Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/Eq06kWeijEoo525ZW4HkuMUp0Pw.roa
File:                     Eq06kWeijEoo525ZW4HkuMUp0Pw.roa (raw, json)
Hash identifier:          Iwd9gkm2IJ53/9nW4mlT1AaDBk1sDwwu/O742NADGCA=
Subject key identifier:   12:AD:3A:91:67:A2:8C:4A:28:E7:6E:59:5B:81:E4:B8:C5:29:D0:FC
Certificate issuer:       /CN=1c04848bfef724e26abed3c65e4e8f9508fb1796
Certificate serial:       01856B77B5A75DBAC1D6F86CD7524A8178DC
Authority key identifier: 1C:04:84:8B:FE:F7:24:E2:6A:BE:D3:C6:5E:4E:8F:95:08:FB:17:96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/Eq06kWeijEoo525ZW4HkuMUp0Pw.roa
Signing time:             Sun 01 Jan 2023 03:54:45 +0000
ROA not before:           Sun 01 Jan 2023 03:54:45 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     13487
IP address blocks:        193.135.116.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 13 Jun 2023 04:07:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:77:b5:a7:5d:ba:c1:d6:f8:6c:d7:52:4a:81:78:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c04848bfef724e26abed3c65e4e8f9508fb1796
        Validity
            Not Before: Jan  1 03:54:45 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=12ad3a9167a28c4a28e76e595b81e4b8c529d0fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:16:9a:06:77:0b:fb:51:a7:76:f3:f0:a7:d6:
                    a0:13:27:44:cc:86:c9:3c:83:3e:06:c1:9c:6f:42:
                    55:ce:66:07:fc:ec:a3:62:72:03:17:29:80:36:52:
                    6d:4c:7c:9b:c8:ef:ba:f7:df:aa:49:e7:1d:23:3a:
                    c9:b9:6f:75:00:d0:49:36:46:46:77:61:a0:28:1d:
                    96:a6:27:d0:c0:ca:2a:71:dd:ba:f7:60:83:d9:51:
                    59:91:4c:c8:fc:52:fe:6b:6b:5d:10:f6:51:59:4c:
                    58:54:a5:18:6a:ff:36:a5:66:f2:49:a0:6d:e3:17:
                    0a:f9:80:fb:b5:c3:c0:2f:db:e0:9e:70:a0:20:1b:
                    2a:df:8b:a7:3d:b2:fc:4f:7d:d8:6c:c7:7e:60:99:
                    61:83:b9:77:fe:14:79:8e:a3:62:18:c6:cf:8c:93:
                    50:75:fc:1a:cd:d0:34:a3:96:27:33:a0:dc:c7:14:
                    3f:8e:ed:c8:a5:da:76:87:d4:74:69:fd:52:20:25:
                    04:f5:1c:76:d0:ab:e2:71:3e:ec:14:02:e1:e4:ee:
                    83:87:de:bd:91:2e:50:f8:08:48:c5:0a:24:41:01:
                    0b:24:17:5a:a3:c8:11:f3:fa:c6:8b:0c:97:c9:59:
                    eb:6c:7d:fe:b6:fa:f0:d9:3c:02:0a:7c:66:e3:24:
                    ac:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:AD:3A:91:67:A2:8C:4A:28:E7:6E:59:5B:81:E4:B8:C5:29:D0:FC
            X509v3 Authority Key Identifier:
                keyid:1C:04:84:8B:FE:F7:24:E2:6A:BE:D3:C6:5E:4E:8F:95:08:FB:17:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/Eq06kWeijEoo525ZW4HkuMUp0Pw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.135.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:cf:ae:5e:fa:e4:c3:df:68:f7:4e:2c:5d:32:60:4a:02:bc:
         7a:f5:9c:5d:26:20:2f:06:54:94:57:74:40:67:f6:d3:73:cd:
         fe:b5:a7:b4:93:9b:60:df:cf:ee:32:eb:54:e8:44:98:98:f8:
         21:22:e6:57:19:a5:52:4e:e6:a7:89:68:9c:fe:6d:4d:ba:d1:
         5a:24:28:09:69:56:6c:33:d1:cb:06:dc:32:6d:71:b3:7d:a5:
         c8:3b:3b:69:ba:b7:14:f8:eb:ce:f8:c7:61:1e:54:8a:eb:45:
         93:74:f6:1d:e0:f9:46:57:43:bf:f2:84:0e:29:30:44:d2:60:
         c7:fc:94:07:0b:df:53:86:8a:2e:9f:ac:38:03:b6:f4:39:c3:
         2b:8e:41:d6:a8:a1:77:11:92:5c:0d:55:ae:0a:60:e1:69:a9:
         77:d2:58:70:00:48:bb:93:8e:f4:57:62:08:98:bb:7c:f8:bc:
         ba:08:69:9c:a8:71:77:46:7c:ef:58:8f:db:52:6e:de:34:a1:
         12:3f:2e:cd:60:f1:be:3a:1d:72:c4:17:bc:ed:1f:14:a8:01:
         45:a1:93:33:ed:da:9a:ae:ff:f8:4a:28:37:59:82:48:ee:e7:
         d7:d8:47:c2:33:d9:ce:4c:06:f9:4c:de:03:6e:e7:4e:fe:49:
         dc:e6:5f:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrd7WnXbrB1vhs11JKgXjcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMDQ4NDhiZmVmNzI0ZTI2YWJlZDNjNjVlNGU4Zjk1MDhm
YjE3OTYwHhcNMjMwMTAxMDM1NDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmFkM2E5MTY3YTI4YzRhMjhlNzZlNTk1YjgxZTRiOGM1MjlkMGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRaaBncL+1GndvPwp9agEydEzIbJ
PIM+BsGcb0JVzmYH/OyjYnIDFymANlJtTHybyO+699+qSecdIzrJuW91ANBJNkZG
d2GgKB2WpifQwMoqcd2692CD2VFZkUzI/FL+a2tdEPZRWUxYVKUYav82pWbySaBt
4xcK+YD7tcPAL9vgnnCgIBsq34unPbL8T33YbMd+YJlhg7l3/hR5jqNiGMbPjJNQ
dfwazdA0o5YnM6DcxxQ/ju3Ipdp2h9R0af1SICUE9Rx20KvicT7sFALh5O6Dh969
kS5Q+AhIxQokQQELJBdao8gR8/rGiwyXyVnrbH3+tvrw2TwCCnxm4ySsLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBKtOpFnooxKKOduWVuB5LjFKdD8MB8GA1UdIwQY
MBaAFBwEhIv+9yTiar7Txl5Oj5UI+xeWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEFTRWlfNzNKT0pxdnRQR1hrNlBsUWo3RjVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny82NzI2MjktYTBlMi00NzZmLWFlYWQt
ZWUzODBiODJjZmNhLzEvRXEwNmtXZWlqRW9vNTI1Wlc0SGt1TVVwMFB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny82NzI2MjktYTBlMi00NzZmLWFlYWQtZWUzODBiODJjZmNh
LzEvSEFTRWlfNzNKT0pxdnRQR1hrNlBsUWo3RjVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwYd0MA0G
CSqGSIb3DQEBCwUAA4IBAQAHz65e+uTD32j3TixdMmBKArx69ZxdJiAvBlSUV3RA
Z/bTc83+tae0k5tg38/uMutU6ESYmPghIuZXGaVSTuaniWic/m1NutFaJCgJaVZs
M9HLBtwybXGzfaXIOztpurcU+OvO+MdhHlSK60WTdPYd4PlGV0O/8oQOKTBE0mDH
/JQHC99Thooun6w4A7b0OcMrjkHWqKF3EZJcDVWuCmDhaal30lhwAEi7k470V2II
mLt8+Ly6CGmcqHF3RnzvWI/bUm7eNKESPy7NYPG+Oh1yxBe87R8UqAFFoZMz7dqa
rv/4Sig3WYJI7ufX2EfCM9nOTAb5TN4DbudO/knc5l/u
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:46 2024 by rpki-client on console-fra.rpki-client.org