Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/l1RJPVDbvEHHUPURoevtAElhdGU.roa
File:                     l1RJPVDbvEHHUPURoevtAElhdGU.roa (raw, json)
Hash identifier:          pq7I7wpa8Iqhc7JAh+jEWfYZ/e7LJSsw49mdQYmAZMo=
Subject key identifier:   97:54:49:3D:50:DB:BC:41:C7:50:F5:11:A1:EB:ED:00:49:61:74:65
Certificate issuer:       /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial:       01856EAFB99D0C3C3579FFB76C8E9B3D3788
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/l1RJPVDbvEHHUPURoevtAElhdGU.roa
Signing time:             Sun 01 Jan 2023 18:54:48 +0000
ROA not before:           Sun 01 Jan 2023 18:54:48 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     44486
IP address blocks:        88.216.212.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Apr 2023 14:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6e:af:b9:9d:0c:3c:35:79:ff:b7:6c:8e:9b:3d:37:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
        Validity
            Not Before: Jan  1 18:54:48 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9754493d50dbbc41c750f511a1ebed0049617465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4a:30:d4:82:27:12:1a:2e:9b:06:5d:50:75:
                    7a:6c:c0:11:70:8a:38:56:89:af:99:93:6c:f2:52:
                    98:7f:f9:d3:87:9d:18:ef:ec:e6:27:78:fc:1f:c5:
                    89:a1:05:3e:d7:ad:72:32:be:17:be:5a:6d:4a:c1:
                    dc:26:f1:90:62:fd:ca:5a:02:ae:26:31:c7:0a:7f:
                    b7:7e:81:60:3a:58:6a:a5:e4:68:c1:d7:bc:de:fd:
                    90:c2:39:56:b6:a0:34:80:c6:72:c4:d8:31:80:b6:
                    d8:7a:c2:f6:59:97:17:8e:c9:17:2f:43:c7:d5:f3:
                    de:af:9e:f2:47:aa:37:c2:77:86:f2:5d:0e:ab:b8:
                    8a:32:9d:80:88:55:b4:2e:49:45:63:72:5c:a5:82:
                    ac:04:27:96:6b:7b:50:1d:f5:a0:2b:f6:c8:03:fc:
                    f7:e4:fa:78:6b:dd:dc:cd:01:1b:94:d3:2c:59:30:
                    c7:23:e3:14:fe:05:60:1c:15:fb:47:70:0b:6c:50:
                    86:f2:0e:c0:57:78:70:2e:5c:66:5b:f0:4d:38:d0:
                    de:68:39:71:01:79:cc:55:d8:6c:8c:c0:c5:7a:fb:
                    58:42:06:a2:39:46:11:ee:58:9b:02:86:69:15:46:
                    61:e2:14:05:21:40:d4:f2:fe:98:79:f4:74:a8:c4:
                    7d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:54:49:3D:50:DB:BC:41:C7:50:F5:11:A1:EB:ED:00:49:61:74:65
            X509v3 Authority Key Identifier:
                keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/l1RJPVDbvEHHUPURoevtAElhdGU.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.216.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:83:88:8e:2b:c8:d8:37:82:d6:8d:2c:18:7e:09:30:d0:c9:
         ed:7c:68:0c:7c:17:39:8d:2e:b9:d0:b1:cf:00:92:a8:81:11:
         c6:80:e6:c2:c0:ac:58:39:4e:f1:dc:95:0c:be:c0:90:6b:8e:
         59:fd:e7:2d:2e:71:dc:bf:56:2c:0d:a3:20:5f:7a:0e:c6:13:
         97:e1:56:a6:a4:9d:8e:30:0c:f6:99:b6:a0:b9:e9:83:77:a2:
         3f:d0:d8:e7:f3:ab:31:a6:55:e8:45:0f:3b:3f:a8:55:04:83:
         0e:34:7f:9b:c2:0d:30:92:0c:94:7d:d8:a0:5d:be:d9:48:1d:
         b6:e5:22:70:71:6e:1b:41:b3:9e:fc:a2:ab:8b:63:27:f9:e6:
         77:2b:b1:8d:18:13:e7:28:01:a3:1b:11:e3:b9:bc:42:06:ee:
         65:18:c4:8c:d1:45:86:a8:41:15:4e:86:f0:94:10:b4:a0:e9:
         5f:c5:cd:6e:07:69:d4:c9:36:b7:d0:eb:15:13:e5:77:0c:39:
         f6:d7:17:99:76:2c:79:cf:6d:1b:fb:b6:64:15:6f:11:71:29:
         d6:ef:56:bd:4b:c5:c2:c4:50:2a:f6:c9:53:08:b5:c2:f0:b9:
         28:27:bf:68:bb:80:ba:d2:e6:bf:34:d8:88:37:46:c6:cf:30:
         69:bf:56:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVur7mdDDw1ef+3bI6bPTeIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmYmQ0NWZjZTM1NmUyYTY1ZjFlNGQxZGFmNzgxNGI2ZDZi
ZGEzYzUwHhcNMjMwMTAxMTg1NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NzU0NDkzZDUwZGJiYzQxYzc1MGY1MTFhMWViZWQwMDQ5NjE3NDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEow1IInEhoumwZdUHV6bMARcIo4
VomvmZNs8lKYf/nTh50Y7+zmJ3j8H8WJoQU+161yMr4XvlptSsHcJvGQYv3KWgKu
JjHHCn+3foFgOlhqpeRowde83v2QwjlWtqA0gMZyxNgxgLbYesL2WZcXjskXL0PH
1fPer57yR6o3wneG8l0Oq7iKMp2AiFW0LklFY3JcpYKsBCeWa3tQHfWgK/bIA/z3
5Pp4a93czQEblNMsWTDHI+MU/gVgHBX7R3ALbFCG8g7AV3hwLlxmW/BNONDeaDlx
AXnMVdhsjMDFevtYQgaiOUYR7libAoZpFUZh4hQFIUDU8v6YefR0qMR9+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJdUST1Q27xBx1D1EaHr7QBJYXRlMB8GA1UdIwQY
MBaAFE+9RfzjVuKmXx5NHa94FLbWvaPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWIt
MjM0ODFiZjA5MWMzLzEvbDFSSlBWRGJ2RUhIVVBVUm9ldnRBRWxoZEdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zOTRjOTMtZGNhMy00YmM1LThjOWItMjM0ODFiZjA5MWMz
LzEvVDcxRl9PTlc0cVpmSGswZHIzZ1V0dGE5bzhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNjUMA0G
CSqGSIb3DQEBCwUAA4IBAQAag4iOK8jYN4LWjSwYfgkw0MntfGgMfBc5jS650LHP
AJKogRHGgObCwKxYOU7x3JUMvsCQa45Z/ectLnHcv1YsDaMgX3oOxhOX4VampJ2O
MAz2mbaguemDd6I/0Njn86sxplXoRQ87P6hVBIMONH+bwg0wkgyUfdigXb7ZSB22
5SJwcW4bQbOe/KKri2Mn+eZ3K7GNGBPnKAGjGxHjubxCBu5lGMSM0UWGqEEVTobw
lBC0oOlfxc1uB2nUyTa30OsVE+V3DDn21xeZdix5z20b+7ZkFW8RcSnW71a9S8XC
xFAq9slTCLXC8LkoJ79ou4C60ua/NNiIN0bGzzBpv1YM
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:35 2024 by rpki-client on console-fra.rpki-client.org