Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/isIokoAP4UQzMNNQ2eUlu5gOR1g.roa
File:                     isIokoAP4UQzMNNQ2eUlu5gOR1g.roa (raw, json)
Hash identifier:          27305u14L0bCCx8NLb7K9GkG4EN6dkVcQSBuEwn8ryw=
Subject key identifier:   8A:C2:28:92:80:0F:E1:44:33:30:D3:50:D9:E5:25:BB:98:0E:47:58
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       018571D7CBDE1F3A5B5831D567738C690FBA
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/isIokoAP4UQzMNNQ2eUlu5gOR1g.roa
Signing time:             Mon 02 Jan 2023 09:37:25 +0000
ROA not before:           Mon 02 Jan 2023 09:37:25 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3356
IP address blocks:        188.255.229.0/24 maxlen: 24
                          77.105.4.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d7:cb:de:1f:3a:5b:58:31:d5:67:73:8c:69:0f:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Jan  2 09:37:25 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8ac22892800fe1443330d350d9e525bb980e4758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:42:ea:2d:4c:f0:1d:d6:2e:39:d2:15:6d:6b:
                    c2:bd:ef:fd:a1:01:f4:23:bb:27:e7:71:81:5b:b4:
                    20:0d:41:20:61:c8:44:22:e4:fd:64:57:2c:06:ef:
                    af:12:35:c2:90:59:fb:65:a0:e1:d4:c9:b1:d6:d5:
                    89:e7:82:4f:10:ab:85:0a:03:de:b6:94:4a:a8:82:
                    2b:8c:b8:38:46:fc:a0:cc:ad:87:64:85:9d:22:5e:
                    f2:c1:06:ba:9b:d4:59:5d:ca:1e:b1:99:c7:bd:28:
                    38:a8:66:4c:8d:db:c9:f1:78:d9:4e:6e:70:d3:64:
                    83:b3:0a:02:b1:db:38:45:eb:e2:f7:03:d3:dc:96:
                    da:c1:a0:0a:01:8a:2b:84:6c:bd:5e:24:17:58:ae:
                    c6:ee:fd:87:6f:40:34:99:43:3b:eb:36:f3:af:31:
                    b1:57:73:9f:09:cd:46:94:cc:da:9b:68:df:20:09:
                    23:62:01:68:07:07:6f:48:a0:c8:30:21:fe:ef:6c:
                    c8:ee:3d:ac:24:04:aa:d7:86:ac:4a:47:61:9f:28:
                    89:1f:4f:41:20:23:f6:aa:79:6f:54:8f:40:9c:ad:
                    ac:45:13:4b:bd:b9:c1:26:55:a9:5d:ec:6a:15:3a:
                    f0:bf:06:4f:42:40:1f:28:c4:fe:86:84:bc:e2:40:
                    d2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C2:28:92:80:0F:E1:44:33:30:D3:50:D9:E5:25:BB:98:0E:47:58
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/isIokoAP4UQzMNNQ2eUlu5gOR1g.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.105.4.0/24
                  188.255.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:29:a8:1d:93:aa:76:40:8f:f1:f7:20:4a:57:6f:33:fc:52:
         32:ca:76:cf:31:ef:43:36:19:7a:af:7c:f9:2d:f4:de:4f:c8:
         1d:d0:d9:75:2d:12:4f:fb:61:fd:b5:1d:1e:36:9b:a8:bc:c3:
         85:c8:f1:2c:1f:3c:b1:5d:84:f0:9c:46:93:08:aa:b0:3f:84:
         01:15:67:85:2e:53:88:bf:8d:85:d2:0e:09:13:14:88:d7:20:
         f0:a8:30:56:58:3a:a6:c3:50:75:c2:83:19:e0:9b:45:c3:0a:
         ff:9a:a4:2a:d2:04:c3:01:d6:a5:35:38:bd:e0:49:64:9f:91:
         f6:e0:52:06:dc:37:90:25:63:42:a1:c3:ef:c5:78:41:f6:b2:
         9e:97:6a:4b:b4:90:88:5e:6d:06:bf:c9:f7:6b:16:df:6c:77:
         76:7c:56:6c:2d:cf:14:25:11:e1:bb:f1:0d:b7:47:b2:cb:9b:
         68:1b:0b:95:c7:00:c2:ed:fb:29:b3:74:d7:43:a4:f1:d7:b0:
         bf:ab:f5:36:48:36:6e:ce:10:51:0f:33:9e:74:8b:7a:2b:52:
         06:36:88:c0:c5:23:fb:14:72:8b:fa:1a:59:d7:20:bf:46:9e:
         96:82:17:28:23:8a:1c:ac:fc:9c:9a:72:c8:26:5c:41:96:e7:
         4a:6c:8c:b9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVx18veHzpbWDHVZ3OMaQ+6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjMwMTAyMDkzNzI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWMyMjg5MjgwMGZlMTQ0MzMzMGQzNTBkOWU1MjViYjk4MGU0NzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgULqLUzwHdYuOdIVbWvCve/9oQH0
I7sn53GBW7QgDUEgYchEIuT9ZFcsBu+vEjXCkFn7ZaDh1Mmx1tWJ54JPEKuFCgPe
tpRKqIIrjLg4RvygzK2HZIWdIl7ywQa6m9RZXcoesZnHvSg4qGZMjdvJ8XjZTm5w
02SDswoCsds4Revi9wPT3JbawaAKAYorhGy9XiQXWK7G7v2Hb0A0mUM76zbzrzGx
V3OfCc1GlMzam2jfIAkjYgFoBwdvSKDIMCH+72zI7j2sJASq14asSkdhnyiJH09B
ICP2qnlvVI9AnK2sRRNLvbnBJlWpXexqFTrwvwZPQkAfKMT+hoS84kDScQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIrCKJKAD+FEMzDTUNnlJbuYDkdYMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvaXNJb2tvQVA0VVF6TU5OUTJlVWx1NWdPUjFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATWkEAwQA
vP/lMA0GCSqGSIb3DQEBCwUAA4IBAQCMKagdk6p2QI/x9yBKV28z/FIyynbPMe9D
Nhl6r3z5LfTeT8gd0Nl1LRJP+2H9tR0eNpuovMOFyPEsHzyxXYTwnEaTCKqwP4QB
FWeFLlOIv42F0g4JExSI1yDwqDBWWDqmw1B1woMZ4JtFwwr/mqQq0gTDAdalNTi9
4Elkn5H24FIG3DeQJWNCocPvxXhB9rKel2pLtJCIXm0Gv8n3axbfbHd2fFZsLc8U
JRHhu/ENt0eyy5toGwuVxwDC7fsps3TXQ6Tx17C/q/U2SDZuzhBRDzOedIt6K1IG
NojAxSP7FHKL+hpZ1yC/Rp6WghcoI4ocrPycmnLIJlxBludKbIy5
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-fra.rpki-client.org