Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/5fB5hebqHrK7VCtgji0OnQZD5VE.roa
File:                     5fB5hebqHrK7VCtgji0OnQZD5VE.roa (raw, json)
Hash identifier:          BlT7Y027OvllsV9UpzsNZdqQ3VO5lXsimw6NnYXo8EM=
Subject key identifier:   E5:F0:79:85:E6:EA:1E:B2:BB:54:2B:60:8E:2D:0E:9D:06:43:E5:51
Certificate issuer:       /CN=792c5d8c32caa4662316858c65bebe12c861ad67
Certificate serial:       01856FD5071B66283484D1B573653B54E5DD
Authority key identifier: 79:2C:5D:8C:32:CA:A4:66:23:16:85:8C:65:BE:BE:12:C8:61:AD:67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/5fB5hebqHrK7VCtgji0OnQZD5VE.roa
Signing time:             Mon 02 Jan 2023 00:15:09 +0000
ROA not before:           Mon 02 Jan 2023 00:15:09 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     49672
IP address blocks:        91.212.178.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 02 Jan 2024 06:32:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6f:d5:07:1b:66:28:34:84:d1:b5:73:65:3b:54:e5:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=792c5d8c32caa4662316858c65bebe12c861ad67
        Validity
            Not Before: Jan  2 00:15:09 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e5f07985e6ea1eb2bb542b608e2d0e9d0643e551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:17:8d:02:c0:a1:a3:5b:10:e5:34:98:b0:d9:
                    29:3c:92:ea:d4:61:15:ef:b7:37:ee:59:15:8d:03:
                    62:48:20:21:7f:b2:02:f9:90:c3:26:74:c1:81:44:
                    fb:59:fc:f6:f7:bf:6d:e7:6a:f8:5c:d9:b6:33:5e:
                    f5:a8:74:9c:58:07:1f:e7:cf:b5:e0:99:ff:1b:0d:
                    c4:50:0a:64:2c:d2:7d:96:2e:f5:81:41:cd:2d:18:
                    c5:9b:30:6c:b5:9f:8a:f0:dd:d4:e9:4f:95:82:ca:
                    72:c6:a6:b8:a4:77:1d:ba:63:aa:9f:80:71:68:0b:
                    74:38:4e:d4:66:fd:c1:54:68:c3:15:49:23:a8:8d:
                    22:36:a5:38:04:09:c1:09:e7:4e:9d:f3:92:71:ec:
                    a8:ed:7e:e9:e3:d0:6f:59:01:fa:a4:cb:65:f4:29:
                    a0:06:99:ba:f2:3a:b8:72:bf:63:36:e0:20:84:37:
                    e9:b6:af:51:22:e6:44:43:70:fb:fa:bf:96:a8:4a:
                    60:47:99:1d:51:40:7f:2c:b0:46:f1:a9:02:33:7a:
                    62:64:1d:0c:44:02:b7:4a:3a:4b:c3:d5:c5:66:4f:
                    74:6f:15:82:73:64:c5:bf:9c:ce:d8:15:92:a2:38:
                    24:7e:cb:73:94:11:92:00:db:e1:04:0f:2c:cf:0a:
                    2f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F0:79:85:E6:EA:1E:B2:BB:54:2B:60:8E:2D:0E:9D:06:43:E5:51
            X509v3 Authority Key Identifier:
                keyid:79:2C:5D:8C:32:CA:A4:66:23:16:85:8C:65:BE:BE:12:C8:61:AD:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eSxdjDLKpGYjFoWMZb6-EshhrWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/5fB5hebqHrK7VCtgji0OnQZD5VE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0e4f6c-5128-46f9-b3f3-8b82c20293a1/1/eSxdjDLKpGYjFoWMZb6-EshhrWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.212.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:15:31:87:f0:62:25:94:40:20:72:7a:3d:65:81:60:af:e5:
         fe:bf:14:e5:be:6e:5e:79:c8:9e:6e:2c:3e:e6:69:90:9e:4b:
         f1:21:1d:75:e2:91:49:2f:dc:23:81:bc:21:dd:d0:10:40:0c:
         7a:f6:77:79:c5:48:0c:28:ca:4d:2c:81:1b:fc:b5:cd:88:10:
         e1:e5:10:08:e1:05:00:3a:43:9d:9c:ac:ce:f0:71:13:ec:d2:
         d2:ed:a5:ed:78:26:c7:c6:11:df:d1:4c:b5:05:f2:ed:26:d1:
         b1:0f:38:d8:39:6d:fd:0b:c2:97:20:09:d7:86:30:7d:86:92:
         ff:0b:11:4c:26:a6:3c:56:ec:81:59:df:08:2c:bc:a8:4d:ef:
         e5:fa:fc:e8:8a:91:d8:da:ac:7a:a6:3e:f4:54:d2:89:17:19:
         77:4d:ea:f4:49:2a:1c:61:91:00:e5:97:fd:5a:bc:2a:88:66:
         8c:4f:40:28:f5:45:7b:aa:5f:9f:08:02:27:af:f3:d8:ad:55:
         b2:3a:d7:7d:11:72:9c:db:ac:2c:b7:50:25:ff:3f:34:dc:71:
         27:51:84:41:00:6c:f0:e1:3e:12:82:91:1e:35:33:64:72:fa:
         dd:54:07:69:f2:b7:d5:44:e9:ce:e1:01:26:a3:b7:ab:bb:05:
         31:91:b3:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVv1QcbZig0hNG1c2U7VOXdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MmM1ZDhjMzJjYWE0NjYyMzE2ODU4YzY1YmViZTEyYzg2
MWFkNjcwHhcNMjMwMTAyMDAxNTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWYwNzk4NWU2ZWExZWIyYmI1NDJiNjA4ZTJkMGU5ZDA2NDNlNTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBeNAsCho1sQ5TSYsNkpPJLq1GEV
77c37lkVjQNiSCAhf7IC+ZDDJnTBgUT7Wfz2979t52r4XNm2M171qHScWAcf58+1
4Jn/Gw3EUApkLNJ9li71gUHNLRjFmzBstZ+K8N3U6U+Vgspyxqa4pHcdumOqn4Bx
aAt0OE7UZv3BVGjDFUkjqI0iNqU4BAnBCedOnfOSceyo7X7p49BvWQH6pMtl9Cmg
Bpm68jq4cr9jNuAghDfptq9RIuZEQ3D7+r+WqEpgR5kdUUB/LLBG8akCM3piZB0M
RAK3SjpLw9XFZk90bxWCc2TFv5zO2BWSojgkfstzlBGSANvhBA8szwovYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOXweYXm6h6yu1QrYI4tDp0GQ+VRMB8GA1UdIwQY
MBaAFHksXYwyyqRmIxaFjGW+vhLIYa1nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVN4ZGpETEtwR1lqRm9XTVpiNi1Fc2hocldjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wZTRmNmMtNTEyOC00NmY5LWIzZjMt
OGI4MmMyMDI5M2ExLzEvNWZCNWhlYnFIcks3VkN0Z2ppME9uUVpENVZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8wZTRmNmMtNTEyOC00NmY5LWIzZjMtOGI4MmMyMDI5M2Ex
LzEvZVN4ZGpETEtwR1lqRm9XTVpiNi1Fc2hocldjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9SyMA0G
CSqGSIb3DQEBCwUAA4IBAQAGFTGH8GIllEAgcno9ZYFgr+X+vxTlvm5eeciebiw+
5mmQnkvxIR114pFJL9wjgbwh3dAQQAx69nd5xUgMKMpNLIEb/LXNiBDh5RAI4QUA
OkOdnKzO8HET7NLS7aXteCbHxhHf0Uy1BfLtJtGxDzjYOW39C8KXIAnXhjB9hpL/
CxFMJqY8VuyBWd8ILLyoTe/l+vzoipHY2qx6pj70VNKJFxl3Ter0SSocYZEA5Zf9
WrwqiGaMT0Ao9UV7ql+fCAInr/PYrVWyOtd9EXKc26wst1Al/z803HEnUYRBAGzw
4T4SgpEeNTNkcvrdVAdp8rfVROnO4QEmo7eruwUxkbOC
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:02 2024 by rpki-client on console-ams.rpki-client.org