Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/ZReEkSoW1sPYJJaD51zC46ZdCZY.roa
File:                     ZReEkSoW1sPYJJaD51zC46ZdCZY.roa (raw, json)
Hash identifier:          i0+ZUzSyxlWm7R4dnOp+A4doHOhJXZOvZ8wO8SiIUW8=
Subject key identifier:   65:17:84:91:2A:16:D6:C3:D8:24:96:83:E7:5C:C2:E3:A6:5D:09:96
Certificate issuer:       /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial:       0185728373B486CF5775E23D184446D0A1C2
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/ZReEkSoW1sPYJJaD51zC46ZdCZY.roa
Signing time:             Mon 02 Jan 2023 12:44:55 +0000
ROA not before:           Mon 02 Jan 2023 12:44:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     50983
IP address blocks:        77.93.173.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:29:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:72:83:73:b4:86:cf:57:75:e2:3d:18:44:46:d0:a1:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
        Validity
            Not Before: Jan  2 12:44:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=651784912a16d6c3d8249683e75cc2e3a65d0996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:61:e4:bb:9d:25:35:41:7d:46:ba:02:b8:5c:
                    ff:0c:57:b6:b3:ef:c2:7e:8f:af:54:d5:09:9e:bd:
                    f0:6e:91:10:c1:a4:11:65:75:94:07:50:7a:8e:9a:
                    09:16:89:3a:84:89:4e:d1:fa:f6:d3:b3:d5:4e:5c:
                    df:fc:fe:e9:7b:a4:f7:19:bf:ee:3f:4d:d9:0e:dd:
                    d3:3c:bc:80:81:9e:52:d3:f2:dd:0f:9b:77:4e:35:
                    fb:bf:60:27:21:65:43:93:22:76:27:5d:9e:f6:09:
                    0e:f3:79:90:d0:af:0a:ae:16:e1:d3:7c:31:4b:a9:
                    d3:ca:68:43:1f:af:1a:d3:c8:08:17:51:8a:e2:16:
                    f7:1d:28:4a:3c:d5:d1:6f:2f:a5:5f:3d:5d:61:94:
                    ed:df:c2:dd:cd:10:6c:27:ff:3e:52:55:13:d3:fc:
                    d2:10:94:a1:2e:79:f4:52:d7:84:85:aa:f5:b9:c5:
                    cf:c5:53:90:5f:1e:b6:ec:1e:9b:bd:80:03:c4:28:
                    f2:a7:85:ac:45:07:8a:6a:c7:6f:ce:8e:40:d1:cb:
                    1d:6f:0c:88:a3:1e:85:9b:7b:62:f5:bf:be:66:b2:
                    ae:81:e1:91:95:dc:01:54:39:18:19:63:db:bb:6f:
                    c4:09:63:67:82:1a:43:f2:12:98:24:1a:de:ef:b1:
                    68:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:17:84:91:2A:16:D6:C3:D8:24:96:83:E7:5C:C2:E3:A6:5D:09:96
            X509v3 Authority Key Identifier:
                keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/ZReEkSoW1sPYJJaD51zC46ZdCZY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  77.93.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:34:d4:1d:78:2f:06:0b:c5:d9:c6:e8:c9:12:d3:9f:a2:07:
         43:1b:58:7e:1e:a1:76:06:7d:9f:2e:de:c6:ac:ac:14:30:00:
         d8:83:0c:e1:21:94:2e:7a:a8:c6:81:43:ff:81:f0:7b:a0:e5:
         db:63:bd:8f:61:54:64:c5:1a:1c:c0:82:92:12:66:0e:14:90:
         2b:91:84:d2:9c:f6:57:31:cc:89:28:4a:2d:4d:0f:8d:48:23:
         97:e2:f0:98:af:d0:a4:3a:c0:5c:e7:4d:73:1f:89:23:c7:fe:
         21:77:bc:ff:75:c4:6b:89:53:49:f8:63:41:82:f1:23:5f:e8:
         29:f6:ee:de:b5:c2:85:93:4d:c2:cb:97:ec:57:09:60:b4:74:
         ad:46:d2:21:fa:1d:82:25:c0:6b:aa:33:81:05:73:cd:d4:b7:
         db:81:57:1f:b8:38:7c:d1:da:ac:4f:29:cc:97:7b:77:09:23:
         a6:fc:58:4c:70:ba:6f:d6:8e:b3:3a:8a:78:4e:9f:9e:49:05:
         85:bc:b9:19:de:0b:7e:e1:09:f6:f1:0e:ce:60:dd:74:d7:dd:
         18:2b:9b:37:37:66:b0:7f:dc:13:b7:8c:73:f7:c1:8a:66:11:
         eb:43:7e:af:65:e3:85:3e:e9:5d:e1:29:3c:89:91:31:ab:3a:
         82:93:38:14
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyg3O0hs9XdeI9GERG0KHCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiOGM2YzU4YjYwN2ZmMjNhZTcxNzVhNjE2ODJjNzU0ODBm
MWUyMTQwHhcNMjMwMTAyMTI0NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTE3ODQ5MTJhMTZkNmMzZDgyNDk2ODNlNzVjYzJlM2E2NWQwOTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mHku50lNUF9RroCuFz/DFe2s+/C
fo+vVNUJnr3wbpEQwaQRZXWUB1B6jpoJFok6hIlO0fr207PVTlzf/P7pe6T3Gb/u
P03ZDt3TPLyAgZ5S0/LdD5t3TjX7v2AnIWVDkyJ2J12e9gkO83mQ0K8Krhbh03wx
S6nTymhDH68a08gIF1GK4hb3HShKPNXRby+lXz1dYZTt38LdzRBsJ/8+UlUT0/zS
EJShLnn0UteEhar1ucXPxVOQXx627B6bvYADxCjyp4WsRQeKasdvzo5A0csdbwyI
ox6Fm3ti9b++ZrKugeGRldwBVDkYGWPbu2/ECWNnghpD8hKYJBre77FoWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGUXhJEqFtbD2CSWg+dcwuOmXQmWMB8GA1UdIwQY
MBaAFKuMbFi2B/8jrnF1phaCx1SA8eIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2Mt
ODhhM2M0MWZhZWUyLzEvWlJlRWtTb1cxc1BZSkphRDUxekM0NlpkQ1pZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2MtODhhM2M0MWZhZWUy
LzEvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATV2tMA0G
CSqGSIb3DQEBCwUAA4IBAQBANNQdeC8GC8XZxujJEtOfogdDG1h+HqF2Bn2fLt7G
rKwUMADYgwzhIZQueqjGgUP/gfB7oOXbY72PYVRkxRocwIKSEmYOFJArkYTSnPZX
McyJKEotTQ+NSCOX4vCYr9CkOsBc501zH4kjx/4hd7z/dcRriVNJ+GNBgvEjX+gp
9u7etcKFk03Cy5fsVwlgtHStRtIh+h2CJcBrqjOBBXPN1LfbgVcfuDh80dqsTynM
l3t3CSOm/FhMcLpv1o6zOop4Tp+eSQWFvLkZ3gt+4Qn28Q7OYN10190YK5s3N2aw
f9wTt4xz98GKZhHrQ36vZeOFPuld4Sk8iZExqzqCkzgU
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:23 2024 by rpki-client on console-fra.rpki-client.org