Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/ptft93NZeMgURQVm31hcxo-B6Xc.roa
File:                     ptft93NZeMgURQVm31hcxo-B6Xc.roa (raw, json)
Hash identifier:          KvMtgCfubZOYQfQ72EOfBZ945BWPbvr0YJRqn4yhJoI=
Subject key identifier:   A6:D7:ED:F7:73:59:78:C8:14:45:05:66:DF:58:5C:C6:8F:81:E9:77
Certificate issuer:       /CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Certificate serial:       0185734CC0AECA008B00176701BCAC4998AE
Authority key identifier: 40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/ptft93NZeMgURQVm31hcxo-B6Xc.roa
Signing time:             Mon 02 Jan 2023 16:24:47 +0000
ROA not before:           Mon 02 Jan 2023 16:24:47 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     15576
IP address blocks:        193.47.190.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 01 Jan 2024 16:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:73:4c:c0:ae:ca:00:8b:00:17:67:01:bc:ac:49:98:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
        Validity
            Not Before: Jan  2 16:24:47 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=a6d7edf7735978c814450566df585cc68f81e977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:13:54:f9:12:c7:ab:32:06:0b:bd:86:78:e4:
                    19:c0:ff:91:63:f4:6d:96:c9:e3:72:93:82:0e:a4:
                    d7:1c:6e:65:77:69:bf:a9:ed:e6:7c:2f:80:bf:29:
                    79:97:86:15:9f:c6:c3:e4:96:06:8f:1b:2c:69:76:
                    42:ec:ee:c0:33:e1:b4:e8:e2:4b:73:cd:7a:37:0d:
                    bf:0c:7b:c3:1e:a2:8a:ed:67:d3:be:ad:22:54:55:
                    15:ec:ac:af:48:3e:a4:b3:b7:3d:af:84:a5:81:24:
                    9e:39:d2:d1:71:10:42:33:24:6f:da:8f:b8:c2:9a:
                    ab:aa:b6:be:e0:04:8a:f2:f7:8e:d1:3a:b9:91:b6:
                    4f:ef:23:e2:e6:0f:ab:6c:3f:bf:a3:92:49:09:21:
                    9c:2d:5c:d2:e4:7a:33:65:70:1d:2e:15:2b:9c:6b:
                    92:49:63:8f:2c:36:ae:e6:7c:6b:81:21:fe:be:26:
                    54:f4:0b:fd:c7:2b:da:42:f2:2b:74:4d:8d:5d:da:
                    5b:59:5d:3f:c9:8e:37:03:6e:aa:e5:90:ae:3b:a8:
                    4e:3b:1b:44:da:1b:88:e1:ef:88:21:bb:95:16:ac:
                    37:a9:23:39:31:91:7c:92:4d:bc:ae:06:1f:6a:de:
                    da:5a:97:9e:d1:09:88:70:b0:5f:64:8b:cd:85:36:
                    71:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:D7:ED:F7:73:59:78:C8:14:45:05:66:DF:58:5C:C6:8F:81:E9:77
            X509v3 Authority Key Identifier:
                keyid:40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/ptft93NZeMgURQVm31hcxo-B6Xc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.47.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:c7:58:90:94:c9:b1:3f:15:b0:08:ca:eb:d1:1b:e1:75:df:
         b3:28:91:aa:a9:ad:a8:46:88:ca:15:e0:c5:b6:18:2f:b2:d8:
         d8:5f:e3:91:37:e0:ac:94:19:28:b8:66:7c:74:76:7c:df:77:
         8c:12:08:c4:84:27:fc:8d:fb:1a:a1:e3:8c:a6:cb:69:d7:9b:
         7e:83:4d:f6:e2:4d:10:ed:df:28:07:ca:be:a0:0b:0a:f8:7a:
         8d:38:af:ba:b0:d0:26:70:2e:f0:68:05:4e:f1:72:69:56:32:
         35:ea:3c:58:38:0f:e1:13:94:73:7f:fe:cb:77:5f:67:80:dd:
         c0:82:35:f9:3d:22:c5:80:0b:8a:07:a3:00:c6:ca:ad:2f:7f:
         e0:0c:0f:e2:e6:d2:18:6b:29:ae:52:87:d0:72:b9:58:64:70:
         77:16:40:69:ae:2a:eb:3c:7c:5d:85:34:1d:28:cb:1c:47:be:
         a3:44:cc:0c:7b:de:d7:e6:2b:df:48:19:38:cd:50:89:1c:91:
         b5:c0:85:b6:1f:1c:1e:2d:a0:3f:45:6d:10:3d:3f:ef:37:b5:
         87:e3:da:32:d4:c7:9a:94:7a:83:0f:fe:e8:79:6d:a1:c5:3e:
         e7:07:08:05:7a:db:03:fb:e2:f7:24:7b:21:1e:1b:6d:a7:2c:
         fc:bd:f7:d2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzTMCuygCLABdnAbysSZiuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwM2Q2M2IzMmU3MWMxYzE2OTI0M2VmZGI2ZDU2ZWQ1Y2E2
YjgyNGUwHhcNMjMwMTAyMTYyNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmQ3ZWRmNzczNTk3OGM4MTQ0NTA1NjZkZjU4NWNjNjhmODFlOTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhNU+RLHqzIGC72GeOQZwP+RY/Rt
lsnjcpOCDqTXHG5ld2m/qe3mfC+Avyl5l4YVn8bD5JYGjxssaXZC7O7AM+G06OJL
c816Nw2/DHvDHqKK7WfTvq0iVFUV7KyvSD6ks7c9r4SlgSSeOdLRcRBCMyRv2o+4
wpqrqra+4ASK8veO0Tq5kbZP7yPi5g+rbD+/o5JJCSGcLVzS5HozZXAdLhUrnGuS
SWOPLDau5nxrgSH+viZU9Av9xyvaQvIrdE2NXdpbWV0/yY43A26q5ZCuO6hOOxtE
2huI4e+IIbuVFqw3qSM5MZF8kk28rgYfat7aWpee0QmIcLBfZIvNhTZxAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKbX7fdzWXjIFEUFZt9YXMaPgel3MB8GA1UdIwQY
MBaAFEA9Y7MuccHBaSQ+/bbVbtXKa4JOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUQxanN5NXh3Y0ZwSkQ3OXR0VnUxY3ByZ2s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kMDEyZjAtNmI4OS00MGRjLWJkNTYt
YjM1NGMwMzkzNzVhLzEvcHRmdDkzTlplTWdVUlFWbTMxaGN4by1CNlhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9kMDEyZjAtNmI4OS00MGRjLWJkNTYtYjM1NGMwMzkzNzVh
LzEvUUQxanN5NXh3Y0ZwSkQ3OXR0VnUxY3ByZ2s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwS++MA0G
CSqGSIb3DQEBCwUAA4IBAQCJx1iQlMmxPxWwCMrr0Rvhdd+zKJGqqa2oRojKFeDF
thgvstjYX+ORN+CslBkouGZ8dHZ833eMEgjEhCf8jfsaoeOMpstp15t+g0324k0Q
7d8oB8q+oAsK+HqNOK+6sNAmcC7waAVO8XJpVjI16jxYOA/hE5Rzf/7Ld19ngN3A
gjX5PSLFgAuKB6MAxsqtL3/gDA/i5tIYaymuUofQcrlYZHB3FkBprirrPHxdhTQd
KMscR76jRMwMe97X5ivfSBk4zVCJHJG1wIW2HxweLaA/RW0QPT/vN7WH49oy1Mea
lHqDD/7oeW2hxT7nBwgFetsD++L3JHshHhttpyz8vffS
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:05 2024 by rpki-client on console-fra.rpki-client.org