Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/JRcnUo6rfLejhwcDAFxo6Mu9oxI.roa
File:                     JRcnUo6rfLejhwcDAFxo6Mu9oxI.roa (raw, json)
Hash identifier:          LEI+AGP7EM7Os8fsye8lbAYAduL3InQa4+DbVA3S9zo=
Subject key identifier:   25:17:27:52:8E:AB:7C:B7:A3:87:07:03:00:5C:68:E8:CB:BD:A3:12
Certificate issuer:       /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial:       01856C65FAFF577819FA83DFD4D284AA2B12
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/JRcnUo6rfLejhwcDAFxo6Mu9oxI.roa
Signing time:             Sun 01 Jan 2023 08:15:00 +0000
ROA not before:           Sun 01 Jan 2023 08:15:00 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     213133
IP address blocks:        93.179.95.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6c:65:fa:ff:57:78:19:fa:83:df:d4:d2:84:aa:2b:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
        Validity
            Not Before: Jan  1 08:15:00 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=251727528eab7cb7a3870703005c68e8cbbda312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ff:62:ab:3a:2d:a1:96:5f:7a:d1:a9:e6:66:
                    be:ce:40:bb:b3:c6:33:a2:9c:44:2a:cf:02:3e:80:
                    f8:f7:f1:51:41:b5:05:4a:8f:83:37:ae:39:29:e5:
                    76:5d:7b:9c:d7:92:4b:4c:2a:92:da:b8:c4:11:ee:
                    be:3a:6e:4a:ad:c4:c9:91:cc:fb:e6:c7:08:14:d0:
                    d1:d4:78:bd:0d:3a:e9:f5:88:1c:64:f2:ca:0f:31:
                    84:9d:9d:13:b4:14:64:c7:e5:08:83:1a:93:07:ff:
                    ad:44:68:d3:fa:2c:5d:d3:63:b6:18:d4:f3:1c:bd:
                    df:16:f5:d0:b1:6c:93:82:8d:92:67:01:b0:dc:51:
                    12:2b:4b:df:b5:d3:71:0a:8b:b2:8a:e4:91:dd:b2:
                    ae:ea:5c:8c:eb:6e:bc:de:97:dd:43:b4:7b:f4:31:
                    97:00:e1:9f:b4:78:43:36:80:d9:0b:fa:39:aa:b9:
                    fb:fd:b5:aa:71:a7:a2:51:72:c5:cf:43:0a:d6:67:
                    13:db:01:49:d1:c7:48:f5:b3:eb:86:6b:26:be:9c:
                    97:86:ff:73:9c:6c:96:38:71:8e:20:9f:cc:75:36:
                    87:13:d2:a6:75:c0:a6:a9:95:2f:84:50:ce:62:16:
                    82:f9:da:66:3c:f1:cd:ad:72:cc:79:17:f7:bc:2d:
                    39:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:17:27:52:8E:AB:7C:B7:A3:87:07:03:00:5C:68:E8:CB:BD:A3:12
            X509v3 Authority Key Identifier:
                keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/JRcnUo6rfLejhwcDAFxo6Mu9oxI.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  93.179.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:78:69:18:0c:c0:7f:5c:5a:4b:fa:b5:9f:36:82:a4:62:a3:
         61:7e:8c:0f:fc:9a:bf:17:86:96:3f:5a:27:0f:6a:9a:27:b1:
         ee:8e:75:80:80:5a:cd:51:ad:54:dd:28:30:a9:05:ba:75:de:
         86:ed:ce:fa:d9:1a:9d:d7:05:3b:d8:b9:e3:29:85:02:9e:66:
         97:3b:c1:c3:db:c7:af:9c:d5:30:1d:cd:73:b0:3d:66:7f:cc:
         e1:3f:16:d6:54:fa:3c:09:de:1d:5d:32:3b:45:d7:88:e4:2c:
         69:d1:be:11:b9:2b:8e:8d:14:e4:39:cb:c8:80:c1:2d:3a:1c:
         5d:c6:33:79:e0:21:76:1e:99:87:df:7d:81:19:56:d8:88:9f:
         45:c4:98:56:c8:99:51:83:67:56:24:a7:54:f0:e8:8c:99:35:
         49:59:76:12:9a:e7:fd:d2:08:c6:9c:3e:6b:6c:1f:ab:12:d6:
         c1:64:b1:b4:05:42:6e:c6:ff:6c:65:4f:65:24:8b:2a:fa:e7:
         94:64:eb:7f:31:f1:1e:f0:4a:d3:67:a7:f9:e8:f6:5f:0c:10:
         07:50:33:ec:5c:8f:e2:fa:de:c6:dc:1c:69:6f:f3:e2:f9:73:
         bd:9e:36:c7:fa:de:76:1c:0d:9f:a4:25:bb:61:37:48:87:94:
         34:cc:d7:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsZfr/V3gZ+oPf1NKEqisSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMzhlZjQxYjJjMDEwNWE5MWNjYmI5Yzg5MzM3ZmFlYjEy
OWZmODQwHhcNMjMwMTAxMDgxNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTE3Mjc1MjhlYWI3Y2I3YTM4NzA3MDMwMDVjNjhlOGNiYmRhMzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/9iqzotoZZfetGp5ma+zkC7s8Yz
opxEKs8CPoD49/FRQbUFSo+DN645KeV2XXuc15JLTCqS2rjEEe6+Om5KrcTJkcz7
5scIFNDR1Hi9DTrp9YgcZPLKDzGEnZ0TtBRkx+UIgxqTB/+tRGjT+ixd02O2GNTz
HL3fFvXQsWyTgo2SZwGw3FESK0vftdNxCouyiuSR3bKu6lyM62683pfdQ7R79DGX
AOGftHhDNoDZC/o5qrn7/bWqcaeiUXLFz0MK1mcT2wFJ0cdI9bPrhmsmvpyXhv9z
nGyWOHGOIJ/MdTaHE9KmdcCmqZUvhFDOYhaC+dpmPPHNrXLMeRf3vC05nQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCUXJ1KOq3y3o4cHAwBcaOjLvaMSMB8GA1UdIwQY
MBaAFIM470GywBBakcy7nIkzf66xKf+EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3Mzgt
MjhmYzc3OTY3NzYzLzEvSlJjblVvNnJmTGVqaHdjREFGeG82TXU5b3hJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS80MGQ5OTYtYTJjZC00MWYxLWE3MzgtMjhmYzc3OTY3NzYz
LzEvZ3pqdlFiTEFFRnFSekx1Y2lUTl9yckVwXzRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXbNfMA0G
CSqGSIb3DQEBCwUAA4IBAQAXeGkYDMB/XFpL+rWfNoKkYqNhfowP/Jq/F4aWP1on
D2qaJ7HujnWAgFrNUa1U3SgwqQW6dd6G7c762Rqd1wU72LnjKYUCnmaXO8HD28ev
nNUwHc1zsD1mf8zhPxbWVPo8Cd4dXTI7RdeI5Cxp0b4RuSuOjRTkOcvIgMEtOhxd
xjN54CF2HpmH332BGVbYiJ9FxJhWyJlRg2dWJKdU8OiMmTVJWXYSmuf90gjGnD5r
bB+rEtbBZLG0BUJuxv9sZU9lJIsq+ueUZOt/MfEe8ErTZ6f56PZfDBAHUDPsXI/i
+t7G3Bxpb/Pi+XO9njbH+t52HA2fpCW7YTdIh5Q0zNds
-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:21 2024 by rpki-client on console-ams.rpki-client.org