0:cc:19:94:49:38:e8:85:3b:
                    40:93:67:19:64:02:37:61:b4:6f:4f:d2:67:43:c2:
                    91:5b:36:f1:50:0f:51:33:c7:87:8e:40:6e:de:6f:
                    e5:bf:5e:76:00:96:c9:c9:7c:4b:3a:0c:b0:a7:db:
                    df:d7:8b:a5:a3:e8:b0:5b:ad:00:e3:45:b1:2c:10:
                    87:df:e7:8b:cc:25:0c:72:cd:94:ca:fa:47:90:51:
                    6c:1e:05:af:3a:93:54:e1:0d:01:8f:f6:a6:8d:ed:
                    2c:5d:12:70:20:79:98:bf:b8:1f:14:99:bb:e1:61:
                    0e:39:da:e0:5d:ff:67:6f:33:4b:ed:29:e5:63:31:
                    3f:5c:dc:35:21:70:d5:00:50:03:e2:03:4c:32:d5:
                    b7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D6:28:C7:FE:24:B5:C0:0C:47:E5:6D:5C:07:72:D9:E3:6F:1B:68
            X509v3 Authority Key Identifier:
                keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/d9Yox_4ktcAMR-VtXAdy2eNvG2g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.190.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:3f:e6:b4:0d:34:7c:4f:1c:4f:8a:27:bb:cf:5f:5e:04:a7:
         b9:d5:0c:8a:65:db:52:89:d8:c3:a6:1e:aa:6c:79:84:54:9b:
         1d:96:57:ab:10:18:87:ef:49:e8:4f:71:39:9e:b6:41:03:c9:
         a8:05:e2:3f:77:73:d7:67:fa:bf:23:57:9f:58:06:ac:85:3f:
         5c:4f:b7:c7:d7:5f:ea:98:9c:c7:d6:2f:9c:ca:80:44:bc:53:
         8e:72:a4:7a:66:de:a8:09:10:3f:83:f6:83:9f:f8:e9:c9:bc:
         ba:d0:c7:48:d0:df:e9:c3:48:18:82:81:4f:a2:5c:43:44:63:
         f6:17:5c:6e:ab:4a:ee:64:72:99:0c:6e:df:79:f9:ed:1b:46:
         7b:8f:6d:34:97:a3:a4:4b:f5:20:63:59:9a:fd:3b:3a:5a:cc:
         88:25:99:58:7c:f0:ea:af:06:df:0c:68:50:d5:fa:54:39:84:
         db:33:6b:31:29:9c:47:79:76:5d:fd:dd:a2:0b:90:35:73:98:
         56:bf:6f:0e:10:47:3a:9d:4c:7f:d6:01:a3:3b:15:d7:fd:53:
         28:a2:01:20:ee:d1:54:e3:34:d6:91:45:e4:00:2c:f7:97:5a:
         52:b2:ff:5a:78:60:84:ee:3e:2b:e8:fc:ae:6f:b3:d0:ca:67:
         99:31:f2:66
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuFCV5PpkNPzXA4tgCIwMyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOTUwOWIzM2RhNTVmM2U1ZDUyODNlYjYyMWQwZDM1ZDdh
ZWVkNWMwHhcNMjMwMTAxMTYwNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2Q2MjhjN2ZlMjRiNWMwMGM0N2U1NmQ1YzA3NzJkOWUzNmYxYjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQWo78KD8qA4xqGuEohlEbkYE2pg
YLkgS/disXShpbZ00uuWLlg/aGVl5xxnSZSwW29O+mAl/3se4NzXYlRgA+WcGTRT
scRRRvx5h72gaRz0JRlu3Pprdg7eqS3ySr17CrBUsN0347pOmUU1bJrgzBmUSTjo
hTtAk2cZZAI3YbRvT9JnQ8KRWzbxUA9RM8eHjkBu3m/lv152AJbJyXxLOgywp9vf
14ulo+iwW60A40WxLBCH3+eLzCUMcs2UyvpHkFFsHgWvOpNU4Q0Bj/amje0sXRJw
IHmYv7gfFJm74WEOOdrgXf9nbzNL7SnlYzE/XNw1IXDVAFAD4gNMMtW32wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHfWKMf+JLXADEflbVwHctnjbxtoMB8GA1UdIwQY
MBaAFE+VCbM9pV8+XVKD62IdDTXXru1cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQt
NjAxMDdlMmI1MTA5LzEvZDlZb3hfNGt0Y0FNUi1WdFhBZHkyZU52RzJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQtNjAxMDdlMmI1MTA5
LzEvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXb4IMA0G
CSqGSIb3DQEBCwUAA4IBAQA+P+a0DTR8TxxPiie7z19eBKe51QyKZdtSidjDph6q
bHmEVJsdllerEBiH70noT3E5nrZBA8moBeI/d3PXZ/q/I1efWAashT9cT7fH11/q
mJzH1i+cyoBEvFOOcqR6Zt6oCRA/g/aDn/jpyby60MdI0N/pw0gYgoFPolxDRGP2
F1xuq0ruZHKZDG7fefntG0Z7j200l6OkS/UgY1ma/Ts6WsyIJZlYfPDqrwbfDGhQ
1fpUOYTbM2sxKZxHeXZd/d2iC5A1c5hWv28OEEc6nUx/1gGjOxXX/VMoogEg7tFU
4zTWkUXkACz3l1pSsv9aeGCE7j4r6Pyub7PQymeZMfJm
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:50 2024 by rpki-client on console-fra.rpki-client.org