Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mIgXxSioGwDZYvkr-YE5XC-tg-8.roa
File:                     mIgXxSioGwDZYvkr-YE5XC-tg-8.roa (raw, json)
Hash identifier:          syof5iYRawborPwpLZEOZXueu/5zTZlAh7YGpusBa/E=
Subject key identifier:   98:88:17:C5:28:A8:1B:00:D9:62:F9:2B:F9:81:39:5C:2F:AD:83:EF
Certificate issuer:       /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial:       0185709596C906D433662DCF204C8A810EF6
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mIgXxSioGwDZYvkr-YE5XC-tg-8.roa
Signing time:             Mon 02 Jan 2023 03:45:29 +0000
ROA not before:           Mon 02 Jan 2023 03:45:29 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     204336
IP address blocks:        93.171.226.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 12:33:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:70:95:96:c9:06:d4:33:66:2d:cf:20:4c:8a:81:0e:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
        Validity
            Not Before: Jan  2 03:45:29 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=988817c528a81b00d962f92bf981395c2fad83ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:af:fe:14:97:05:44:0e:fe:ed:60:da:52:cd:
                    b2:91:7b:df:2e:43:80:8f:cc:bb:d0:9b:ad:d8:f9:
                    94:f2:21:a9:be:cf:47:34:c2:8c:cd:03:00:3a:87:
                    d8:32:34:65:e6:e8:c0:ee:97:f7:f7:95:9e:c4:35:
                    df:60:23:c0:b8:72:6d:9a:2e:48:13:49:b8:4a:b5:
                    d7:27:e7:bf:2c:0f:f0:bc:a4:42:05:3d:71:7a:01:
                    6e:e7:6c:e9:7d:22:93:96:b8:c7:9c:2e:77:c3:a0:
                    e4:7c:0b:c6:c3:a4:3e:5c:d9:20:0d:24:d7:08:65:
                    9a:ca:7f:09:44:4e:0b:9b:09:18:65:37:ba:37:f6:
                    31:05:15:30:d8:fa:37:19:a5:2b:10:9c:0e:5f:ee:
                    99:f8:94:31:9e:5c:29:0f:c4:07:ef:0f:08:ee:1b:
                    85:7a:87:f1:14:3d:f7:84:1d:54:84:eb:59:9d:de:
                    8e:5b:e8:21:0a:1a:b1:37:96:a5:b7:02:cb:fd:9d:
                    7c:c3:6e:ff:60:48:ed:7d:0c:e0:63:b1:a2:df:13:
                    49:25:02:1d:a4:4d:61:99:59:4f:bc:ae:61:70:07:
                    74:ce:8c:6b:7d:bd:70:cc:24:56:0f:ea:37:07:a9:
                    0a:b3:6d:0d:26:7f:94:2a:be:d5:01:fb:46:23:8a:
                    f6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:88:17:C5:28:A8:1B:00:D9:62:F9:2B:F9:81:39:5C:2F:AD:83:EF
            X509v3 Authority Key Identifier:
                keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/mIgXxSioGwDZYvkr-YE5XC-tg-8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.171.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:b5:55:57:ac:a6:46:2d:bb:e9:42:24:da:eb:77:89:1b:2f:
         d6:56:08:c0:1c:d2:30:7d:9b:14:c9:a4:79:b5:e3:5f:d2:57:
         49:9f:ec:fe:6f:d7:40:bf:c1:12:27:93:a0:75:50:0a:39:40:
         ec:48:f0:e7:6b:06:61:58:90:eb:78:4f:9a:0e:29:24:92:fe:
         b6:a5:85:1b:93:76:6e:13:a2:8d:b2:33:62:ff:d0:c5:ba:4c:
         5e:bb:45:70:58:f2:b3:d8:60:8e:19:d6:13:91:e3:39:52:a4:
         26:27:0d:3a:85:7f:cc:b3:bc:ed:9d:49:48:15:6f:66:b7:0f:
         24:c4:89:c4:a7:8b:1a:15:3d:dc:ad:35:93:9e:2f:e5:c8:af:
         f3:7b:7c:69:0c:e8:84:15:80:88:3b:18:a6:54:a9:9d:14:6a:
         ec:ce:49:f0:de:d7:3b:24:c1:91:7a:d4:c1:83:f7:10:7d:f7:
         d7:4b:2e:e2:ac:c8:ae:1a:97:a4:60:e6:77:5b:00:cf:d0:27:
         c6:e7:a3:8d:01:06:ef:c7:1b:6a:50:93:e9:9d:5b:4f:03:13:
         b2:83:dd:d3:92:8a:2b:b4:a6:a2:1b:e3:0a:d5:ba:42:ee:e8:
         79:de:f4:df:1f:eb:d4:ff:1f:62:c3:ab:c8:05:13:16:8e:2b:
         5e:5a:be:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwlZbJBtQzZi3PIEyKgQ72MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjMwMTAyMDM0NTI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODg4MTdjNTI4YTgxYjAwZDk2MmY5MmJmOTgxMzk1YzJmYWQ4M2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgK/+FJcFRA7+7WDaUs2ykXvfLkOA
j8y70Jut2PmU8iGpvs9HNMKMzQMAOofYMjRl5ujA7pf395WexDXfYCPAuHJtmi5I
E0m4SrXXJ+e/LA/wvKRCBT1xegFu52zpfSKTlrjHnC53w6DkfAvGw6Q+XNkgDSTX
CGWayn8JRE4LmwkYZTe6N/YxBRUw2Po3GaUrEJwOX+6Z+JQxnlwpD8QH7w8I7huF
eofxFD33hB1UhOtZnd6OW+ghChqxN5altwLL/Z18w27/YEjtfQzgY7Gi3xNJJQId
pE1hmVlPvK5hcAd0zoxrfb1wzCRWD+o3B6kKs20NJn+UKr7VAftGI4r2uwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJiIF8UoqBsA2WL5K/mBOVwvrYPvMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvbUlnWHhTaW9Hd0RaWXZrci1ZRTVYQy10Zy04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXaviMA0G
CSqGSIb3DQEBCwUAA4IBAQB8tVVXrKZGLbvpQiTa63eJGy/WVgjAHNIwfZsUyaR5
teNf0ldJn+z+b9dAv8ESJ5OgdVAKOUDsSPDnawZhWJDreE+aDikkkv62pYUbk3Zu
E6KNsjNi/9DFukxeu0VwWPKz2GCOGdYTkeM5UqQmJw06hX/Ms7ztnUlIFW9mtw8k
xInEp4saFT3crTWTni/lyK/ze3xpDOiEFYCIOximVKmdFGrszknw3tc7JMGRetTB
g/cQfffXSy7irMiuGpekYOZ3WwDP0CfG56ONAQbvxxtqUJPpnVtPAxOyg93Tkoor
tKaiG+MK1bpC7uh53vTfH+vU/x9iw6vIBRMWjiteWr5k
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:37 2024 by rpki-client on console-fra.rpki-client.org