Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/ve_OYX61TLcLZCtad6Rme1hJqKo.roa
File:                     ve_OYX61TLcLZCtad6Rme1hJqKo.roa (raw, json)
Hash identifier:          JhQJMse45WGJBpm4ztmpOsn59HeMcxCIvViC8DdxfqI=
Subject key identifier:   BD:EF:CE:61:7E:B5:4C:B7:0B:64:2B:5A:77:A4:66:7B:58:49:A8:AA
Certificate issuer:       /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial:       018705CC4A532EC384ECD55903224EBFB8A7
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/ve_OYX61TLcLZCtad6Rme1hJqKo.roa
Signing time:             Tue 21 Mar 2023 20:11:27 +0000
ROA not before:           Tue 21 Mar 2023 20:11:27 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     210581
IP address blocks:        88.218.250.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Tue 28 Mar 2023 08:10:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:87:05:cc:4a:53:2e:c3:84:ec:d5:59:03:22:4e:bf:b8:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
        Validity
            Not Before: Mar 21 20:11:27 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=bdefce617eb54cb70b642b5a77a4667b5849a8aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ff:3f:0d:67:19:a5:7b:cb:34:e0:26:e3:a7:
                    70:d1:64:3e:37:fe:c0:a0:25:26:ff:bc:57:dd:f6:
                    1f:66:a4:8e:52:93:1f:28:53:b8:fe:7a:06:54:d3:
                    e5:fa:84:72:2f:61:06:e4:08:f7:19:fd:c7:8b:df:
                    4a:24:b3:63:6b:c8:b2:d2:5a:6c:2d:c0:25:fe:3d:
                    f0:fa:be:30:57:3c:d7:f9:cc:e1:c1:99:29:09:2b:
                    8a:54:c6:de:8a:dc:05:96:b5:55:00:14:24:5d:47:
                    c9:84:9d:b8:da:78:fe:b7:cf:12:fa:41:78:75:6a:
                    dc:67:92:09:83:af:b9:2f:5d:25:f4:cf:2f:20:b4:
                    f2:29:db:72:73:d3:a2:2d:0d:29:4d:5d:9e:bd:26:
                    63:fc:76:5c:ef:87:b5:32:a0:59:94:9c:37:0e:09:
                    0a:7a:af:69:bf:5e:c0:47:0a:31:00:68:e8:fb:2f:
                    22:dd:be:0e:13:78:e7:64:20:12:84:68:00:31:51:
                    d9:4f:ad:d5:00:15:ce:51:41:5c:31:98:17:e0:89:
                    4a:60:92:a7:e9:67:15:97:36:5f:1a:82:ef:7b:e7:
                    13:66:01:44:a1:78:9f:e5:5e:eb:bb:a4:47:7c:e4:
                    12:2f:db:69:93:d7:bc:3d:73:90:55:8c:c5:f5:5a:
                    d1:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:EF:CE:61:7E:B5:4C:B7:0B:64:2B:5A:77:A4:66:7B:58:49:A8:AA
            X509v3 Authority Key Identifier:
                keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/ve_OYX61TLcLZCtad6Rme1hJqKo.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  88.218.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:bc:13:8f:e3:14:82:a2:57:8d:6f:52:b7:99:12:16:69:9e:
         99:87:e9:eb:1f:21:84:0b:a7:6b:ff:13:18:ea:44:08:4b:2f:
         2e:5b:13:c6:b0:e7:27:85:93:45:bf:5e:a9:c6:e5:ac:a2:78:
         8c:f5:57:bf:90:00:35:8b:8c:98:81:1b:0b:31:91:5b:55:3f:
         de:d3:a5:eb:1a:f2:1c:23:ac:ee:1b:e4:b1:2e:48:e3:ea:ca:
         f6:62:bb:08:8f:d5:46:7b:3d:a2:05:14:8d:c9:09:77:d1:7f:
         ee:36:97:46:72:03:46:19:55:87:89:7b:a3:a5:ac:93:62:15:
         6a:bd:ae:f4:8b:98:1f:4d:f4:f5:a7:4e:d2:93:41:28:a6:9b:
         cf:4e:b8:96:26:9f:cb:7d:dc:b3:d3:d7:2a:14:b8:53:05:a4:
         9c:08:5c:bd:8a:9a:cf:8a:7c:3f:b1:38:a7:54:b7:9a:9e:99:
         6e:53:e8:d4:6a:5a:c3:86:99:3f:59:f5:cd:a4:0b:2c:08:85:
         f6:98:aa:7a:3d:a2:98:9a:e0:f7:de:12:c1:13:c5:cf:50:eb:
         e1:f1:85:11:39:59:a7:03:a5:7e:fe:50:9f:f3:4c:ad:fc:fc:
         f7:9e:54:cd:1c:73:75:89:42:27:61:15:7a:55:99:05:e6:63:
         b5:0e:59:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYcFzEpTLsOE7NVZAyJOv7inMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0
ODBiOWMwHhcNMjMwMzIxMjAxMTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGVmY2U2MTdlYjU0Y2I3MGI2NDJiNWE3N2E0NjY3YjU4NDlhOGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkv8/DWcZpXvLNOAm46dw0WQ+N/7A
oCUm/7xX3fYfZqSOUpMfKFO4/noGVNPl+oRyL2EG5Aj3Gf3Hi99KJLNja8iy0lps
LcAl/j3w+r4wVzzX+czhwZkpCSuKVMbeitwFlrVVABQkXUfJhJ242nj+t88S+kF4
dWrcZ5IJg6+5L10l9M8vILTyKdtyc9OiLQ0pTV2evSZj/HZc74e1MqBZlJw3DgkK
eq9pv17ARwoxAGjo+y8i3b4OE3jnZCAShGgAMVHZT63VABXOUUFcMZgX4IlKYJKn
6WcVlzZfGoLve+cTZgFEoXif5V7ru6RHfOQSL9tpk9e8PXOQVYzF9VrRgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL3vzmF+tUy3C2QrWnekZntYSaiqMB8GA1UdIwQY
MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt
NTczNzAxYzg0ODMzLzEvdmVfT1lYNjFUTGNMWkN0YWQ2Um1lMWhKcUtvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz
LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWNr6MA0G
CSqGSIb3DQEBCwUAA4IBAQCLvBOP4xSColeNb1K3mRIWaZ6Zh+nrHyGEC6dr/xMY
6kQISy8uWxPGsOcnhZNFv16pxuWsoniM9Ve/kAA1i4yYgRsLMZFbVT/e06XrGvIc
I6zuG+SxLkjj6sr2YrsIj9VGez2iBRSNyQl30X/uNpdGcgNGGVWHiXujpayTYhVq
va70i5gfTfT1p07Sk0EoppvPTriWJp/Lfdyz09cqFLhTBaScCFy9iprPinw/sTin
VLeanpluU+jUalrDhpk/WfXNpAssCIX2mKp6PaKYmuD33hLBE8XPUOvh8YUROVmn
A6V+/lCf80yt/Pz3nlTNHHN1iUInYRV6VZkF5mO1Dlmr
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:04 2024 by rpki-client on console-ams.rpki-client.org