Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/EVYdt-ZAOCW8YTCMeGHIHOxvA5Y.roa
File:                     EVYdt-ZAOCW8YTCMeGHIHOxvA5Y.roa (raw, json)
Hash identifier:          XkHMs3bHN4LrrvjNKO3YqFASqDEz4tyf5+vjFMwKpo8=
Subject key identifier:   11:56:1D:B7:E6:40:38:25:BC:61:30:8C:78:61:C8:1C:EC:6F:03:96
Certificate issuer:       /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial:       01856BCA215ED8D2D70D15BBB4848DFFF4C1
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/EVYdt-ZAOCW8YTCMeGHIHOxvA5Y.roa
Signing time:             Sun 01 Jan 2023 05:24:46 +0000
ROA not before:           Sun 01 Jan 2023 05:24:46 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     212396
IP address blocks:        193.110.160.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:ca:21:5e:d8:d2:d7:0d:15:bb:b4:84:8d:ff:f4:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
        Validity
            Not Before: Jan  1 05:24:46 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=11561db7e6403825bc61308c7861c81cec6f0396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5c:3b:11:a8:ab:10:ad:0a:3c:3e:3c:41:29:
                    eb:35:6e:ee:0a:06:9a:af:5f:b5:c1:43:25:db:aa:
                    8c:d4:42:0a:77:9e:8d:95:8e:92:69:8c:a6:62:5b:
                    87:d6:21:b9:de:27:c1:93:5a:1f:0e:8c:f0:4f:9e:
                    9b:6a:7e:11:31:8f:81:88:c0:fa:a6:4d:e6:2f:24:
                    f6:97:56:8a:b4:ae:34:1a:c6:9b:52:1f:e8:65:02:
                    72:42:3c:1e:61:df:b1:e5:39:6e:b2:b0:04:39:0c:
                    c0:3d:ec:c4:95:c6:3d:97:c4:69:3e:0f:e2:8c:28:
                    38:5f:b9:98:c4:a9:ee:ff:7f:71:8d:2b:38:bf:00:
                    d6:9f:5c:19:ed:2d:f4:c9:91:5b:ec:4a:bd:4c:c8:
                    cf:d3:78:80:af:67:6f:06:26:c1:06:98:cc:7a:9d:
                    2c:34:cb:2f:ab:5c:e9:e6:f5:6c:90:77:70:19:30:
                    a6:39:a2:9b:34:5d:b6:68:f8:31:40:9b:5b:6b:85:
                    ed:41:1e:04:9f:b7:ab:e7:3a:99:8f:95:4f:52:14:
                    9b:94:37:87:4a:da:af:83:1a:7b:19:70:63:33:19:
                    81:f1:e2:6f:bb:a7:9f:39:a4:27:0f:73:a6:1a:4e:
                    3b:1a:9d:9c:35:de:83:0c:2e:63:ec:94:42:ff:7e:
                    00:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:56:1D:B7:E6:40:38:25:BC:61:30:8C:78:61:C8:1C:EC:6F:03:96
            X509v3 Authority Key Identifier:
                keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/EVYdt-ZAOCW8YTCMeGHIHOxvA5Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.110.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:75:80:7f:7b:7b:88:b3:55:50:0d:02:b0:88:cf:f3:37:c0:
         4c:aa:f7:f1:30:1a:38:f8:5a:57:ca:36:9b:0b:2a:a3:d0:3b:
         eb:e1:cf:40:bd:1e:bb:4c:26:f1:86:c6:b5:bf:94:0f:bb:0a:
         f6:44:9c:2d:f9:26:d7:db:41:e0:03:80:99:48:9a:bf:94:02:
         76:2f:82:88:ea:63:f0:3f:85:90:38:61:62:12:7e:2e:35:5a:
         b0:35:96:79:4c:a8:93:20:55:1f:57:4a:99:f5:03:cc:de:63:
         78:f6:76:f6:27:c7:69:1a:b0:aa:40:8b:72:66:be:13:0b:da:
         9e:21:f8:c6:61:7c:a2:6f:16:fd:27:e3:2f:e4:cf:fb:8b:ee:
         2a:59:21:4f:8a:c9:25:51:98:92:c5:b3:da:86:24:2d:5b:88:
         88:68:37:60:94:76:ea:b6:fd:cf:4e:4b:b7:d6:45:2f:1d:bf:
         49:7f:15:d2:cc:85:c9:e8:a4:92:2c:c0:73:d2:fb:b1:7e:60:
         77:58:aa:24:10:49:3e:76:62:aa:41:05:31:d0:0b:73:ab:3c:
         e1:2a:e2:6f:be:89:6c:48:97:1f:25:53:83:b3:1a:a6:71:e6:
         27:ee:d8:71:c0:78:d9:58:bb:09:05:38:2d:5b:89:6e:3f:4a:
         a2:0d:6b:75
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVryiFe2NLXDRW7tISN//TBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl
NzM2NjQwHhcNMjMwMTAxMDUyNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTU2MWRiN2U2NDAzODI1YmM2MTMwOGM3ODYxYzgxY2VjNmYwMzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVw7EairEK0KPD48QSnrNW7uCgaa
r1+1wUMl26qM1EIKd56NlY6SaYymYluH1iG53ifBk1ofDozwT56ban4RMY+BiMD6
pk3mLyT2l1aKtK40GsabUh/oZQJyQjweYd+x5TlusrAEOQzAPezElcY9l8RpPg/i
jCg4X7mYxKnu/39xjSs4vwDWn1wZ7S30yZFb7Eq9TMjP03iAr2dvBibBBpjMep0s
NMsvq1zp5vVskHdwGTCmOaKbNF22aPgxQJtba4XtQR4En7er5zqZj5VPUhSblDeH
Stqvgxp7GXBjMxmB8eJvu6efOaQnD3OmGk47Gp2cNd6DDC5j7JRC/34AfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBFWHbfmQDglvGEwjHhhyBzsbwOWMB8GA1UdIwQY
MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt
OGMxNTM5NjViYWM5LzEvRVZZZHQtWkFPQ1c4WVRDTWVHSElIT3h2QTVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5
LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW6gMA0G
CSqGSIb3DQEBCwUAA4IBAQCOdYB/e3uIs1VQDQKwiM/zN8BMqvfxMBo4+FpXyjab
Cyqj0Dvr4c9AvR67TCbxhsa1v5QPuwr2RJwt+SbX20HgA4CZSJq/lAJ2L4KI6mPw
P4WQOGFiEn4uNVqwNZZ5TKiTIFUfV0qZ9QPM3mN49nb2J8dpGrCqQItyZr4TC9qe
IfjGYXyibxb9J+Mv5M/7i+4qWSFPisklUZiSxbPahiQtW4iIaDdglHbqtv3PTku3
1kUvHb9JfxXSzIXJ6KSSLMBz0vuxfmB3WKokEEk+dmKqQQUx0AtzqzzhKuJvvols
SJcfJVODsxqmceYn7thxwHjZWLsJBTgtW4luP0qiDWt1
-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:00 2024 by rpki-client on console-fra.rpki-client.org