Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/jvdV4NEc7JSj4Px0pKYbctWHm0M.roa
File:                     jvdV4NEc7JSj4Px0pKYbctWHm0M.roa (raw, json)
Hash identifier:          YR5pudMZX7ekzZ18wNuY+rGJLxRnHdP8bPb2Of9YDXQ=
Subject key identifier:   8E:F7:55:E0:D1:1C:EC:94:A3:E0:FC:74:A4:A6:1B:72:D5:87:9B:43
Certificate issuer:       /CN=3da213f02a670b05370c55eccce90fe1ad70c49b
Certificate serial:       01856F6FF1B19979F792BF057D46753679FC
Authority key identifier: 3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/jvdV4NEc7JSj4Px0pKYbctWHm0M.roa
Signing time:             Sun 01 Jan 2023 22:24:45 +0000
ROA not before:           Sun 01 Jan 2023 22:24:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200924
IP address blocks:        185.50.122.0/23 maxlen: 23

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 16:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:6f:f1:b1:99:79:f7:92:bf:05:7d:46:75:36:79:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3da213f02a670b05370c55eccce90fe1ad70c49b
        Validity
            Not Before: Jan  1 22:24:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8ef755e0d11cec94a3e0fc74a4a61b72d5879b43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:88:30:ab:e8:09:fd:25:38:29:69:89:b5:e6:
                    7a:98:44:90:b9:eb:80:13:78:19:67:f3:96:a8:cc:
                    68:a2:ae:4b:a9:f8:a4:11:1d:06:0d:61:d0:3c:0c:
                    26:00:b8:62:8f:64:4b:b0:32:e6:4f:3e:4f:e4:8a:
                    61:6b:dc:df:af:cd:03:44:85:1a:7e:3c:90:6e:de:
                    8c:9b:1a:7a:3c:76:22:0e:65:8a:9a:b8:60:b8:ba:
                    ca:ce:ba:9d:4b:c0:0d:24:c9:ff:59:3d:ce:f0:c8:
                    63:6d:5b:2d:fd:15:bf:a4:11:70:09:a7:98:f4:d6:
                    af:b8:57:41:1e:67:f3:07:be:21:51:24:4d:47:cb:
                    42:c4:0d:59:d4:fd:74:da:af:71:1a:d3:24:4b:33:
                    d1:a5:a9:d4:7b:41:18:16:d9:cf:85:99:71:c5:97:
                    50:7d:df:08:0b:cd:8d:7b:73:84:ab:c0:e6:8e:e8:
                    e9:67:a6:8d:41:a1:5d:24:93:2c:b4:a7:35:ab:50:
                    98:9b:e5:42:59:05:75:5f:d0:57:05:df:92:6a:6c:
                    70:5d:4b:dd:9b:a7:f0:63:d4:b4:5e:0b:4e:f0:11:
                    44:cf:4e:2f:34:ea:f8:32:b0:b5:23:e7:76:20:6d:
                    a9:74:a0:bf:02:2d:de:fa:bb:c1:ea:27:af:81:b9:
                    6a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F7:55:E0:D1:1C:EC:94:A3:E0:FC:74:A4:A6:1B:72:D5:87:9B:43
            X509v3 Authority Key Identifier:
                keyid:3D:A2:13:F0:2A:67:0B:05:37:0C:55:EC:CC:E9:0F:E1:AD:70:C4:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PaIT8CpnCwU3DFXszOkP4a1wxJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/jvdV4NEc7JSj4Px0pKYbctWHm0M.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e7f6aa-6ee4-4b4c-8681-7db8eba79ef1/1/PaIT8CpnCwU3DFXszOkP4a1wxJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.50.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         65:4b:94:7f:bc:f7:de:87:34:41:e7:89:43:b3:79:5b:72:42:
         15:f2:6b:83:4f:10:89:67:71:dc:b5:3b:8f:b7:39:df:25:f6:
         e6:72:72:4f:f1:2e:7d:8e:39:86:59:d1:4f:04:04:d0:63:d7:
         c8:dc:dd:59:58:d9:89:28:d0:dd:46:7c:db:b3:ad:7a:09:8b:
         c5:ae:bb:3a:a8:fd:e6:4b:b8:0a:c4:80:43:df:03:a1:6f:d9:
         80:52:be:57:49:f1:16:03:2c:94:c5:b3:ac:44:e3:16:60:72:
         7a:31:af:25:9c:ee:48:f6:23:d7:78:2d:e4:20:52:22:8a:75:
         d3:f5:cd:2d:54:f7:99:ca:eb:4f:fb:72:25:77:89:c5:f6:19:
         a6:88:00:ab:af:5d:ba:2c:f2:af:82:7e:f9:2d:24:09:0f:f2:
         f3:56:33:f7:42:79:38:95:c8:c6:4d:0b:b0:1e:17:d7:23:b0:
         56:9f:f0:c5:8e:8e:d0:ed:9b:4c:47:e5:a8:27:d6:17:d6:4b:
         86:ff:91:a3:71:01:7f:44:74:4c:94:66:ac:06:32:79:60:fb:
         7d:79:ac:35:c6:30:ad:1f:9c:fb:e3:a7:7d:20:87:8e:83:f8:
         fe:49:3a:60:bc:3c:b0:5b:3b:ee:37:1e:81:91:ca:e7:6c:04:
         dd:c6:da:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvb/GxmXn3kr8FfUZ1Nnn8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkYTIxM2YwMmE2NzBiMDUzNzBjNTVlY2NjZTkwZmUxYWQ3
MGM0OWIwHhcNMjMwMTAxMjIyNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWY3NTVlMGQxMWNlYzk0YTNlMGZjNzRhNGE2MWI3MmQ1ODc5YjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYgwq+gJ/SU4KWmJteZ6mESQueuA
E3gZZ/OWqMxooq5LqfikER0GDWHQPAwmALhij2RLsDLmTz5P5Ipha9zfr80DRIUa
fjyQbt6Mmxp6PHYiDmWKmrhguLrKzrqdS8ANJMn/WT3O8MhjbVst/RW/pBFwCaeY
9NavuFdBHmfzB74hUSRNR8tCxA1Z1P102q9xGtMkSzPRpanUe0EYFtnPhZlxxZdQ
fd8IC82Ne3OEq8DmjujpZ6aNQaFdJJMstKc1q1CYm+VCWQV1X9BXBd+SamxwXUvd
m6fwY9S0XgtO8BFEz04vNOr4MrC1I+d2IG2pdKC/Ai3e+rvB6ievgblq6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI73VeDRHOyUo+D8dKSmG3LVh5tDMB8GA1UdIwQY
MBaAFD2iE/AqZwsFNwxV7MzpD+GtcMSbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGFJVDhDcG5Dd1UzREZYc3pPa1A0YTF3eEpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9lN2Y2YWEtNmVlNC00YjRjLTg2ODEt
N2RiOGViYTc5ZWYxLzEvanZkVjRORWM3SlNqNFB4MHBLWWJjdFdIbTBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9lN2Y2YWEtNmVlNC00YjRjLTg2ODEtN2RiOGViYTc5ZWYx
LzEvUGFJVDhDcG5Dd1UzREZYc3pPa1A0YTF3eEpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuTJ6MA0G
CSqGSIb3DQEBCwUAA4IBAQBlS5R/vPfehzRB54lDs3lbckIV8muDTxCJZ3HctTuP
tznfJfbmcnJP8S59jjmGWdFPBATQY9fI3N1ZWNmJKNDdRnzbs616CYvFrrs6qP3m
S7gKxIBD3wOhb9mAUr5XSfEWAyyUxbOsROMWYHJ6Ma8lnO5I9iPXeC3kIFIiinXT
9c0tVPeZyutP+3Ild4nF9hmmiACrr126LPKvgn75LSQJD/LzVjP3Qnk4lcjGTQuw
HhfXI7BWn/DFjo7Q7ZtMR+WoJ9YX1kuG/5GjcQF/RHRMlGasBjJ5YPt9eaw1xjCt
H5z746d9IIeOg/j+STpgvDywWzvuNx6BkcrnbATdxtr0
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:33 2024 by rpki-client on console-fra.rpki-client.org