Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/JIVd8lE02_uajKT1JI-mGSRGpHo.roa
File:                     JIVd8lE02_uajKT1JI-mGSRGpHo.roa (raw, json)
Hash identifier:          kkNAIkDN7XwPr5XF4La4gNgjInfDrgPvMRRUZRLWtrY=
Subject key identifier:   24:85:5D:F2:51:34:DB:FB:9A:8C:A4:F5:24:8F:A6:19:24:46:A4:7A
Certificate issuer:       /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial:       01896E5CDF13CF5E0554D6C2730C668D2AA9
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/JIVd8lE02_uajKT1JI-mGSRGpHo.roa
Signing time:             Wed 19 Jul 2023 13:35:27 +0000
ROA not before:           Wed 19 Jul 2023 13:35:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     62425
IP address blocks:        84.32.230.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 12:30:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:6e:5c:df:13:cf:5e:05:54:d6:c2:73:0c:66:8d:2a:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
        Validity
            Not Before: Jul 19 13:35:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=24855df25134dbfb9a8ca4f5248fa6192446a47a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4c:a2:03:f7:94:62:ec:09:94:1b:50:f3:25:
                    35:23:56:de:f4:f6:bb:46:4e:a0:98:41:27:ea:a9:
                    3d:27:1f:b2:92:42:7f:aa:55:f0:4d:e6:a7:10:8c:
                    e0:40:3f:af:40:6b:5e:36:b7:ed:4b:cd:a6:a8:3a:
                    bc:1c:2d:28:b2:92:d8:a0:da:ec:83:08:ed:e7:55:
                    06:30:49:5f:6d:0b:f5:40:a8:df:98:a4:ea:16:78:
                    82:b2:d8:c6:66:5d:00:b4:2d:71:4a:90:11:42:ca:
                    ef:30:89:3e:c1:83:ad:71:0c:fe:85:50:ad:00:e4:
                    ca:05:e7:ca:ab:fb:8d:f5:70:54:e2:19:30:c0:2b:
                    12:f5:63:a8:07:6e:21:ad:d2:cb:83:e6:a7:9b:16:
                    39:f2:11:c5:9b:61:12:d3:32:32:e5:86:2c:7f:eb:
                    94:af:59:c6:fa:6e:ac:92:66:f9:a8:d2:ae:f4:0a:
                    87:c9:2e:d1:2e:05:a6:49:17:e0:63:86:dc:da:b3:
                    90:46:24:c0:88:6b:9a:a5:a0:ef:75:25:8f:1d:ab:
                    2c:94:43:0a:96:6b:a3:ee:37:f3:46:90:32:41:29:
                    c8:2d:6d:35:cc:35:71:9c:48:06:f6:c6:e9:6a:45:
                    97:ff:81:67:78:fb:7e:f2:1b:4c:95:73:36:d8:ee:
                    a6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:85:5D:F2:51:34:DB:FB:9A:8C:A4:F5:24:8F:A6:19:24:46:A4:7A
            X509v3 Authority Key Identifier:
                keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/JIVd8lE02_uajKT1JI-mGSRGpHo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  84.32.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:bf:02:17:42:84:25:82:02:16:9c:5a:ea:57:2f:2e:0f:8e:
         5b:57:3f:13:c9:32:82:1b:6f:44:d1:48:e6:67:f9:a2:93:7e:
         73:59:65:d5:ab:22:65:2e:61:c2:a7:bf:be:c7:9a:df:98:57:
         4c:83:c8:0b:19:e8:94:bc:aa:37:d5:e0:bc:bb:7f:73:b6:6b:
         b1:2f:59:f9:44:60:50:5a:ef:ca:31:6e:ca:a0:30:d1:56:f1:
         6e:db:cd:42:fb:78:b8:37:5e:e9:05:19:70:80:0d:23:ed:49:
         89:63:c9:0b:5a:25:d8:c4:f1:21:8d:34:fe:8d:9b:1c:28:c3:
         af:47:b3:91:28:55:1e:64:ae:23:04:46:16:aa:2b:1e:7b:1e:
         69:72:35:f3:ff:10:f4:09:19:30:5b:b5:c1:fc:09:b7:dd:9c:
         16:41:fa:ea:b3:7d:7a:d1:63:20:ac:14:aa:b9:7d:67:26:b8:
         3d:fe:d4:55:c2:33:31:12:48:c5:28:bc:ce:72:f1:f3:be:46:
         b3:bc:ae:cb:7b:ad:a3:f1:35:09:72:6f:52:64:a8:9f:6b:49:
         84:7d:a8:dd:cf:29:99:fb:89:54:b4:0f:18:31:46:cc:12:13:
         df:32:1c:8d:ba:90:2b:5b:0a:0b:e3:57:d6:e8:a8:2b:54:08:
         96:ff:e1:bb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYluXN8Tz14FVNbCcwxmjSqpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwNzE5MTMzNTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDg1NWRmMjUxMzRkYmZiOWE4Y2E0ZjUyNDhmYTYxOTI0NDZhNDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUyiA/eUYuwJlBtQ8yU1I1be9Pa7
Rk6gmEEn6qk9Jx+ykkJ/qlXwTeanEIzgQD+vQGteNrftS82mqDq8HC0ospLYoNrs
gwjt51UGMElfbQv1QKjfmKTqFniCstjGZl0AtC1xSpARQsrvMIk+wYOtcQz+hVCt
AOTKBefKq/uN9XBU4hkwwCsS9WOoB24hrdLLg+anmxY58hHFm2ES0zIy5YYsf+uU
r1nG+m6skmb5qNKu9AqHyS7RLgWmSRfgY4bc2rOQRiTAiGuapaDvdSWPHasslEMK
lmuj7jfzRpAyQSnILW01zDVxnEgG9sbpakWX/4FnePt+8htMlXM22O6m+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCSFXfJRNNv7moyk9SSPphkkRqR6MB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvSklWZDhsRTAyX3VhaktUMUpJLW1HU1JHcEhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVCDmMA0G
CSqGSIb3DQEBCwUAA4IBAQA7vwIXQoQlggIWnFrqVy8uD45bVz8TyTKCG29E0Ujm
Z/mik35zWWXVqyJlLmHCp7++x5rfmFdMg8gLGeiUvKo31eC8u39ztmuxL1n5RGBQ
Wu/KMW7KoDDRVvFu281C+3i4N17pBRlwgA0j7UmJY8kLWiXYxPEhjTT+jZscKMOv
R7ORKFUeZK4jBEYWqiseex5pcjXz/xD0CRkwW7XB/Am33ZwWQfrqs3160WMgrBSq
uX1nJrg9/tRVwjMxEkjFKLzOcvHzvkazvK7Le62j8TUJcm9SZKifa0mEfajdzymZ
+4lUtA8YMUbMEhPfMhyNupArWwoL41fW6KgrVAiW/+G7
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:26 2024 by rpki-client on console-ams.rpki-client.org