Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/p7svxZRj4825C7YHrc_2ayKHiTk.roa
File:                     p7svxZRj4825C7YHrc_2ayKHiTk.roa (raw, json)
Hash identifier:          vlqiG/d0YtytKm0Bj292ynGVCFUX9+1lhcXcQMgR4uI=
Subject key identifier:   A7:BB:2F:C5:94:63:E3:CD:B9:0B:B6:07:AD:CF:F6:6B:22:87:89:39
Certificate issuer:       /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial:       0188B0550BE8F4535115D7E562AC1AACBD83
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/p7svxZRj4825C7YHrc_2ayKHiTk.roa
Signing time:             Mon 12 Jun 2023 15:59:03 +0000
ROA not before:           Mon 12 Jun 2023 15:59:03 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     207084
IP address blocks:        45.143.6.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Thu 27 Jul 2023 19:57:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:b0:55:0b:e8:f4:53:51:15:d7:e5:62:ac:1a:ac:bd:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
        Validity
            Not Before: Jun 12 15:59:03 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a7bb2fc59463e3cdb90bb607adcff66b22878939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:03:42:d7:62:de:52:e9:b4:ef:42:ed:2c:74:
                    5a:ac:32:e7:12:87:75:d3:00:b2:19:3b:3f:51:50:
                    f5:77:d4:1b:c8:33:6d:20:c7:27:f5:51:cb:73:bc:
                    d8:d6:47:33:75:8a:e3:78:93:48:7b:26:b2:7a:23:
                    c9:3d:c9:fd:1f:be:7b:7c:cc:2e:b0:1f:89:90:b2:
                    ad:eb:95:5c:51:24:4b:2d:49:b6:1c:e6:94:29:89:
                    16:2e:8b:74:6c:5a:2f:36:51:5b:a8:a3:39:24:5b:
                    45:96:3c:03:5e:be:dc:30:c5:8f:3c:6a:39:fa:4b:
                    3c:41:44:96:1d:cc:a1:d6:fb:c8:b7:94:b8:44:cf:
                    cc:a1:49:f4:22:c9:2e:05:90:8d:60:9a:a7:01:70:
                    d5:b8:0b:20:d4:e6:0b:37:0f:c7:bc:69:ce:89:01:
                    ba:ce:fa:04:01:ac:30:1d:1c:68:fa:df:ae:f4:a4:
                    49:70:31:5c:ee:df:b8:a4:00:2f:b0:53:de:3f:c4:
                    f9:12:ab:a4:87:8a:04:ed:f1:fe:c1:98:5e:72:ad:
                    46:59:bd:6b:77:69:82:1d:74:8a:8f:da:55:4c:8e:
                    39:d0:7c:7e:ac:c5:b5:1c:d3:58:c8:6a:fc:2c:c9:
                    9c:aa:55:69:c7:b0:a3:f4:a0:ba:b7:77:d9:a3:32:
                    a5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:BB:2F:C5:94:63:E3:CD:B9:0B:B6:07:AD:CF:F6:6B:22:87:89:39
            X509v3 Authority Key Identifier:
                keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/p7svxZRj4825C7YHrc_2ayKHiTk.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.143.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:3c:a8:38:c0:8a:0a:13:2d:ae:48:4b:cb:ba:42:8b:c7:7c:
         14:90:02:e2:fe:3c:ab:51:bd:11:4b:59:7c:e4:af:c7:42:52:
         3c:58:fd:23:04:87:b3:da:ad:b6:35:15:1a:71:2b:b8:c6:43:
         4f:2b:8b:ab:0f:8f:f0:1c:d0:5d:09:1e:4a:33:71:9f:8e:9b:
         c3:97:56:39:3a:55:6d:52:62:83:1b:34:94:66:8d:50:57:73:
         26:29:d3:df:72:94:4c:4e:c5:84:20:8f:b1:9d:63:cd:4f:b3:
         4c:1f:ee:0d:cf:93:37:a7:59:6c:b2:aa:b2:2a:3f:e3:bb:e6:
         d5:b9:cc:65:33:a4:b5:87:f6:6c:04:f1:73:69:88:f5:87:da:
         66:e9:22:64:c3:7d:9d:8e:45:67:5e:ca:9c:15:46:09:86:9b:
         da:85:62:a5:87:cd:25:8b:9a:66:29:13:29:f2:2b:28:45:88:
         ba:b2:6d:5d:0d:f9:3e:ef:82:85:2d:c2:ba:36:d0:b2:de:1e:
         d6:1f:e4:b8:9c:79:7e:e7:4c:d4:d0:1b:b4:8d:8e:0b:84:b5:
         83:01:77:73:df:a0:8f:4c:6e:5d:aa:e6:66:ff:e2:7b:44:de:
         6e:c2:99:ab:58:2c:6f:b7:d1:fc:12:f3:dd:87:be:54:37:53:
         da:a2:47:a3
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYiwVQvo9FNRFdflYqwarL2DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NjUxYjExOTRmMTJlOThlNzBkM2RhNzhlZmU0ZGQyNDY3
Y2Q0MjMwHhcNMjMwNjEyMTU1OTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhN2JiMmZjNTk0NjNlM2NkYjkwYmI2MDdhZGNmZjY2YjIyODc4OTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwNC12LeUum070LtLHRarDLnEod1
0wCyGTs/UVD1d9QbyDNtIMcn9VHLc7zY1kczdYrjeJNIeyayeiPJPcn9H757fMwu
sB+JkLKt65VcUSRLLUm2HOaUKYkWLot0bFovNlFbqKM5JFtFljwDXr7cMMWPPGo5
+ks8QUSWHcyh1vvIt5S4RM/MoUn0IskuBZCNYJqnAXDVuAsg1OYLNw/HvGnOiQG6
zvoEAawwHRxo+t+u9KRJcDFc7t+4pAAvsFPeP8T5Equkh4oE7fH+wZhecq1GWb1r
d2mCHXSKj9pVTI450Hx+rMW1HNNYyGr8LMmcqlVpx7Cj9KC6t3fZozKlpwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFKe7L8WUY+PNuQu2B63P9msih4k5MB8GA1UdIwQY
MBaAFPhlGxGU8S6Y5w09p47+TdJGfNQjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1HVWJFWlR4THBqbkRUMm5qdjVOMGtaODFDTS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjli
LWExYjdjZWVmYTE2Yy8xL3A3c3Z4WlJqNDgyNUM3WUhyY18yYXlLSGlUay5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjliLWExYjdjZWVmYTE2
Yy8xLzEtR1ViRVpUeExwam5EVDJuanY1TjBrWjgxQ00uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtjwYw
DQYJKoZIhvcNAQELBQADggEBAI88qDjAigoTLa5IS8u6QovHfBSQAuL+PKtRvRFL
WXzkr8dCUjxY/SMEh7ParbY1FRpxK7jGQ08ri6sPj/Ac0F0JHkozcZ+Om8OXVjk6
VW1SYoMbNJRmjVBXcyYp099ylExOxYQgj7GdY81Ps0wf7g3PkzenWWyyqrIqP+O7
5tW5zGUzpLWH9mwE8XNpiPWH2mbpImTDfZ2ORWdeypwVRgmGm9qFYqWHzSWLmmYp
EynyKyhFiLqybV0N+T7vgoUtwro20LLeHtYf5LiceX7nTNTQG7SNjguEtYMBd3Pf
oI9Mbl2q5mb/4ntE3m7CmatYLG+30fwS892HvlQ3U9qiR6M=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:55 2024 by rpki-client on console-fra.rpki-client.org