Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZySU-LeU5MK8fyGrAvJqQrxXoz0.roa
File:                     ZySU-LeU5MK8fyGrAvJqQrxXoz0.roa (raw, json)
Hash identifier:          8ay9IZ7FdbFFVqKd/eSmcaPSizum5kNEQhLe4TsWmy0=
Subject key identifier:   67:24:94:F8:B7:94:E4:C2:BC:7F:21:AB:02:F2:6A:42:BC:57:A3:3D
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       018B8068D6088A468EE5A029D9579EA37D41
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZySU-LeU5MK8fyGrAvJqQrxXoz0.roa
Signing time:             Mon 30 Oct 2023 11:47:16 +0000
ROA not before:           Mon 30 Oct 2023 11:47:16 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     147186
IP address blocks:        188.212.121.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 04 Dec 2023 15:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8b:80:68:d6:08:8a:46:8e:e5:a0:29:d9:57:9e:a3:7d:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Oct 30 11:47:16 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=672494f8b794e4c2bc7f21ab02f26a42bc57a33d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:45:39:9d:88:f1:3c:81:c3:3a:4b:f6:2d:40:
                    ad:40:6b:9b:f3:8d:65:38:19:ca:57:da:26:aa:c0:
                    5f:f8:5f:89:c9:35:8e:b4:0c:c9:d1:17:a6:72:8d:
                    0d:32:cc:96:31:ca:99:0f:ae:4c:d7:d7:ca:fb:c8:
                    d9:c0:75:1e:c2:32:49:b2:3a:3b:4d:78:3f:d2:c3:
                    10:77:d5:45:66:91:f2:e9:4d:a9:18:aa:6c:b7:b9:
                    38:a7:aa:a5:26:bf:5b:19:0d:68:34:4a:ac:06:7e:
                    51:af:07:30:22:1c:ad:31:a9:c5:6f:81:bc:36:b2:
                    fd:bc:ec:d5:55:b3:50:c8:26:d7:0f:bd:ae:da:ff:
                    11:b5:35:74:99:17:90:30:a9:8e:4a:c4:67:0b:89:
                    45:93:23:b7:c7:b2:19:af:b0:e6:1e:5c:68:21:65:
                    22:01:64:8c:56:c8:28:12:fa:77:8b:a3:5d:d9:71:
                    78:da:3c:39:55:43:5b:d5:e7:7c:2e:8a:a4:f4:63:
                    d5:c0:28:73:b3:47:d6:7f:a3:f5:1e:c2:cc:7f:86:
                    56:d7:bf:56:f4:46:6a:c7:e7:ac:4f:55:54:a1:f5:
                    99:c6:82:25:85:ad:6d:65:f7:2d:22:52:39:75:88:
                    8f:e2:c1:4e:b8:14:65:98:91:a7:f6:ac:ca:de:d9:
                    a8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:24:94:F8:B7:94:E4:C2:BC:7F:21:AB:02:F2:6A:42:BC:57:A3:3D
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ZySU-LeU5MK8fyGrAvJqQrxXoz0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.212.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:d1:b0:2e:05:ec:1f:36:24:aa:74:a3:75:88:ef:83:0b:5e:
         ef:5a:ef:41:3e:57:51:05:75:1d:df:fa:59:4f:69:09:f0:1b:
         55:01:a3:7a:56:d3:ae:07:ac:86:b0:7b:65:80:24:29:78:b9:
         5f:c2:6e:76:86:48:c1:5e:a8:30:78:f6:9d:5e:22:f0:79:95:
         aa:55:b8:05:85:be:f4:c9:81:08:e2:a6:45:16:be:5f:be:53:
         61:f1:d6:c6:1c:3c:37:3d:d2:d8:9a:37:56:c8:f0:c7:88:96:
         3a:c3:82:38:a6:05:80:c8:e8:2f:01:3f:ea:b0:0f:52:37:d5:
         40:e7:ba:b4:72:50:60:3f:aa:f0:d8:13:96:40:a6:df:30:6e:
         e6:ff:ee:c7:d1:28:65:85:0f:90:7c:83:91:7c:62:5c:ce:b6:
         67:2a:5c:e9:f6:08:7e:16:05:c6:a6:c4:80:50:c8:cc:9a:d4:
         25:34:0a:38:25:f5:2e:51:8c:bd:9e:52:dc:89:8a:c3:11:ce:
         8e:3c:8d:d1:c0:9f:da:43:c8:77:6d:a8:d9:0f:1c:00:c6:cb:
         61:27:3b:cc:f9:50:30:92:5b:83:55:96:f6:5a:d6:cb:ac:6d:
         e2:a3:2e:a4:ce:0e:1a:af:06:ad:66:0a:79:e3:78:ea:66:ee:
         06:79:fb:b9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYuAaNYIikaO5aAp2Veeo31BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjMxMDMwMTE0NzE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzI0OTRmOGI3OTRlNGMyYmM3ZjIxYWIwMmYyNmE0MmJjNTdhMzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUU5nYjxPIHDOkv2LUCtQGub841l
OBnKV9omqsBf+F+JyTWOtAzJ0Remco0NMsyWMcqZD65M19fK+8jZwHUewjJJsjo7
TXg/0sMQd9VFZpHy6U2pGKpst7k4p6qlJr9bGQ1oNEqsBn5RrwcwIhytManFb4G8
NrL9vOzVVbNQyCbXD72u2v8RtTV0mReQMKmOSsRnC4lFkyO3x7IZr7DmHlxoIWUi
AWSMVsgoEvp3i6Nd2XF42jw5VUNb1ed8Loqk9GPVwChzs0fWf6P1HsLMf4ZW179W
9EZqx+esT1VUofWZxoIlha1tZfctIlI5dYiP4sFOuBRlmJGn9qzK3tmo7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGcklPi3lOTCvH8hqwLyakK8V6M9MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvWnlTVS1MZVU1TUs4ZnlHckF2SnFRcnhYb3owLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNR5MA0G
CSqGSIb3DQEBCwUAA4IBAQA60bAuBewfNiSqdKN1iO+DC17vWu9BPldRBXUd3/pZ
T2kJ8BtVAaN6VtOuB6yGsHtlgCQpeLlfwm52hkjBXqgwePadXiLweZWqVbgFhb70
yYEI4qZFFr5fvlNh8dbGHDw3PdLYmjdWyPDHiJY6w4I4pgWAyOgvAT/qsA9SN9VA
57q0clBgP6rw2BOWQKbfMG7m/+7H0ShlhQ+QfIORfGJczrZnKlzp9gh+FgXGpsSA
UMjMmtQlNAo4JfUuUYy9nlLciYrDEc6OPI3RwJ/aQ8h3bajZDxwAxsthJzvM+VAw
kluDVZb2WtbLrG3ioy6kzg4arwatZgp543jqZu4Gefu5
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:13 2024 by rpki-client on console-ams.rpki-client.org