Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/eF_Py-wp1RzR_t7sZKPQ8UG2RfQ.roa
File:                     eF_Py-wp1RzR_t7sZKPQ8UG2RfQ.roa (raw, json)
Hash identifier:          2nVtyc+uub5tPnjzjy4UmQQXOByg31LV4706MamgciU=
Subject key identifier:   78:5F:CF:CB:EC:29:D5:1C:D1:FE:DE:EC:64:A3:D0:F1:41:B6:45:F4
Certificate issuer:       /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial:       018901BB931F2A0F603CD25757C8A750BD40
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/eF_Py-wp1RzR_t7sZKPQ8UG2RfQ.roa
Signing time:             Wed 28 Jun 2023 11:20:17 +0000
ROA not before:           Wed 28 Jun 2023 11:20:17 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202766
IP address blocks:        94.198.47.0/24 maxlen: 24
                          94.198.46.0/24 maxlen: 24
                          89.42.70.0/24 maxlen: 24
                          185.242.175.0/24 maxlen: 24
                          178.19.44.0/24 maxlen: 24
                          178.19.47.0/24 maxlen: 24
                          80.66.112.0/23 maxlen: 23
                          185.229.212.0/22 maxlen: 22
                          185.229.213.0/24 maxlen: 24
                          185.229.212.0/24 maxlen: 24
                          80.66.118.0/24 maxlen: 24
                          80.66.117.0/24 maxlen: 24
                          80.66.116.0/24 maxlen: 24
                          80.66.115.0/24 maxlen: 24
                          80.66.114.0/24 maxlen: 24
                          80.66.124.0/24 maxlen: 24
                          89.44.151.0/24 maxlen: 24
                          89.44.150.0/24 maxlen: 24
                          185.229.215.0/24 maxlen: 24
                          185.229.214.0/24 maxlen: 24
                          80.66.125.0/24 maxlen: 24
                          80.66.123.0/24 maxlen: 24
                          80.66.121.0/24 maxlen: 24
                          80.66.120.0/24 maxlen: 24
                          80.66.119.0/24 maxlen: 24
                          178.19.33.0/24 maxlen: 24
                          178.19.32.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:01:bb:93:1f:2a:0f:60:3c:d2:57:57:c8:a7:50:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
        Validity
            Not Before: Jun 28 11:20:17 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=785fcfcbec29d51cd1fedeec64a3d0f141b645f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:40:54:42:17:38:b4:87:2e:4d:b3:6c:fa:b9:
                    3f:7c:5b:6e:e8:66:c3:9b:6d:a3:4c:22:9c:cb:62:
                    17:06:5c:24:2e:28:f8:8d:44:f1:f3:17:2b:b0:e6:
                    39:1f:fc:ac:31:40:23:54:63:ba:67:43:c2:2f:fb:
                    ea:6b:6b:33:3b:d8:fb:87:c1:ce:8d:10:db:de:81:
                    3c:31:6a:5b:96:59:2c:45:f6:25:52:b9:68:e5:03:
                    95:16:49:98:90:9b:42:43:e1:4a:a2:c0:86:d5:0b:
                    f2:01:f8:6e:58:c8:2b:63:81:6f:d6:f2:5c:17:cb:
                    6a:74:32:e4:9a:ce:e1:91:06:e5:c9:09:6e:5c:26:
                    34:1b:4d:50:40:3c:e2:6d:a8:45:0c:db:2f:20:74:
                    a3:7b:a2:c8:0b:ab:e4:c9:f7:14:2a:de:2f:62:7b:
                    8f:55:2c:89:3f:22:97:e6:d8:fe:ee:ab:6a:a5:f4:
                    52:1c:3c:68:af:a2:1d:01:db:06:99:c3:f7:55:aa:
                    74:19:bd:7b:be:94:b3:66:d6:85:de:b2:1a:ae:de:
                    7a:e1:32:bd:37:6c:d5:bd:8c:ac:b5:64:e6:f3:97:
                    bd:e0:ce:fb:2d:af:38:1e:98:49:fa:c6:02:4a:ab:
                    3e:53:27:a8:ab:6a:53:1d:52:57:a3:a9:5b:76:0b:
                    60:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:5F:CF:CB:EC:29:D5:1C:D1:FE:DE:EC:64:A3:D0:F1:41:B6:45:F4
            X509v3 Authority Key Identifier:
                keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/eF_Py-wp1RzR_t7sZKPQ8UG2RfQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.66.112.0-80.66.121.255
                  80.66.123.0-80.66.125.255
                  89.42.70.0/24
                  89.44.150.0/23
                  94.198.46.0/23
                  178.19.32.0/23
                  178.19.44.0/24
                  178.19.47.0/24
                  185.229.212.0/22
                  185.242.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:e6:3a:e2:22:57:29:4a:3c:d6:f2:68:24:6f:0a:6b:41:d2:
         1b:8e:8c:11:64:6b:b8:bf:0f:26:6d:56:1e:b7:03:1c:45:25:
         1e:34:c8:a1:07:7b:42:b4:8e:e3:8e:47:85:34:ed:6e:46:a0:
         d2:29:c3:1f:80:b4:b6:29:df:c5:21:c9:55:56:b4:2e:02:e1:
         04:71:56:6b:5c:d0:1e:77:43:a5:bf:b8:5e:b1:06:2e:73:40:
         70:61:5c:60:7d:d8:32:c8:b2:1c:c8:56:ca:27:d2:c2:7a:b0:
         65:43:cc:2b:e0:b8:e2:e7:81:d1:ef:dc:67:7f:f1:d8:fa:74:
         1d:9b:73:72:ed:de:59:0b:78:d1:de:33:d2:86:80:8e:26:01:
         08:66:27:d4:90:6b:b6:79:2c:74:80:a4:7c:77:5d:ee:2c:be:
         ea:4c:cf:25:9a:b4:fd:14:26:6d:16:c7:ba:b3:e5:b7:ea:73:
         f9:a2:b2:84:9c:e6:f6:0b:52:f5:40:d6:a3:c3:6d:a3:57:20:
         65:ec:f9:a4:23:20:cf:2a:7e:a1:34:6a:e7:69:cd:6c:0e:08:
         29:70:06:f3:fb:77:2e:aa:db:ce:6a:ab:bc:e3:a8:dd:88:ec:
         15:b9:15:a6:25:89:13:13:2f:b1:53:f8:53:21:b7:7e:40:bd:
         95:d7:f8:ca
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAYkBu5MfKg9gPNJXV8inUL1AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy
N2E0NjcwHhcNMjMwNjI4MTEyMDE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODVmY2ZjYmVjMjlkNTFjZDFmZWRlZWM2NGEzZDBmMTQxYjY0NWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUBUQhc4tIcuTbNs+rk/fFtu6GbD
m22jTCKcy2IXBlwkLij4jUTx8xcrsOY5H/ysMUAjVGO6Z0PCL/vqa2szO9j7h8HO
jRDb3oE8MWpbllksRfYlUrlo5QOVFkmYkJtCQ+FKosCG1QvyAfhuWMgrY4Fv1vJc
F8tqdDLkms7hkQblyQluXCY0G01QQDzibahFDNsvIHSje6LIC6vkyfcUKt4vYnuP
VSyJPyKX5tj+7qtqpfRSHDxor6IdAdsGmcP3Vap0Gb17vpSzZtaF3rIart564TK9
N2zVvYystWTm85e94M77La84HphJ+sYCSqs+Uyeoq2pTHVJXo6lbdgtgAQIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFHhfz8vsKdUc0f7e7GSj0PFBtkX0MB8GA1UdIwQY
MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt
Y2Q3ZTA2Y2JiNTMxLzEvZUZfUHktd3AxUnpSX3Q3c1pLUFE4VUcyUmZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx
LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDBSBAIAATBMMAwDBARQQnAD
BAFQQngwDAMEAFBCewMEAVBCfAMEAFkqRgMEAVkslgMEAV7GLgMEAbITIAMEALIT
LAMEALITLwMEArnl1AMEALnyrzANBgkqhkiG9w0BAQsFAAOCAQEALOY64iJXKUo8
1vJoJG8Ka0HSG46MEWRruL8PJm1WHrcDHEUlHjTIoQd7QrSO445HhTTtbkag0inD
H4C0tinfxSHJVVa0LgLhBHFWa1zQHndDpb+4XrEGLnNAcGFcYH3YMsiyHMhWyifS
wnqwZUPMK+C44ueB0e/cZ3/x2Pp0HZtzcu3eWQt40d4z0oaAjiYBCGYn1JBrtnks
dICkfHdd7iy+6kzPJZq0/RQmbRbHurPlt+pz+aKyhJzm9gtS9UDWo8Nto1cgZez5
pCMgzyp+oTRq52nNbA4IKXAG8/t3LqrbzmqrvOOo3YjsFbkVpiWJExMvsVP4UyG3
fkC9ldf4yg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:54 2023 by rpki-client on console-fra.rpki-client.org