Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/rYoOsJ3AqPwyrf_5lMcBEWZhOTk.roa
File:                     rYoOsJ3AqPwyrf_5lMcBEWZhOTk.roa (raw, json)
Hash identifier:          RGc0kxhpK+URdJb6nLWU7gn8nzjj0NI1k3CPI7CpWJc=
Subject key identifier:   AD:8A:0E:B0:9D:C0:A8:FC:32:AD:FF:F9:94:C7:01:11:66:61:39:39
Certificate issuer:       /CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c
Certificate serial:       01856F14BEC0126ED2A68EE8E10EE621679D
Authority key identifier: 93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/rYoOsJ3AqPwyrf_5lMcBEWZhOTk.roa
Signing time:             Sun 01 Jan 2023 20:45:08 +0000
ROA not before:           Sun 01 Jan 2023 20:45:08 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     52080
IP address blocks:        193.105.110.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 10:30:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:14:be:c0:12:6e:d2:a6:8e:e8:e1:0e:e6:21:67:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93758f92a7fd7359ba2848125a84dfcc42d14b6c
        Validity
            Not Before: Jan  1 20:45:08 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ad8a0eb09dc0a8fc32adfff994c7011166613939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3e:50:d1:04:a5:1c:c1:39:82:a1:ee:0f:0b:
                    c5:3d:2b:98:10:e1:ed:73:66:8c:fa:4c:35:cb:83:
                    3b:bd:4a:c4:61:7f:de:df:93:54:25:03:03:fc:97:
                    6a:af:5c:3a:98:32:da:69:8b:28:30:82:4b:1b:90:
                    8d:26:cf:54:92:93:41:47:a0:8d:e7:b7:56:9f:6d:
                    78:52:dd:35:f4:1a:54:4c:da:39:68:f5:f9:70:d8:
                    df:30:8b:6e:72:be:06:42:37:dc:84:e1:29:be:04:
                    2c:c0:28:35:e2:6e:40:0f:c5:79:e2:63:47:b9:98:
                    5e:04:30:41:0f:b5:82:f9:e0:c4:26:64:c0:f0:3b:
                    8f:2c:c9:38:32:31:4e:db:b0:fa:8f:a2:e3:ad:60:
                    6c:79:b9:84:55:2a:6a:7c:17:99:be:aa:d5:c1:9d:
                    cb:33:c0:3e:d9:99:f3:92:2d:e1:53:79:94:15:97:
                    51:c3:ab:81:bf:82:22:6e:eb:5b:ea:5d:fa:eb:ed:
                    ff:69:7c:d4:25:86:69:6f:43:fd:89:29:01:e3:be:
                    7a:e8:e9:3e:55:b0:60:0d:c3:d9:9c:c7:b7:40:31:
                    0a:ba:18:19:29:e7:7f:16:7f:c9:d2:dd:37:71:1b:
                    d6:69:ec:c5:78:ab:19:34:0e:d1:87:1b:65:53:98:
                    ce:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:8A:0E:B0:9D:C0:A8:FC:32:AD:FF:F9:94:C7:01:11:66:61:39:39
            X509v3 Authority Key Identifier:
                keyid:93:75:8F:92:A7:FD:73:59:BA:28:48:12:5A:84:DF:CC:42:D1:4B:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3WPkqf9c1m6KEgSWoTfzELRS2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/rYoOsJ3AqPwyrf_5lMcBEWZhOTk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0f6d4a-1166-4d2d-a921-e143faaa0b82/1/k3WPkqf9c1m6KEgSWoTfzELRS2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.105.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:f6:63:30:28:9b:58:0f:17:e5:51:a9:5a:d7:36:45:87:7d:
         01:fc:60:db:16:73:01:87:de:06:8b:f8:96:7f:d6:ff:0e:66:
         ff:14:9d:f7:07:6e:59:b8:0e:16:be:87:ba:c4:9f:09:c8:5b:
         5f:4c:bf:58:79:82:25:e7:ee:92:25:16:c7:a4:9a:84:17:79:
         de:a9:87:43:b6:4a:96:a5:c8:65:0f:04:67:90:eb:c7:a9:c3:
         f2:b5:c6:8f:d3:98:45:da:15:4e:d9:5d:7f:be:7d:8a:ab:43:
         1c:3b:85:76:89:e9:af:d9:cb:e9:bb:4c:0e:a6:02:d6:f2:15:
         f3:ae:98:b0:71:97:a4:3f:f0:d1:3b:fc:5a:70:7c:aa:9a:5e:
         8f:fa:e0:f7:e4:ae:96:4f:61:ce:58:99:96:a4:ed:74:41:11:
         07:c5:1d:89:2c:61:a5:6e:23:46:4d:37:df:c5:3b:d3:18:95:
         af:9d:40:a6:55:08:05:6c:0e:6b:b1:bc:62:b9:5f:d8:48:42:
         0b:39:fe:76:bc:cb:39:de:d3:3f:c5:bb:d6:56:d3:ea:e1:0a:
         8c:f6:b5:06:27:3a:0f:e6:89:0f:1c:6d:fc:68:65:e5:56:da:
         7d:62:db:ae:71:e0:a8:ac:e9:eb:40:eb:45:13:83:0c:68:4f:
         cb:d9:f0:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvFL7AEm7Spo7o4Q7mIWedMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNzU4ZjkyYTdmZDczNTliYTI4NDgxMjVhODRkZmNjNDJk
MTRiNmMwHhcNMjMwMTAxMjA0NTA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDhhMGViMDlkYzBhOGZjMzJhZGZmZjk5NGM3MDExMTY2NjEzOTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT5Q0QSlHME5gqHuDwvFPSuYEOHt
c2aM+kw1y4M7vUrEYX/e35NUJQMD/Jdqr1w6mDLaaYsoMIJLG5CNJs9UkpNBR6CN
57dWn214Ut019BpUTNo5aPX5cNjfMItucr4GQjfchOEpvgQswCg14m5AD8V54mNH
uZheBDBBD7WC+eDEJmTA8DuPLMk4MjFO27D6j6LjrWBsebmEVSpqfBeZvqrVwZ3L
M8A+2Znzki3hU3mUFZdRw6uBv4Iibutb6l366+3/aXzUJYZpb0P9iSkB47566Ok+
VbBgDcPZnMe3QDEKuhgZKed/Fn/J0t03cRvWaezFeKsZNA7RhxtlU5jO5wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK2KDrCdwKj8Mq3/+ZTHARFmYTk5MB8GA1UdIwQY
MBaAFJN1j5Kn/XNZuihIElqE38xC0UtsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazNXUGtxZjljMW02S0VnU1dvVGZ6RUxSUzJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wZjZkNGEtMTE2Ni00ZDJkLWE5MjEt
ZTE0M2ZhYWEwYjgyLzEvcllvT3NKM0FxUHd5cmZfNWxNY0JFV1poT1RrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8wZjZkNGEtMTE2Ni00ZDJkLWE5MjEtZTE0M2ZhYWEwYjgy
LzEvazNXUGtxZjljMW02S0VnU1dvVGZ6RUxSUzJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWluMA0G
CSqGSIb3DQEBCwUAA4IBAQB99mMwKJtYDxflUala1zZFh30B/GDbFnMBh94Gi/iW
f9b/Dmb/FJ33B25ZuA4Wvoe6xJ8JyFtfTL9YeYIl5+6SJRbHpJqEF3neqYdDtkqW
pchlDwRnkOvHqcPytcaP05hF2hVO2V1/vn2Kq0McO4V2iemv2cvpu0wOpgLW8hXz
rpiwcZekP/DRO/xacHyqml6P+uD35K6WT2HOWJmWpO10QREHxR2JLGGlbiNGTTff
xTvTGJWvnUCmVQgFbA5rsbxiuV/YSEILOf52vMs53tM/xbvWVtPq4QqM9rUGJzoP
5okPHG38aGXlVtp9YtuuceCorOnrQOtFE4MMaE/L2fBz
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:18 2024 by rpki-client on console-fra.rpki-client.org