Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/uErpKGl3vjfTP-ozgQLlitX8S9w.roa
File:                     uErpKGl3vjfTP-ozgQLlitX8S9w.roa (raw, json)
Hash identifier:          ZayG+k/1NYiRGsjQyPqJIv6KcjBmx6QBWjOrzlpsc/A=
Subject key identifier:   B8:4A:E9:28:69:77:BE:37:D3:3F:EA:33:81:02:E5:8A:D5:FC:4B:DC
Certificate issuer:       /CN=7a867d2c1a2905d54321f01a710b21ed7abd857d
Certificate serial:       01856F1D9C9D58C026504E1344F492D49204
Authority key identifier: 7A:86:7D:2C:1A:29:05:D5:43:21:F0:1A:71:0B:21:ED:7A:BD:85:7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/uErpKGl3vjfTP-ozgQLlitX8S9w.roa
Signing time:             Sun 01 Jan 2023 20:54:49 +0000
ROA not before:           Sun 01 Jan 2023 20:54:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44219
IP address blocks:        194.39.144.0/23 maxlen: 23
                          194.39.146.0/23 maxlen: 23
                          94.247.184.0/23 maxlen: 23
                          94.247.186.0/23 maxlen: 23
                          178.249.218.0/23 maxlen: 23
                          94.247.188.0/22 maxlen: 22
                          178.249.216.0/23 maxlen: 23
                          178.249.220.0/22 maxlen: 22
                          2a00:1cb0::/32 maxlen: 32

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 12:29:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:1d:9c:9d:58:c0:26:50:4e:13:44:f4:92:d4:92:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a867d2c1a2905d54321f01a710b21ed7abd857d
        Validity
            Not Before: Jan  1 20:54:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=b84ae9286977be37d33fea338102e58ad5fc4bdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f8:0f:46:3a:2f:28:b0:e8:50:9f:bc:95:c2:
                    4a:02:85:51:76:1b:f3:c7:57:c7:72:64:19:45:4d:
                    31:64:05:a9:31:59:b4:67:fe:ec:49:a1:25:dc:c5:
                    7c:dc:67:a7:2c:ab:a1:31:c4:46:66:22:89:88:40:
                    9b:b8:c4:d5:2d:c5:0c:2b:fc:08:24:4f:60:66:1a:
                    6d:de:39:9b:84:b8:83:f1:9d:b5:a3:bc:1f:8d:25:
                    25:2c:b7:5c:5f:56:f5:ce:c5:b3:cb:e5:df:31:f3:
                    49:4d:7a:36:68:50:63:a0:72:bf:46:01:e3:2f:19:
                    7f:f6:3f:dc:1d:c3:8e:83:7a:bc:7b:ce:11:99:96:
                    87:2d:d6:be:25:f2:6f:2e:4a:0b:71:6a:26:a2:9c:
                    4f:73:9e:e1:ac:c3:2d:6e:f2:01:a5:c9:5e:4d:e1:
                    d8:84:47:a7:5c:03:c9:1b:94:e9:f7:8b:33:fc:eb:
                    4c:38:06:ca:ce:78:a9:bf:a0:41:ed:f8:d9:bc:58:
                    fd:46:79:dd:4a:91:d8:a1:55:b4:89:98:93:fc:50:
                    72:8f:2b:52:fa:fe:69:90:43:d2:ae:cc:ac:fe:62:
                    9c:d4:5b:32:b6:21:b0:c0:30:87:ef:88:69:94:e6:
                    aa:6f:5a:69:fb:57:23:0e:67:f3:03:92:31:a7:70:
                    80:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:4A:E9:28:69:77:BE:37:D3:3F:EA:33:81:02:E5:8A:D5:FC:4B:DC
            X509v3 Authority Key Identifier:
                keyid:7A:86:7D:2C:1A:29:05:D5:43:21:F0:1A:71:0B:21:ED:7A:BD:85:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/uErpKGl3vjfTP-ozgQLlitX8S9w.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.247.184.0/21
                  178.249.216.0/21
                  194.39.144.0/22
                IPv6:
                  2a00:1cb0::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:f5:12:f6:bb:99:d7:b2:37:16:39:80:36:fa:b3:9b:ba:ec:
         e0:5b:d0:06:57:89:1d:6a:87:1d:f3:dd:6a:82:30:f4:57:a0:
         fa:2c:60:b8:fc:9d:2b:c8:d9:ae:c5:b7:f9:09:86:e9:ac:88:
         7a:b8:20:0d:c0:c2:58:86:32:cd:a0:e6:48:97:20:31:26:88:
         ef:61:8f:23:fb:36:e4:16:c1:3d:6d:0c:30:18:4e:98:1c:b3:
         27:66:cd:58:75:54:a0:97:32:f4:9b:62:64:64:e0:f8:58:df:
         30:d2:bd:d6:e1:4a:0d:a2:61:6f:43:75:7d:7d:38:33:95:05:
         1d:33:4a:47:98:a3:6e:7a:d7:50:90:a1:5a:16:91:25:8d:aa:
         5b:43:fb:ab:3b:e2:f8:d9:be:71:6c:c8:64:1e:e7:6f:5f:cc:
         f7:e5:fd:29:e1:52:9f:c9:df:7b:2b:e1:7e:0c:a2:b6:4c:e2:
         e6:b3:e1:86:ef:84:13:04:c1:2a:d1:fe:fc:56:18:b7:7e:39:
         49:9a:7b:83:d5:b7:ce:3e:17:61:84:f8:c6:c2:0d:93:1a:8d:
         9d:80:77:a3:22:57:fa:65:47:49:8f:04:9d:56:0a:1d:e8:ff:
         42:f2:9f:df:a6:ba:f0:18:2e:e7:4e:a3:78:38:6a:e9:46:06:
         8d:8f:d1:70
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYVvHZydWMAmUE4TRPSS1JIEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhODY3ZDJjMWEyOTA1ZDU0MzIxZjAxYTcxMGIyMWVkN2Fi
ZDg1N2QwHhcNMjMwMTAxMjA1NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODRhZTkyODY5NzdiZTM3ZDMzZmVhMzM4MTAyZTU4YWQ1ZmM0YmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofgPRjovKLDoUJ+8lcJKAoVRdhvz
x1fHcmQZRU0xZAWpMVm0Z/7sSaEl3MV83GenLKuhMcRGZiKJiECbuMTVLcUMK/wI
JE9gZhpt3jmbhLiD8Z21o7wfjSUlLLdcX1b1zsWzy+XfMfNJTXo2aFBjoHK/RgHj
Lxl/9j/cHcOOg3q8e84RmZaHLda+JfJvLkoLcWomopxPc57hrMMtbvIBpcleTeHY
hEenXAPJG5Tp94sz/OtMOAbKznipv6BB7fjZvFj9RnndSpHYoVW0iZiT/FByjytS
+v5pkEPSrsys/mKc1FsytiGwwDCH74hplOaqb1pp+1cjDmfzA5Ixp3CAHwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFLhK6Shpd7430z/qM4EC5YrV/EvcMB8GA1UdIwQY
MBaAFHqGfSwaKQXVQyHwGnELIe16vYV9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZW9aOUxCb3BCZFZESWZBYWNRc2g3WHE5aFgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yYTc3M2ItZWZhMC00YjQwLTk4NjEt
NmQ2ZjU1OGE3ZDY1LzEvdUVycEtHbDN2amZUUC1vemdRTGxpdFg4Uzl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8yYTc3M2ItZWZhMC00YjQwLTk4NjEtNmQ2ZjU1OGE3ZDY1
LzEvZW9aOUxCb3BCZFZESWZBYWNRc2g3WHE5aFgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDXve4AwQD
svnYAwQCwieQMA0EAgACMAcDBQAqABywMA0GCSqGSIb3DQEBCwUAA4IBAQAj9RL2
u5nXsjcWOYA2+rObuuzgW9AGV4kdaocd891qgjD0V6D6LGC4/J0ryNmuxbf5CYbp
rIh6uCANwMJYhjLNoOZIlyAxJojvYY8j+zbkFsE9bQwwGE6YHLMnZs1YdVSglzL0
m2JkZOD4WN8w0r3W4UoNomFvQ3V9fTgzlQUdM0pHmKNuetdQkKFaFpEljapbQ/ur
O+L42b5xbMhkHudvX8z35f0p4VKfyd97K+F+DKK2TOLms+GG74QTBMEq0f78Vhi3
fjlJmnuD1bfOPhdhhPjGwg2TGo2dgHejIlf6ZUdJjwSdVgod6P9C8p/fprrwGC7n
TqN4OGrpRgaNj9Fw
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:59:02 2024 by rpki-client on console-ams.rpki-client.org