Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/zzmUu_4cxzv6r6c4uoeoEr3_c54.roa
File:                     zzmUu_4cxzv6r6c4uoeoEr3_c54.roa (raw, json)
Hash identifier:          o3NpAdawP9OSuD2N1+uVyetCVdzND3F57Rl+1q/LHOc=
Subject key identifier:   CF:39:94:BB:FE:1C:C7:3B:FA:AF:A7:38:BA:87:A8:12:BD:FF:73:9E
Certificate issuer:       /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial:       01856B532550A20400B031658AD0CACE0CA0
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/zzmUu_4cxzv6r6c4uoeoEr3_c54.roa
Signing time:             Sun 01 Jan 2023 03:14:49 +0000
ROA not before:           Sun 01 Jan 2023 03:14:49 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     209371
IP address blocks:        213.238.184.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 22:31:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:53:25:50:a2:04:00:b0:31:65:8a:d0:ca:ce:0c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
        Validity
            Not Before: Jan  1 03:14:49 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=cf3994bbfe1cc73bfaafa738ba87a812bdff739e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8b:3f:12:61:b8:7c:74:90:d6:b9:71:16:58:
                    22:c2:cb:88:9b:51:6c:56:2d:8e:af:b6:9c:9b:d4:
                    97:92:a1:e7:c7:4a:ae:36:ce:57:45:c8:40:93:e2:
                    98:59:5b:35:52:9e:d9:af:6d:8a:12:31:22:16:85:
                    d2:e0:a6:34:32:d5:99:a9:03:36:95:17:48:af:35:
                    d8:ac:fe:d1:52:63:8c:0b:a1:80:56:e5:6a:c3:a9:
                    cc:72:42:02:34:80:e6:07:91:56:78:f3:ae:f9:ef:
                    68:bf:e8:93:83:02:1f:f5:9c:d1:a3:42:cc:8b:5a:
                    76:20:ec:92:d6:d8:69:40:9d:13:38:31:4f:98:3d:
                    e0:8d:42:07:ab:d8:64:a3:1a:57:0b:14:7a:84:0e:
                    ad:c9:fd:fb:47:1e:7f:db:90:4d:4a:9a:41:f0:f3:
                    6b:7c:01:66:73:1a:7a:7c:d9:3a:49:cf:62:13:b2:
                    bc:0b:ad:6a:ac:89:52:f6:6a:f1:54:55:b8:c9:98:
                    3a:cc:18:45:8b:2f:1f:00:57:19:ad:a1:a9:3e:0c:
                    b8:38:10:34:81:22:b2:51:58:c2:29:76:0a:9f:d0:
                    20:86:e2:57:94:fe:08:15:3d:d2:27:a1:87:57:2a:
                    20:51:9f:62:3e:9e:69:29:20:c3:ed:28:70:60:9e:
                    43:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:39:94:BB:FE:1C:C7:3B:FA:AF:A7:38:BA:87:A8:12:BD:FF:73:9E
            X509v3 Authority Key Identifier:
                keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/zzmUu_4cxzv6r6c4uoeoEr3_c54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  213.238.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:73:18:72:69:66:56:48:27:de:3b:46:e9:f2:86:c8:52:56:
         2b:b3:63:f0:d0:cf:35:cc:3f:a8:43:0c:f1:da:48:8a:c1:55:
         c0:77:05:4c:df:6b:70:a8:a6:93:d3:4a:0f:95:29:78:2b:e2:
         31:1e:4d:bf:1a:68:c3:6c:8f:57:2d:bd:6d:3e:84:5a:5c:ba:
         9f:59:8e:fd:dc:49:7c:8d:aa:36:b5:39:29:ab:a5:75:c9:65:
         64:cc:9a:cc:b0:5c:11:b5:8c:fb:6d:5b:5c:37:0c:d0:0c:45:
         47:92:92:f7:50:8c:e9:ef:51:ce:f4:fa:96:93:93:e6:46:05:
         07:83:15:f8:94:7f:e5:cc:dd:cb:e2:ee:bc:ee:cc:a2:77:a8:
         2c:4e:d4:e1:73:08:1f:85:8d:a1:7e:cd:47:c4:62:01:05:be:
         4a:57:49:1e:78:b3:65:e1:70:c4:65:2e:31:89:a1:c7:82:8c:
         d6:d0:67:48:a2:06:8a:79:86:1a:fe:86:09:99:fc:eb:6b:30:
         30:35:7b:35:6d:ab:08:31:60:ef:8b:ff:ee:6c:50:7b:af:11:
         fc:09:8c:6f:69:bc:12:84:10:31:1c:51:8b:4f:1d:13:5b:65:
         12:07:64:01:a2:50:bd:5e:30:d7:2d:15:f8:85:2e:b1:57:07:
         51:56:df:bb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrUyVQogQAsDFlitDKzgygMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0
MGRlM2YwHhcNMjMwMTAxMDMxNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZjM5OTRiYmZlMWNjNzNiZmFhZmE3MzhiYTg3YTgxMmJkZmY3MzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIs/EmG4fHSQ1rlxFlgiwsuIm1Fs
Vi2Or7acm9SXkqHnx0quNs5XRchAk+KYWVs1Up7Zr22KEjEiFoXS4KY0MtWZqQM2
lRdIrzXYrP7RUmOMC6GAVuVqw6nMckICNIDmB5FWePOu+e9ov+iTgwIf9ZzRo0LM
i1p2IOyS1thpQJ0TODFPmD3gjUIHq9hkoxpXCxR6hA6tyf37Rx5/25BNSppB8PNr
fAFmcxp6fNk6Sc9iE7K8C61qrIlS9mrxVFW4yZg6zBhFiy8fAFcZraGpPgy4OBA0
gSKyUVjCKXYKn9AghuJXlP4IFT3SJ6GHVyogUZ9iPp5pKSDD7ShwYJ5DVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM85lLv+HMc7+q+nOLqHqBK9/3OeMB8GA1UdIwQY
MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt
Y2QzMTYxNWQwMWE5LzEvenptVXVfNGN4enY2cjZjNHVvZW9FcjNfYzU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5
LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1e64MA0G
CSqGSIb3DQEBCwUAA4IBAQAfcxhyaWZWSCfeO0bp8obIUlYrs2Pw0M81zD+oQwzx
2kiKwVXAdwVM32twqKaT00oPlSl4K+IxHk2/GmjDbI9XLb1tPoRaXLqfWY793El8
jao2tTkpq6V1yWVkzJrMsFwRtYz7bVtcNwzQDEVHkpL3UIzp71HO9PqWk5PmRgUH
gxX4lH/lzN3L4u687syid6gsTtThcwgfhY2hfs1HxGIBBb5KV0keeLNl4XDEZS4x
iaHHgozW0GdIogaKeYYa/oYJmfzrazAwNXs1basIMWDvi//ubFB7rxH8CYxvabwS
hBAxHFGLTx0TW2USB2QBolC9XjDXLRX4hS6xVwdRVt+7
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:27 2024 by rpki-client on console-fra.rpki-client.org