Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/dSXiS2VJauY9TDxt460kbywWb_4.roa
File:                     dSXiS2VJauY9TDxt460kbywWb_4.roa (raw, json)
Hash identifier:          3+i3chj6HdLK0/caPlLpwwsvEnPr9+ks+2ed+xluNFg=
Subject key identifier:   75:25:E2:4B:65:49:6A:E6:3D:4C:3C:6D:E3:AD:24:6F:2C:16:6F:FE
Certificate issuer:       /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial:       018BA0CCC6384B5B833BD3A735714891E07B
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/dSXiS2VJauY9TDxt460kbywWb_4.roa
Signing time:             Sun 05 Nov 2023 18:44:16 +0000
ROA not before:           Sun 05 Nov 2023 18:44:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     41155
IP address blocks:        88.216.190.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 05 Dec 2023 07:41:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:a0:cc:c6:38:4b:5b:83:3b:d3:a7:35:71:48:91:e0:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
        Validity
            Not Before: Nov  5 18:44:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7525e24b65496ae63d4c3c6de3ad246f2c166ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ea:f3:8e:21:61:05:81:92:3f:e4:42:4d:67:
                    64:5a:8d:d7:f5:e5:c0:50:83:be:88:27:06:10:7e:
                    7e:69:93:19:42:ca:90:68:14:2a:d0:93:11:ca:d5:
                    64:48:8b:7a:4e:5e:90:db:65:cc:c7:c0:06:1e:29:
                    d0:dc:f4:7a:d9:23:61:54:19:c2:04:15:10:d8:46:
                    0f:6a:08:65:c6:4a:f8:39:b6:c1:97:a0:41:5f:80:
                    93:18:01:b4:65:c6:06:1b:80:ea:38:d6:3b:f7:74:
                    ab:1c:7d:6d:2b:60:99:75:54:25:bf:8f:c0:90:57:
                    2b:41:b1:d6:11:d1:af:12:d7:5b:4b:a3:68:20:62:
                    44:a0:e5:00:f3:c8:c8:9b:fb:34:47:e3:ec:6a:b6:
                    b2:b1:a8:61:a6:02:54:7e:35:32:6c:8a:b6:fc:37:
                    f8:06:cf:33:19:91:a8:8e:08:86:89:26:ed:92:dc:
                    66:74:ae:a0:81:bd:46:1f:c8:18:59:b4:42:65:a1:
                    bc:06:86:5e:9e:4d:98:05:85:82:c3:02:50:46:4a:
                    c1:1e:35:0c:c8:82:3f:f1:15:3d:5f:85:44:d6:44:
                    9a:50:78:6c:b9:17:9d:92:fe:d4:b7:75:92:c7:31:
                    4c:72:0e:c8:05:a3:5c:6c:c8:b0:b5:ce:49:c7:d2:
                    03:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:25:E2:4B:65:49:6A:E6:3D:4C:3C:6D:E3:AD:24:6F:2C:16:6F:FE
            X509v3 Authority Key Identifier:
                keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/dSXiS2VJauY9TDxt460kbywWb_4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.216.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:e2:4c:70:01:74:26:48:86:d7:d2:5f:60:4f:63:81:9b:b0:
         37:d1:09:3e:66:81:68:dd:8e:7f:b4:f6:df:14:a1:c4:b6:24:
         c9:f4:0d:66:b2:74:96:22:95:62:2e:e6:a2:f0:14:d8:7c:b9:
         c0:66:a9:e5:09:65:e5:88:65:15:52:4d:3e:03:c6:d3:5c:85:
         2a:58:96:8c:42:58:0d:ed:52:56:0f:ae:6b:6c:3c:fc:5c:50:
         f0:66:5f:a5:49:8a:de:3d:52:eb:29:f7:78:50:03:2b:73:9f:
         fd:2c:20:27:1c:cb:19:ba:21:fe:32:4b:3f:10:a2:af:43:ad:
         47:59:fa:c2:0b:96:d3:92:b4:3b:11:50:71:df:41:76:ba:6d:
         51:17:42:85:52:f0:a5:e7:29:c8:f6:e0:ec:90:87:ac:ff:bc:
         43:2b:0f:5f:9a:50:96:b8:c6:8b:e2:79:a8:55:8e:cc:f2:3b:
         7f:91:1a:27:8a:81:16:3f:3e:d7:dc:1b:af:60:07:41:93:b9:
         04:6a:82:f0:d7:e6:b4:d5:6e:8e:fa:69:6a:4d:75:38:e1:8e:
         0b:f9:f6:50:d2:2e:25:fc:3d:ef:14:d5:50:02:1b:47:4a:de:
         cd:aa:71:55:31:2e:c4:40:eb:a6:f8:e5:17:20:c0:28:36:5f:
         43:f5:91:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYugzMY4S1uDO9OnNXFIkeB7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMxMTA1MTg0NDE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTI1ZTI0YjY1NDk2YWU2M2Q0YzNjNmRlM2FkMjQ2ZjJjMTY2ZmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6erzjiFhBYGSP+RCTWdkWo3X9eXA
UIO+iCcGEH5+aZMZQsqQaBQq0JMRytVkSIt6Tl6Q22XMx8AGHinQ3PR62SNhVBnC
BBUQ2EYPaghlxkr4ObbBl6BBX4CTGAG0ZcYGG4DqONY793SrHH1tK2CZdVQlv4/A
kFcrQbHWEdGvEtdbS6NoIGJEoOUA88jIm/s0R+PsaraysahhpgJUfjUybIq2/Df4
Bs8zGZGojgiGiSbtktxmdK6ggb1GH8gYWbRCZaG8BoZenk2YBYWCwwJQRkrBHjUM
yII/8RU9X4VE1kSaUHhsuRedkv7Ut3WSxzFMcg7IBaNcbMiwtc5Jx9IDPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHUl4ktlSWrmPUw8beOtJG8sFm/+MB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvZFNYaVMyVkphdVk5VER4dDQ2MGtieXdXYl80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNi+MA0G
CSqGSIb3DQEBCwUAA4IBAQBK4kxwAXQmSIbX0l9gT2OBm7A30Qk+ZoFo3Y5/tPbf
FKHEtiTJ9A1msnSWIpViLuai8BTYfLnAZqnlCWXliGUVUk0+A8bTXIUqWJaMQlgN
7VJWD65rbDz8XFDwZl+lSYrePVLrKfd4UAMrc5/9LCAnHMsZuiH+Mks/EKKvQ61H
WfrCC5bTkrQ7EVBx30F2um1RF0KFUvCl5ynI9uDskIes/7xDKw9fmlCWuMaL4nmo
VY7M8jt/kRonioEWPz7X3BuvYAdBk7kEaoLw1+a01W6O+mlqTXU44Y4L+fZQ0i4l
/D3vFNVQAhtHSt7NqnFVMS7EQOum+OUXIMAoNl9D9ZF9
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:29 2024 by rpki-client on console-ams.rpki-client.org