Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/m_DjysrOzoxLpqunFwkQbeIyW-s.roa
File:                     m_DjysrOzoxLpqunFwkQbeIyW-s.roa (raw, json)
Hash identifier:          72mNNOmPFGq35rotsM1uhT5Lqlf3bItPxbS+LiX2+Yw=
Subject key identifier:   9B:F0:E3:CA:CA:CE:CE:8C:4B:A6:AB:A7:17:09:10:6D:E2:32:5B:EB
Certificate issuer:       /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial:       0185C40C079F974F89F2131F27F3EEF60A8C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/m_DjysrOzoxLpqunFwkQbeIyW-s.roa
Signing time:             Wed 18 Jan 2023 08:43:20 +0000
ROA not before:           Wed 18 Jan 2023 08:43:20 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     58057
IP address blocks:        194.50.94.0/24 maxlen: 24
                          194.50.92.0/24 maxlen: 24
                          139.28.96.0/22 maxlen: 24
                          45.131.184.0/22 maxlen: 24
                          45.136.136.0/22 maxlen: 24
                          94.177.122.0/24 maxlen: 24
                          85.202.203.0/24 maxlen: 24
                          45.12.68.0/22 maxlen: 24
                          31.42.183.0/24 maxlen: 24
                          2a0e:97c0:260::/44 maxlen: 44
                          2001:7f8:119::/48 maxlen: 48
                          2a10:cc46:1000::/36 maxlen: 48
                          2a0e:97c0:170::/48 maxlen: 48
                          2a09:4c0::/29 maxlen: 64
                          2a0e:b107:1165::/48 maxlen: 48
                          2a0c:3b80::/29 maxlen: 48
                          2a0e:97c1:200::/40 maxlen: 48
                          2a10:2f00:18f::/48 maxlen: 48
                          2a0e:b107:6f0::/44 maxlen: 44
                          2a0e:b107:9f2::/48 maxlen: 48
                          2a10:cc40:250::/44 maxlen: 48
                          2a0f:e404:102::/48 maxlen: 48
                          2a0e:b107:1786::/48 maxlen: 48
                          2a10:cc41:800::/37 maxlen: 48
                          2a0e:97c4:100::/44 maxlen: 48

Validation:               Failed, certificate revoked on Mon 23 Jan 2023 10:50:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:c4:0c:07:9f:97:4f:89:f2:13:1f:27:f3:ee:f6:0a:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
        Validity
            Not Before: Jan 18 08:43:20 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=9bf0e3cacacece8c4ba6aba71709106de2325beb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b4:f7:a7:fd:25:f8:93:86:b2:ed:44:8b:9a:
                    1a:0d:0d:01:12:ac:8d:6f:4d:a9:cf:c2:4c:55:4f:
                    eb:07:0b:bd:70:31:45:9d:28:22:19:04:c8:a2:66:
                    40:ae:3d:a9:34:8e:2a:d9:dd:33:5f:9e:97:87:14:
                    07:b8:35:ee:47:a1:56:49:6f:63:5a:04:50:03:5e:
                    85:24:4e:c7:c0:bf:b2:d6:fb:65:d3:71:95:12:f7:
                    4e:45:d5:bd:0b:93:63:38:e7:e9:ca:bc:7b:dc:e4:
                    23:ed:02:58:cb:9f:9b:90:c2:21:68:94:46:77:20:
                    e8:2b:48:49:e7:34:89:33:6e:ec:18:55:ba:94:90:
                    68:0a:db:e8:46:af:ab:ee:c9:3a:55:76:b3:0e:76:
                    ac:51:76:2e:4f:1b:b2:fd:16:c8:80:a2:bd:bd:65:
                    89:aa:8c:84:d0:10:8a:47:7e:38:85:5f:0f:28:98:
                    5e:36:04:8b:66:73:46:3b:71:a8:7a:a9:22:d4:f1:
                    ab:db:81:b4:d1:fc:30:44:4d:96:b1:3c:fe:8f:85:
                    41:88:72:20:dd:64:35:61:ef:fe:4a:5c:93:f2:3d:
                    9b:fd:34:cc:2d:f1:25:d3:63:51:b8:87:57:1d:dd:
                    b3:a5:22:8f:52:0a:ac:3f:42:42:89:1d:1a:96:20:
                    d4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F0:E3:CA:CA:CE:CE:8C:4B:A6:AB:A7:17:09:10:6D:E2:32:5B:EB
            X509v3 Authority Key Identifier:
                keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/m_DjysrOzoxLpqunFwkQbeIyW-s.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  31.42.183.0/24
                  45.12.68.0/22
                  45.131.184.0/22
                  45.136.136.0/22
                  85.202.203.0/24
                  94.177.122.0/24
                  139.28.96.0/22
                  194.50.92.0/24
                  194.50.94.0/24
                IPv6:
                  2001:7f8:119::/48
                  2a09:4c0::/29
                  2a0c:3b80::/29
                  2a0e:97c0:170::/48
                  2a0e:97c0:260::/44
                  2a0e:97c1:200::/40
                  2a0e:97c4:100::/44
                  2a0e:b107:6f0::/44
                  2a0e:b107:9f2::/48
                  2a0e:b107:1165::/48
                  2a0e:b107:1786::/48
                  2a0f:e404:102::/48
                  2a10:2f00:18f::/48
                  2a10:cc40:250::/44
                  2a10:cc41:800::/37
                  2a10:cc46:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         07:0f:28:30:5f:32:eb:2a:e0:9c:b4:eb:d9:4a:fe:47:29:84:
         12:35:f2:84:77:61:27:04:6b:ca:9b:0b:cb:dc:43:fb:37:2e:
         27:58:d4:b0:89:28:3e:2f:b5:58:f8:cc:5e:51:37:a1:ea:a2:
         3a:c8:9f:1f:cc:d1:bc:74:41:a5:69:44:eb:0e:67:89:98:8a:
         3c:eb:87:e2:5e:22:5f:a0:10:04:85:ed:45:06:25:ca:cf:a1:
         b5:d2:82:37:e4:ff:1f:7f:23:4a:87:d5:64:ee:18:33:cd:df:
         49:84:53:bc:35:5c:41:19:60:f3:0c:b0:95:30:e6:51:33:e8:
         5d:b4:8b:c4:70:e9:37:e4:2f:15:c9:be:b0:59:56:72:95:eb:
         c9:71:4f:3e:f1:db:a9:9a:40:8a:52:d0:52:69:31:66:74:32:
         39:51:4b:67:06:45:bc:ad:0e:14:8a:89:bd:b1:af:d1:8a:57:
         bd:65:66:a7:64:1f:79:72:a0:22:7a:2a:3e:88:6b:68:f2:e3:
         9d:d8:f7:ca:ff:52:57:ba:16:ce:d8:22:dc:11:c3:41:b5:e4:
         17:80:bf:f7:ab:44:67:40:75:1e:32:01:5c:22:75:09:ee:a6:
         c2:57:1a:c4:6b:12:85:04:89:99:2b:5a:24:0a:79:ce:30:41:
         7e:11:70:2b
-----BEGIN CERTIFICATE-----
MIIFwzCCBKugAwIBAgISAYXEDAefl0+J8hMfJ/Pu9gqMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwMTE4MDg0MzIwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmYwZTNjYWNhY2VjZThjNGJhNmFiYTcxNzA5MTA2ZGUyMzI1YmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhrT3p/0l+JOGsu1Ei5oaDQ0BEqyN
b02pz8JMVU/rBwu9cDFFnSgiGQTIomZArj2pNI4q2d0zX56XhxQHuDXuR6FWSW9j
WgRQA16FJE7HwL+y1vtl03GVEvdORdW9C5NjOOfpyrx73OQj7QJYy5+bkMIhaJRG
dyDoK0hJ5zSJM27sGFW6lJBoCtvoRq+r7sk6VXazDnasUXYuTxuy/RbIgKK9vWWJ
qoyE0BCKR344hV8PKJheNgSLZnNGO3Goeqki1PGr24G00fwwRE2WsTz+j4VBiHIg
3WQ1Ye/+SlyT8j2b/TTMLfEl02NRuIdXHd2zpSKPUgqsP0JCiR0aliDULQIDAQAB
o4ICzzCCAsswHQYDVR0OBBYEFJvw48rKzs6MS6arpxcJEG3iMlvrMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvbV9Eanlzck96b3hMcHF1bkZ3a1FiZUl5Vy1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHkBggrBgEFBQcBBwEB/wSB1DCB0TA8BAIAATA2AwQAHyq3
AwQCLQxEAwQCLYO4AwQCLYiIAwQAVcrLAwQAXrF6AwQCixxgAwQAwjJcAwQAwjJe
MIGQBAIAAjCBiQMHACABB/gBGQMFAyoJBMADBQMqDDuAAwcAKg6XwAFwAwcEKg6X
wAJgAwYAKg6XwQIDBwQqDpfEAQADBwQqDrEHBvADBwAqDrEHCfIDBwAqDrEHEWUD
BwAqDrEHF4YDBwAqD+QEAQIDBwAqEC8AAY8DBwQqEMxAAlADBgMqEMxBCAMGBCoQ
zEYQMA0GCSqGSIb3DQEBCwUAA4IBAQAHDygwXzLrKuCctOvZSv5HKYQSNfKEd2En
BGvKmwvL3EP7Ny4nWNSwiSg+L7VY+MxeUTeh6qI6yJ8fzNG8dEGlaUTrDmeJmIo8
64fiXiJfoBAEhe1FBiXKz6G10oI35P8ffyNKh9Vk7hgzzd9JhFO8NVxBGWDzDLCV
MOZRM+hdtIvEcOk35C8Vyb6wWVZylevJcU8+8dupmkCKUtBSaTFmdDI5UUtnBkW8
rQ4Uiom9sa/Rile9ZWanZB95cqAieio+iGto8uOd2PfK/1JXuhbO2CLcEcNBteQX
gL/3q0RnQHUeMgFcInUJ7qbCVxrEaxKFBImZK1okCnnOMEF+EXAr
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:37 2024 by rpki-client on console-fra.rpki-client.org