Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/jU5Hwxeh6syffyR9KgeSWEIE9ao.roa
File:                     jU5Hwxeh6syffyR9KgeSWEIE9ao.roa (raw, json)
Hash identifier:          IR7RPVoddThnr0t6Xjn+HMnLQEksgjNgw9WTrfGqY0A=
Subject key identifier:   8D:4E:47:C3:17:A1:EA:CC:9F:7F:24:7D:2A:07:92:58:42:04:F5:AA
Certificate issuer:       /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial:       018B0031C6594F67341875F55C0C2385650E
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/jU5Hwxeh6syffyR9KgeSWEIE9ao.roa
Signing time:             Thu 05 Oct 2023 14:15:43 +0000
ROA not before:           Thu 05 Oct 2023 14:15:43 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     3356
IP address blocks:        185.81.127.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 09 Oct 2023 07:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:00:31:c6:59:4f:67:34:18:75:f5:5c:0c:23:85:65:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
        Validity
            Not Before: Oct  5 14:15:43 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8d4e47c317a1eacc9f7f247d2a0792584204f5aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:22:9d:6e:f5:0d:c8:35:d0:e7:50:22:08:59:
                    51:dd:de:77:b2:c9:00:f4:9b:b4:ae:8c:ab:0c:05:
                    2a:c9:f7:f5:55:a3:05:ee:3c:1d:bf:ac:f3:cb:9e:
                    ab:09:39:35:5a:d6:77:fc:ba:5f:df:07:a9:17:02:
                    a3:64:49:9b:05:5c:b9:cc:d6:43:e1:c4:ef:7c:36:
                    4a:cb:d7:87:35:d8:6c:61:6b:ff:79:b6:0d:b6:e2:
                    bc:27:88:ec:4e:d3:1b:c1:e9:3e:e8:42:1e:44:fd:
                    6a:c9:e7:58:67:55:f7:d2:78:4b:5e:87:33:29:fa:
                    15:bb:b8:a6:c6:15:cb:87:2f:27:a3:50:fd:df:64:
                    13:20:33:0e:bf:1d:49:6d:55:dc:71:7b:c4:44:8f:
                    60:bf:e6:4c:e3:0b:13:13:5f:43:61:44:47:95:5c:
                    4e:d3:1d:ca:08:ed:0f:8e:4b:be:ab:01:b4:3f:a7:
                    ef:97:b9:ea:92:91:3f:9c:75:a2:3c:56:4e:06:8a:
                    2e:6b:fc:f3:d2:d4:85:c7:b5:5e:c6:75:68:ac:11:
                    6c:8a:84:b9:ec:ab:88:c5:83:10:94:1d:85:9a:8f:
                    5e:a3:0e:a5:62:70:38:fa:ad:d4:10:78:d7:5b:b3:
                    97:50:cc:3b:28:d7:33:00:19:86:71:64:b2:7a:c9:
                    a5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:4E:47:C3:17:A1:EA:CC:9F:7F:24:7D:2A:07:92:58:42:04:F5:AA
            X509v3 Authority Key Identifier:
                keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/jU5Hwxeh6syffyR9KgeSWEIE9ao.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.81.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:5d:82:74:ec:70:4e:73:e4:86:ba:65:e2:80:f8:d6:e4:64:
         4c:91:3f:17:22:5b:97:27:1c:a6:93:69:ca:85:c2:a0:29:85:
         ed:c1:d9:59:b6:07:5a:48:3a:5f:9f:d5:31:b6:37:bc:5b:4e:
         31:d8:90:8f:a7:3f:c5:b9:a3:d5:6f:3d:47:a1:7c:0d:4c:81:
         93:6d:5d:93:ab:56:b3:4a:16:59:ae:70:a1:55:40:61:4d:6e:
         1d:e9:e4:ea:cb:ef:6d:4f:d7:ff:31:ad:86:cc:17:77:1f:c8:
         8a:9a:04:32:89:ca:40:75:b8:ff:85:e0:63:72:c9:2e:5f:aa:
         af:4d:07:1f:0b:5b:82:b7:9e:96:af:27:cb:fb:87:a5:1a:d2:
         c9:9a:aa:1d:75:69:ef:37:69:57:ea:a0:28:f7:bd:85:e9:e3:
         32:d2:90:43:80:be:33:e4:3e:3e:89:1f:62:ad:b9:6e:1a:b6:
         68:97:13:af:8c:ff:09:9a:0e:81:e3:b9:4c:b6:96:87:7c:96:
         54:28:65:24:35:70:77:ba:1e:03:9c:fd:9e:86:7f:75:76:85:
         a5:2b:e8:7a:2f:e0:13:cc:1f:85:32:3e:33:6e:2c:78:95:30:
         a8:f6:6f:33:85:51:9a:cd:e2:45:2c:35:a0:9b:d1:83:a1:72:
         94:c6:7b:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYsAMcZZT2c0GHX1XAwjhWUOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZTU5ZDI0NWQxNTBkYzM4YzQ4OTYyNjNkY2JkY2JiZDY3
NDcwYTcwHhcNMjMxMDA1MTQxNTQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDRlNDdjMzE3YTFlYWNjOWY3ZjI0N2QyYTA3OTI1ODQyMDRmNWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSKdbvUNyDXQ51AiCFlR3d53sskA
9Ju0royrDAUqyff1VaMF7jwdv6zzy56rCTk1WtZ3/Lpf3wepFwKjZEmbBVy5zNZD
4cTvfDZKy9eHNdhsYWv/ebYNtuK8J4jsTtMbwek+6EIeRP1qyedYZ1X30nhLXocz
KfoVu7imxhXLhy8no1D932QTIDMOvx1JbVXccXvERI9gv+ZM4wsTE19DYURHlVxO
0x3KCO0Pjku+qwG0P6fvl7nqkpE/nHWiPFZOBooua/zz0tSFx7VexnVorBFsioS5
7KuIxYMQlB2Fmo9eow6lYnA4+q3UEHjXW7OXUMw7KNczABmGcWSyesmlswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI1OR8MXoerMn38kfSoHklhCBPWqMB8GA1UdIwQY
MBaAFJTlnSRdFQ3DjEiWJj3L3LvWdHCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbE9XZEpGMFZEY09NU0pZbVBjdmN1OVowY0tjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8yODdjZDItZjFkOC00NGE5LWJlZDIt
ZWU5NWI2Y2MzNDc0LzEvalU1SHd4ZWg2c3lmZnlSOUtnZVNXRUlFOWFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8yODdjZDItZjFkOC00NGE5LWJlZDItZWU5NWI2Y2MzNDc0
LzEvbE9XZEpGMFZEY09NU0pZbVBjdmN1OVowY0tjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVF/MA0G
CSqGSIb3DQEBCwUAA4IBAQClXYJ07HBOc+SGumXigPjW5GRMkT8XIluXJxymk2nK
hcKgKYXtwdlZtgdaSDpfn9Uxtje8W04x2JCPpz/FuaPVbz1HoXwNTIGTbV2Tq1az
ShZZrnChVUBhTW4d6eTqy+9tT9f/Ma2GzBd3H8iKmgQyicpAdbj/heBjcskuX6qv
TQcfC1uCt56WryfL+4elGtLJmqoddWnvN2lX6qAo972F6eMy0pBDgL4z5D4+iR9i
rbluGrZolxOvjP8Jmg6B47lMtpaHfJZUKGUkNXB3uh4DnP2ehn91doWlK+h6L+AT
zB+FMj4zbix4lTCo9m8zhVGazeJFLDWgm9GDoXKUxntz
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:12 2024 by rpki-client on console-fra.rpki-client.org