Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/JrkKzHQq4UK2Ro1snwtvlsxrVnY.roa
File:                     JrkKzHQq4UK2Ro1snwtvlsxrVnY.roa (raw, json)
Hash identifier:          Z86UlvcJ8Jyz2nybd0o9aIY5yWSEjU/9B4cQKwagAJw=
Subject key identifier:   26:B9:0A:CC:74:2A:E1:42:B6:46:8D:6C:9F:0B:6F:96:CC:6B:56:76
Certificate issuer:       /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial:       01860F61CA8DBAB1820B74584862FF9C438D
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/JrkKzHQq4UK2Ro1snwtvlsxrVnY.roa
Signing time:             Wed 01 Feb 2023 23:48:32 +0000
ROA not before:           Wed 01 Feb 2023 23:48:32 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     200075
IP address blocks:        188.132.155.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:32:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:86:0f:61:ca:8d:ba:b1:82:0b:74:58:48:62:ff:9c:43:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
        Validity
            Not Before: Feb  1 23:48:32 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=26b90acc742ae142b6468d6c9f0b6f96cc6b5676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:6b:67:fe:ed:de:27:bf:43:eb:92:97:1e:a1:
                    19:47:29:ef:13:f4:f3:16:ba:a6:7f:0c:6e:e2:c5:
                    f2:ab:25:03:3d:2f:02:57:e4:e4:65:94:90:a8:bb:
                    22:c0:74:3f:3f:56:f7:d0:a7:44:99:48:b7:d0:f0:
                    63:54:08:c4:e2:c9:49:80:1a:5e:ac:c6:8c:c8:bb:
                    54:27:a7:ad:3b:24:04:7a:6d:d0:bd:d2:4d:ae:86:
                    18:0f:c5:a2:e1:9f:11:a5:6f:60:12:05:ad:cd:39:
                    dc:3e:43:67:fe:2a:66:0b:16:d3:79:bf:fa:37:cb:
                    0c:f2:13:1e:7d:ed:e5:48:3f:98:e0:3a:5f:f8:d1:
                    7c:9a:a8:af:90:07:d2:7b:80:27:b0:4b:93:fe:bb:
                    c8:76:b0:72:a7:7b:30:a3:cf:d2:99:39:75:16:39:
                    8c:4d:46:6d:03:fc:54:a1:c3:6f:05:8b:e8:7a:6b:
                    50:4d:4e:d6:33:18:2a:93:e0:93:71:8c:10:4c:3f:
                    78:9c:cb:16:0c:e5:52:9c:66:44:79:ef:4c:35:1c:
                    0c:ea:45:19:a6:38:82:9b:fd:29:09:37:63:c4:67:
                    34:cd:42:5f:0b:6c:d9:92:86:6f:48:70:a5:26:f1:
                    a0:97:ac:34:35:bf:81:6a:3a:03:bc:29:04:85:5e:
                    02:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B9:0A:CC:74:2A:E1:42:B6:46:8D:6C:9F:0B:6F:96:CC:6B:56:76
            X509v3 Authority Key Identifier:
                keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/JrkKzHQq4UK2Ro1snwtvlsxrVnY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.132.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:1e:a4:62:51:a0:59:42:2c:37:94:b3:fd:08:fc:6a:a9:d3:
         ab:89:7f:97:86:88:67:95:34:09:72:36:84:16:9e:c8:77:d7:
         3a:99:30:63:22:51:ec:8d:e2:e3:1b:7a:1c:c2:a4:d1:a8:d6:
         20:88:a8:73:6b:72:68:ef:b9:bf:52:27:af:bb:70:cd:71:11:
         f5:04:f7:a1:89:ce:23:a2:00:c8:0e:11:9e:af:ea:b6:bc:f8:
         cd:11:cd:e1:94:e9:36:3a:c5:04:e0:cb:7c:29:bc:84:9e:c3:
         30:6c:c4:a6:ba:18:8e:df:08:65:f9:52:28:4e:2e:d1:66:46:
         82:80:74:23:45:9c:98:29:ee:e5:47:36:39:af:24:d5:fd:3e:
         c0:8f:a2:5f:b1:c9:81:59:9c:a9:14:d1:fb:44:6c:17:19:d4:
         d2:8a:d8:a2:96:43:b6:eb:3f:5b:71:43:ab:d7:ad:55:07:e2:
         b3:17:46:d8:18:5b:8b:e9:07:cb:dc:69:19:02:8e:8e:83:88:
         7b:21:14:67:7b:74:8e:34:a6:38:cf:80:f4:2a:b7:8b:ed:80:
         f6:74:23:e8:d6:a0:13:fc:17:b8:9f:22:e7:03:98:e2:39:75:
         8b:a7:12:17:09:c6:4f:94:40:a0:3c:7b:6e:96:7c:9b:f6:ca:
         aa:fe:b7:da
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYYPYcqNurGCC3RYSGL/nEONMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjMwMjAxMjM0ODMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmI5MGFjYzc0MmFlMTQyYjY0NjhkNmM5ZjBiNmY5NmNjNmI1Njc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGtn/u3eJ79D65KXHqEZRynvE/Tz
Frqmfwxu4sXyqyUDPS8CV+TkZZSQqLsiwHQ/P1b30KdEmUi30PBjVAjE4slJgBpe
rMaMyLtUJ6etOyQEem3QvdJNroYYD8Wi4Z8RpW9gEgWtzTncPkNn/ipmCxbTeb/6
N8sM8hMefe3lSD+Y4Dpf+NF8mqivkAfSe4AnsEuT/rvIdrByp3swo8/SmTl1FjmM
TUZtA/xUocNvBYvoemtQTU7WMxgqk+CTcYwQTD94nMsWDOVSnGZEee9MNRwM6kUZ
pjiCm/0pCTdjxGc0zUJfC2zZkoZvSHClJvGgl6w0Nb+BajoDvCkEhV4CdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCa5Csx0KuFCtkaNbJ8Lb5bMa1Z2MB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvSnJrS3pIUXE0VUsyUm8xc253dHZsc3hyVm5ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvISbMA0G
CSqGSIb3DQEBCwUAA4IBAQAmHqRiUaBZQiw3lLP9CPxqqdOriX+XhohnlTQJcjaE
Fp7Id9c6mTBjIlHsjeLjG3ocwqTRqNYgiKhza3Jo77m/Uievu3DNcRH1BPehic4j
ogDIDhGer+q2vPjNEc3hlOk2OsUE4Mt8KbyEnsMwbMSmuhiO3whl+VIoTi7RZkaC
gHQjRZyYKe7lRzY5ryTV/T7Aj6JfscmBWZypFNH7RGwXGdTSitiilkO26z9bcUOr
161VB+KzF0bYGFuL6QfL3GkZAo6Og4h7IRRne3SONKY4z4D0KreL7YD2dCPo1qAT
/Be4nyLnA5jiOXWLpxIXCcZPlECgPHtulnyb9sqq/rfa
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org