Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/mofPYPsDxEyHyspMrPMchMATZRA.roa
File:                     mofPYPsDxEyHyspMrPMchMATZRA.roa (raw, json)
Hash identifier:          +Y45XxRMDEMupTNxLdXboRVIP5gP5X1/xAncErR5WQg=
Subject key identifier:   9A:87:CF:60:FB:03:C4:4C:87:CA:CA:4C:AC:F3:1C:84:C0:13:65:10
Certificate issuer:       /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial:       018571D7D08680AC8D55A939547DE23A6E49
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/mofPYPsDxEyHyspMrPMchMATZRA.roa
Signing time:             Mon 02 Jan 2023 09:37:26 +0000
ROA not before:           Mon 02 Jan 2023 09:37:26 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     29604
IP address blocks:        188.255.210.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 14:29:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:d7:d0:86:80:ac:8d:55:a9:39:54:7d:e2:3a:6e:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
        Validity
            Not Before: Jan  2 09:37:26 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9a87cf60fb03c44c87caca4cacf31c84c0136510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f7:25:29:86:da:bd:26:62:91:07:cc:3f:c3:
                    90:f6:55:8c:02:73:3b:47:77:69:73:1b:9c:ca:d3:
                    15:3b:b6:13:60:e9:9f:5a:7c:9d:bb:20:46:53:ca:
                    b6:a0:0a:95:d8:d4:be:4a:55:37:26:f1:19:82:bd:
                    68:b6:b9:3b:fe:18:a0:11:da:94:7a:3f:a8:90:8a:
                    e0:99:63:b4:a1:49:f5:55:69:96:80:18:aa:7a:a3:
                    0d:5b:b8:04:45:ea:67:0c:9a:37:75:32:8f:1f:e6:
                    e9:77:af:c0:f8:a7:ac:4c:ea:0f:be:a0:ef:c5:64:
                    20:2d:d4:21:cd:36:8e:aa:7e:87:6b:54:b1:4e:84:
                    0e:22:77:fb:52:86:31:86:e6:c4:ed:54:e8:b9:9c:
                    df:eb:d3:a5:41:90:3f:b5:5d:45:39:a1:ca:1f:91:
                    56:34:a8:d0:ab:de:3c:3a:74:85:a8:ab:89:28:f3:
                    ba:ac:99:47:aa:f7:be:a9:f2:e2:3e:1f:07:17:17:
                    ee:83:21:46:d9:f5:30:d4:24:b4:3a:2f:19:87:f9:
                    27:78:bd:41:d5:94:c5:f9:b7:4e:c9:6a:02:34:9d:
                    ff:15:8b:05:ea:9d:ec:c9:d5:e9:a5:86:d1:95:92:
                    f0:bf:ff:0d:08:26:12:8b:11:a1:22:a8:29:c4:c3:
                    dc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:87:CF:60:FB:03:C4:4C:87:CA:CA:4C:AC:F3:1C:84:C0:13:65:10
            X509v3 Authority Key Identifier:
                keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/mofPYPsDxEyHyspMrPMchMATZRA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.255.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:cb:ca:c9:7e:5a:f6:02:8f:df:2c:6b:00:7b:4e:75:77:f0:
         ea:63:5a:76:7c:2a:93:69:3d:58:66:fd:36:89:ce:19:45:02:
         c4:3e:d4:22:a0:db:a1:8e:03:d2:34:4e:8f:fc:21:72:7a:8e:
         fb:27:8b:3f:ab:9f:ab:a2:ce:52:65:89:02:b1:a7:15:43:d2:
         cb:b6:c0:81:e9:31:82:9c:d8:d3:8d:ff:53:b2:be:8a:cc:04:
         27:d9:f2:ac:6f:6f:c6:72:17:5c:5a:fe:c7:0a:38:d3:f4:74:
         28:d1:ed:31:1d:6f:20:29:92:45:ff:d7:e3:13:5c:46:87:74:
         f0:7b:30:5d:a5:b8:e3:a1:5d:fb:c5:0e:64:0c:25:fc:86:77:
         d5:88:95:32:3a:42:20:18:4f:25:b0:44:fc:c0:84:90:54:3a:
         c0:88:3e:ae:85:19:b0:a0:82:bf:ea:c7:0a:c5:5c:c2:b6:99:
         3d:fa:8f:b5:05:c5:90:6f:70:9a:6e:2c:65:ab:7b:fa:11:40:
         c8:b4:12:14:86:85:17:12:2a:7a:6e:60:6a:63:a0:6f:35:1e:
         b9:de:df:7f:51:fc:0c:03:0e:f0:5e:c2:db:e4:bf:c7:fc:6b:
         40:18:d9:fe:8b:e9:69:f2:51:d2:fd:f2:7f:b5:cf:6a:17:d3:
         db:82:dc:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVx19CGgKyNVak5VH3iOm5JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjMwMTAyMDkzNzI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTg3Y2Y2MGZiMDNjNDRjODdjYWNhNGNhY2YzMWM4NGMwMTM2NTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPclKYbavSZikQfMP8OQ9lWMAnM7
R3dpcxucytMVO7YTYOmfWnyduyBGU8q2oAqV2NS+SlU3JvEZgr1otrk7/higEdqU
ej+okIrgmWO0oUn1VWmWgBiqeqMNW7gERepnDJo3dTKPH+bpd6/A+KesTOoPvqDv
xWQgLdQhzTaOqn6Ha1SxToQOInf7UoYxhubE7VTouZzf69OlQZA/tV1FOaHKH5FW
NKjQq948OnSFqKuJKPO6rJlHqve+qfLiPh8HFxfugyFG2fUw1CS0Oi8Zh/kneL1B
1ZTF+bdOyWoCNJ3/FYsF6p3sydXppYbRlZLwv/8NCCYSixGhIqgpxMPcnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJqHz2D7A8RMh8rKTKzzHITAE2UQMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvbW9mUFlQc0R4RXlIeXNwTXJQTWNoTUFUWlJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvP/SMA0G
CSqGSIb3DQEBCwUAA4IBAQBOy8rJflr2Ao/fLGsAe051d/DqY1p2fCqTaT1YZv02
ic4ZRQLEPtQioNuhjgPSNE6P/CFyeo77J4s/q5+ros5SZYkCsacVQ9LLtsCB6TGC
nNjTjf9Tsr6KzAQn2fKsb2/GchdcWv7HCjjT9HQo0e0xHW8gKZJF/9fjE1xGh3Tw
ezBdpbjjoV37xQ5kDCX8hnfViJUyOkIgGE8lsET8wISQVDrAiD6uhRmwoIK/6scK
xVzCtpk9+o+1BcWQb3Cabixlq3v6EUDItBIUhoUXEip6bmBqY6BvNR653t9/UfwM
Aw7wXsLb5L/H/GtAGNn+i+lp8lHS/fJ/tc9qF9Pbgtyb
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:05 2024 by rpki-client on console-ams.rpki-client.org