Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/E7TALzZLHXK6E6s3MjJU7MedYLQ.roa
File:                     E7TALzZLHXK6E6s3MjJU7MedYLQ.roa (raw, json)
Hash identifier:          aX4cfnwzRALBXaEIpXIm30ivM4GCXyEmYUn0vm4JSM4=
Subject key identifier:   13:B4:C0:2F:36:4B:1D:72:BA:13:AB:37:32:32:54:EC:C7:9D:60:B4
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       01857095B657E7C1C132A694C4D8EF80590A
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/E7TALzZLHXK6E6s3MjJU7MedYLQ.roa
Signing time:             Mon 02 Jan 2023 03:45:37 +0000
ROA not before:           Mon 02 Jan 2023 03:45:37 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210778
IP address blocks:        93.170.112.0/23 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:33:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:95:b6:57:e7:c1:c1:32:a6:94:c4:d8:ef:80:59:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  2 03:45:37 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=13b4c02f364b1d72ba13ab37323254ecc79d60b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:59:2e:3d:2a:ca:a3:8f:ab:b5:14:22:49:5b:
                    8d:51:d0:e8:04:6b:6c:c7:01:9d:1e:63:4f:00:a0:
                    06:40:b0:b1:bc:d1:2c:11:49:82:d9:2e:37:0b:84:
                    f4:69:20:d9:0b:29:05:64:ba:44:3a:f2:ad:d8:28:
                    9f:8d:61:2d:1a:81:47:eb:65:7d:69:f1:b5:d4:7b:
                    61:e7:ce:5a:65:07:a7:5f:63:16:56:e4:3b:2d:9c:
                    1e:43:85:5a:31:7f:0c:aa:41:13:37:cc:a9:8d:0b:
                    ca:a3:2a:f7:93:3b:ec:3b:b9:1e:a7:d7:5c:f0:6e:
                    25:9c:99:a2:39:98:1c:da:8f:b7:33:4a:ca:63:b4:
                    f7:05:c4:64:5d:c5:c5:23:ec:1c:4b:41:bd:4b:a8:
                    82:fc:30:c3:20:be:8b:43:f5:b5:ec:d7:f8:4b:55:
                    98:6f:80:c2:b5:b0:ed:60:2d:3e:74:a8:63:87:41:
                    c0:b2:82:b5:40:db:ae:af:f3:40:e1:1e:87:60:90:
                    5e:c9:fe:f2:b9:26:4f:4d:58:dc:ba:57:fd:da:97:
                    ed:89:57:1a:77:32:92:82:42:70:e7:0f:c8:e8:34:
                    3f:e0:f1:4c:22:ff:04:58:75:2d:b0:4a:09:7d:84:
                    4b:2b:a5:a9:14:a6:2b:cb:99:4f:58:27:d9:8b:3b:
                    f5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B4:C0:2F:36:4B:1D:72:BA:13:AB:37:32:32:54:EC:C7:9D:60:B4
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/E7TALzZLHXK6E6s3MjJU7MedYLQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.170.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:fe:9d:b0:a6:3b:a6:f1:4c:2b:c0:0b:b6:c1:1f:62:58:7c:
         80:7a:6b:e4:3e:0d:51:ca:c5:e9:ba:b4:65:fa:b3:9d:71:5e:
         b2:01:45:a2:d1:15:01:96:ef:3a:aa:77:40:1d:4d:ed:a1:a7:
         79:a3:61:66:dd:91:55:3b:87:de:1f:7a:23:9e:d9:b8:58:2a:
         b4:c6:74:3b:8a:fa:04:04:c1:b6:91:85:a0:4f:fc:80:bb:1f:
         29:8a:d9:b6:4b:aa:5f:68:52:b5:d8:88:0e:f3:14:f4:97:09:
         0e:46:52:bc:8c:d2:ac:83:3a:79:a6:16:33:f4:80:53:5a:27:
         0a:64:1a:06:13:3d:5d:bd:94:c6:f5:de:52:c6:7a:92:2d:4b:
         8e:ac:9b:d6:e2:20:5e:e2:c2:30:f7:55:5c:34:42:0f:ff:7a:
         68:eb:b8:39:85:bf:20:06:f6:41:4e:e2:83:ef:f0:cc:5a:5a:
         52:43:74:b3:13:a9:49:5d:0f:e1:3b:d0:d6:18:04:20:78:79:
         6a:ba:8d:28:72:a2:6b:e0:38:53:2e:61:0e:3c:1c:92:16:fd:
         ca:41:2e:02:2f:d9:a3:28:0b:c5:d0:ba:45:e5:64:68:52:c9:
         92:65:d5:cf:6e:cc:f0:0a:e9:4c:aa:37:3c:10:c5:da:e8:61:
         54:80:95:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwlbZX58HBMqaUxNjvgFkKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjMwMTAyMDM0NTM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2I0YzAyZjM2NGIxZDcyYmExM2FiMzczMjMyNTRlY2M3OWQ2MGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFkuPSrKo4+rtRQiSVuNUdDoBGts
xwGdHmNPAKAGQLCxvNEsEUmC2S43C4T0aSDZCykFZLpEOvKt2CifjWEtGoFH62V9
afG11Hth585aZQenX2MWVuQ7LZweQ4VaMX8MqkETN8ypjQvKoyr3kzvsO7kep9dc
8G4lnJmiOZgc2o+3M0rKY7T3BcRkXcXFI+wcS0G9S6iC/DDDIL6LQ/W17Nf4S1WY
b4DCtbDtYC0+dKhjh0HAsoK1QNuur/NA4R6HYJBeyf7yuSZPTVjculf92pftiVca
dzKSgkJw5w/I6DQ/4PFMIv8EWHUtsEoJfYRLK6WpFKYry5lPWCfZizv1cwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBO0wC82Sx1yuhOrNzIyVOzHnWC0MB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvRTdUQUx6WkxIWEs2RTZzM01qSlU3TWVkWUxRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXapwMA0G
CSqGSIb3DQEBCwUAA4IBAQCv/p2wpjum8UwrwAu2wR9iWHyAemvkPg1RysXpurRl
+rOdcV6yAUWi0RUBlu86qndAHU3toad5o2Fm3ZFVO4feH3ojntm4WCq0xnQ7ivoE
BMG2kYWgT/yAux8pitm2S6pfaFK12IgO8xT0lwkORlK8jNKsgzp5phYz9IBTWicK
ZBoGEz1dvZTG9d5SxnqSLUuOrJvW4iBe4sIw91VcNEIP/3po67g5hb8gBvZBTuKD
7/DMWlpSQ3SzE6lJXQ/hO9DWGAQgeHlquo0ocqJr4DhTLmEOPBySFv3KQS4CL9mj
KAvF0LpF5WRoUsmSZdXPbszwCulMqjc8EMXa6GFUgJX6
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:36 2024 by rpki-client on console-fra.rpki-client.org