Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/i7Q1rb_qL5RoBQzzR-iZJl4T1HI.roa
File:                     i7Q1rb_qL5RoBQzzR-iZJl4T1HI.roa (raw, json)
Hash identifier:          ep9fTCgeB3qsDlL9Oln+9QWB0kwuJdXWAZ3/2JL+EVk=
Subject key identifier:   8B:B4:35:AD:BF:EA:2F:94:68:05:0C:F3:47:E8:99:26:5E:13:D4:72
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       018BACC33EC9A84C900E56FE105D0B011581
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/i7Q1rb_qL5RoBQzzR-iZJl4T1HI.roa
Signing time:             Wed 08 Nov 2023 02:29:18 +0000
ROA not before:           Wed 08 Nov 2023 02:29:18 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     20473
IP address blocks:        194.50.111.0/24 maxlen: 24
                          2a0e:b107:1870::/48 maxlen: 48
                          2a0c:3b87:ff00::/40 maxlen: 48
                          2a0e:b107:9f4::/48 maxlen: 48
                          2a0c:3b87:ffff::/48 maxlen: 48
                          2a0e:97c0:791::/48 maxlen: 48
                          2a10:ccc0:110::/44 maxlen: 48
                          2a0e:b107:1b9e::/48 maxlen: 48
                          2a10:ccc3:ccce::/48 maxlen: 48
                          2a0e:97c4:ac00::/38 maxlen: 48
                          2a0e:97c0:792::/48 maxlen: 48
                          2a0e:97c0:750::/48 maxlen: 48
                          2a0e:b107:df2::/48 maxlen: 48
                          2a10:ccc7:9000::/38 maxlen: 48
                          2a0e:b107:9f6::/48 maxlen: 48
                          2a0e:97c0:76f::/48 maxlen: 48
                          2a0e:b107:278b::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:ac:c3:3e:c9:a8:4c:90:0e:56:fe:10:5d:0b:01:15:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Nov  8 02:29:18 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=8bb435adbfea2f9468050cf347e899265e13d472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:21:aa:1e:05:0e:4b:dc:92:96:0c:29:8b:fb:
                    fe:06:e2:ab:0f:c8:18:1f:8d:36:13:8a:d7:eb:cc:
                    07:cb:4d:94:2f:48:26:eb:ec:f3:94:24:6b:38:fa:
                    b0:38:bd:f1:e6:c9:33:96:c7:07:36:8b:63:94:55:
                    f2:64:a1:8b:a3:cd:35:c4:35:73:28:68:69:04:9d:
                    dd:3a:21:ad:92:97:b6:43:28:58:8b:b4:3b:55:fe:
                    86:8c:f8:2e:ad:34:7d:9e:1a:77:4b:a5:48:e6:b6:
                    ad:12:c9:ff:f4:d5:10:4f:5a:8b:9d:91:b7:ab:c7:
                    3a:60:52:66:fc:bb:fb:f6:46:48:7b:ce:a3:fb:be:
                    01:03:33:21:a5:d0:87:62:1b:25:88:07:60:9e:2d:
                    4f:21:2a:69:3d:bf:f3:fa:42:25:4a:66:d4:bd:b6:
                    f9:a9:ba:ae:df:13:87:ba:39:55:13:e1:bb:c3:b1:
                    b4:6e:ad:31:f1:df:f1:f8:1f:12:7e:0e:e3:bf:37:
                    9c:27:c0:b1:34:c0:fe:46:f3:8c:ae:23:43:0d:2c:
                    54:e9:f8:df:c9:02:37:c3:ce:a6:ad:41:27:19:b1:
                    8d:8b:4c:ae:48:70:6f:f6:c4:88:4a:8a:f7:a5:68:
                    78:00:f5:47:d9:1a:ec:e2:78:3a:a7:71:6f:9f:9b:
                    85:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B4:35:AD:BF:EA:2F:94:68:05:0C:F3:47:E8:99:26:5E:13:D4:72
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/i7Q1rb_qL5RoBQzzR-iZJl4T1HI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.50.111.0/24
                IPv6:
                  2a0c:3b87:ff00::/40
                  2a0e:97c0:750::/48
                  2a0e:97c0:76f::/48
                  2a0e:97c0:791::-2a0e:97c0:792:ffff:ffff:ffff:ffff:ffff
                  2a0e:97c4:ac00::/38
                  2a0e:b107:9f4::/48
                  2a0e:b107:9f6::/48
                  2a0e:b107:df2::/48
                  2a0e:b107:1870::/48
                  2a0e:b107:1b9e::/48
                  2a0e:b107:278b::/48
                  2a10:ccc0:110::/44
                  2a10:ccc3:ccce::/48
                  2a10:ccc7:9000::/38

    Signature Algorithm: sha256WithRSAEncryption
         af:96:41:1c:da:76:61:59:f7:d9:8a:bf:11:a8:2b:90:71:cd:
         a4:ac:b3:ac:ed:22:cc:45:b8:e2:cc:24:5c:f8:37:38:1e:ed:
         e7:1b:3d:97:c7:79:47:a3:f6:0c:42:e6:51:29:34:14:d2:86:
         c4:e5:4a:dc:56:11:eb:18:ea:17:9b:b0:bc:b4:64:ec:d6:b3:
         c5:32:b8:6a:62:69:e2:49:bd:3d:90:33:90:30:47:6d:33:dd:
         8e:08:a8:d0:27:89:f8:8b:a2:c6:9e:c2:fd:f3:18:e0:05:24:
         96:9b:d4:de:df:19:4f:59:6f:a7:fd:17:09:17:b5:15:01:df:
         68:34:e2:e8:56:de:2b:bd:95:a7:73:88:cb:d4:b8:82:fe:b6:
         7d:2b:a7:90:29:7a:7e:09:bb:e2:16:c6:cb:ed:fc:c9:25:11:
         c8:ce:44:f3:da:7a:d3:12:26:b5:98:1a:2d:ba:8a:03:2c:ca:
         dd:25:5f:7c:a1:de:29:e2:01:01:8d:31:a0:80:38:b3:d4:81:
         8b:e7:81:f5:4b:fa:d0:84:cf:1b:76:84:3e:11:c4:18:54:77:
         6d:1c:cc:86:ed:e3:54:5b:66:4d:27:7b:21:6f:28:28:6c:b0:
         20:60:b9:f1:28:8c:a7:30:3e:6b:6e:21:6e:8f:51:80:ad:06:
         94:45:b4:0c
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgISAYuswz7JqEyQDlb+EF0LARWBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMxMTA4MDIyOTE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YmI0MzVhZGJmZWEyZjk0NjgwNTBjZjM0N2U4OTkyNjVlMTNkNDcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyGqHgUOS9ySlgwpi/v+BuKrD8gY
H402E4rX68wHy02UL0gm6+zzlCRrOPqwOL3x5skzlscHNotjlFXyZKGLo801xDVz
KGhpBJ3dOiGtkpe2QyhYi7Q7Vf6GjPgurTR9nhp3S6VI5ratEsn/9NUQT1qLnZG3
q8c6YFJm/Lv79kZIe86j+74BAzMhpdCHYhsliAdgni1PISppPb/z+kIlSmbUvbb5
qbqu3xOHujlVE+G7w7G0bq0x8d/x+B8Sfg7jvzecJ8CxNMD+RvOMriNDDSxU6fjf
yQI3w86mrUEnGbGNi0yuSHBv9sSISor3pWh4APVH2Rrs4ng6p3Fvn5uF7wIDAQAB
o4ICnDCCApgwHQYDVR0OBBYEFIu0Na2/6i+UaAUM80fomSZeE9RyMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvaTdRMXJiX3FMNVJvQlF6elItaVpKbDRUMUhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGxBggrBgEFBQcBBwEB/wSBoTCBnjAMBAIAATAGAwQAwjJv
MIGNBAIAAjCBhgMGACoMO4f/AwcAKg6XwAdQAwcAKg6XwAdvMBIDBwAqDpfAB5ED
BwAqDpfAB5IDBgIqDpfErAMHACoOsQcJ9AMHACoOsQcJ9gMHACoOsQcN8gMHACoO
sQcYcAMHACoOsQcbngMHACoOsQcniwMHBCoQzMABEAMHACoQzMPMzgMGAioQzMeQ
MA0GCSqGSIb3DQEBCwUAA4IBAQCvlkEc2nZhWffZir8RqCuQcc2krLOs7SLMRbji
zCRc+Dc4Hu3nGz2Xx3lHo/YMQuZRKTQU0obE5UrcVhHrGOoXm7C8tGTs1rPFMrhq
YmniSb09kDOQMEdtM92OCKjQJ4n4i6LGnsL98xjgBSSWm9Te3xlPWW+n/RcJF7UV
Ad9oNOLoVt4rvZWnc4jL1LiC/rZ9K6eQKXp+CbviFsbL7fzJJRHIzkTz2nrTEia1
mBotuooDLMrdJV98od4p4gEBjTGggDiz1IGL54H1S/rQhM8bdoQ+EcQYVHdtHMyG
7eNUW2ZNJ3shbygobLAgYLnxKIynMD5rbiFuj1GArQaURbQM
-----END CERTIFICATE-----