Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rQRz3H4zNTChfbhKzCFftTGEIcM.roa
File:                     rQRz3H4zNTChfbhKzCFftTGEIcM.roa (raw, json)
Hash identifier:          4VT+I8yZ6yByhy3IK+DWcZH+32MrLkk8DbAxWfov/tQ=
Subject key identifier:   AD:04:73:DC:7E:33:35:30:A1:7D:B8:4A:CC:21:5F:B5:31:84:21:C3
Certificate issuer:       /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial:       018949272F69A74424AF97E1C2EB185CF889
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rQRz3H4zNTChfbhKzCFftTGEIcM.roa
Signing time:             Wed 12 Jul 2023 08:10:52 +0000
ROA not before:           Wed 12 Jul 2023 08:10:52 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     43260
IP address blocks:        188.213.0.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 09 Aug 2023 05:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:89:49:27:2f:69:a7:44:24:af:97:e1:c2:eb:18:5c:f8:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
        Validity
            Not Before: Jul 12 08:10:52 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=ad0473dc7e333530a17db84acc215fb5318421c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:84:49:93:8d:2d:55:89:93:82:56:97:61:57:
                    aa:30:3a:11:dd:cf:8c:fe:18:59:7b:01:e8:37:db:
                    96:55:d4:3b:7b:a2:3a:3d:0a:25:5c:11:5c:66:3f:
                    33:fe:45:66:a7:a1:f0:03:56:d3:3e:66:38:11:3a:
                    44:29:20:e5:8a:b7:74:29:c6:55:87:c9:40:b3:36:
                    ce:1f:4d:25:66:ad:89:51:a9:6f:1f:18:25:32:08:
                    96:f2:44:5e:b6:d6:ac:ec:8a:64:c4:d2:91:41:71:
                    ef:aa:88:82:00:e1:b6:7f:da:01:95:b8:bc:1d:85:
                    32:1c:d8:eb:09:31:2e:eb:cc:7d:8b:c7:16:cc:dd:
                    9c:01:39:d1:5c:d7:43:b3:5c:64:0b:6e:c0:84:43:
                    7b:0f:85:ac:42:80:15:ba:f4:fa:bb:be:a2:80:5c:
                    7f:10:66:78:2d:bb:8d:de:f3:a8:07:d8:63:d1:c1:
                    91:02:16:c9:d6:28:58:0d:c3:0e:79:b3:14:f9:89:
                    ab:b7:66:4a:84:32:86:7f:b3:4c:76:14:3e:1c:8a:
                    07:3e:02:3b:11:c6:93:61:4d:97:b9:24:fd:79:67:
                    2a:aa:c2:29:6b:b0:58:e0:43:bf:03:57:f7:73:ab:
                    14:af:d5:97:f1:ab:d3:96:6c:18:32:ff:fc:ec:e5:
                    2e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:04:73:DC:7E:33:35:30:A1:7D:B8:4A:CC:21:5F:B5:31:84:21:C3
            X509v3 Authority Key Identifier:
                keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rQRz3H4zNTChfbhKzCFftTGEIcM.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  188.213.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:10:36:a9:da:13:ea:75:7b:be:3c:22:7e:88:fc:db:f6:85:
         6b:f0:25:86:bd:60:fb:26:da:ee:5d:27:3e:35:dc:26:d2:17:
         00:f8:80:4b:cb:ab:0c:ce:e1:10:f1:fd:97:f2:ef:aa:75:11:
         8d:9f:5d:ad:67:56:85:20:b3:a6:a0:4e:17:d1:57:c7:e9:bf:
         1f:15:a7:54:9e:b0:fa:a7:fc:73:31:75:72:a2:0b:e9:ce:51:
         bc:77:e9:f5:05:5f:4c:80:8b:0f:d3:1f:c3:1e:84:5b:76:54:
         20:50:a2:27:f0:f0:f6:d6:11:89:a6:0d:76:9a:84:66:be:6c:
         49:eb:8a:71:6a:06:50:ce:08:f7:5e:16:77:f4:40:14:48:e5:
         2d:9f:0e:f4:ac:08:7c:e3:d2:d6:8e:c8:b4:a6:df:86:47:2d:
         bd:c6:65:c2:db:a3:e8:80:49:76:86:36:a6:8b:bf:ab:dc:73:
         e6:76:7e:f0:46:51:69:4b:2f:08:f8:b4:cb:bd:5c:c1:56:96:
         32:54:1a:c3:b9:4c:da:0a:f5:e5:fd:65:e2:1a:24:98:07:ff:
         02:7e:ed:3d:b4:1e:8f:9a:67:d3:15:31:8d:8d:ff:cf:f6:dd:
         4c:d6:13:33:c5:02:eb:c5:fa:68:5f:d3:31:9b:ff:97:0f:35:
         08:e2:12:cd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlJJy9pp0Qkr5fhwusYXPiJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjMwNzEyMDgxMDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDA0NzNkYzdlMzMzNTMwYTE3ZGI4NGFjYzIxNWZiNTMxODQyMWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4RJk40tVYmTglaXYVeqMDoR3c+M
/hhZewHoN9uWVdQ7e6I6PQolXBFcZj8z/kVmp6HwA1bTPmY4ETpEKSDlird0KcZV
h8lAszbOH00lZq2JUalvHxglMgiW8kRettas7IpkxNKRQXHvqoiCAOG2f9oBlbi8
HYUyHNjrCTEu68x9i8cWzN2cATnRXNdDs1xkC27AhEN7D4WsQoAVuvT6u76igFx/
EGZ4LbuN3vOoB9hj0cGRAhbJ1ihYDcMOebMU+Ymrt2ZKhDKGf7NMdhQ+HIoHPgI7
EcaTYU2XuST9eWcqqsIpa7BY4EO/A1f3c6sUr9WX8avTlmwYMv/87OUufwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK0Ec9x+MzUwoX24SswhX7UxhCHDMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvclFSejNINHpOVENoZmJoS3pDRmZ0VEdFSWNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNUAMA0G
CSqGSIb3DQEBCwUAA4IBAQBkEDap2hPqdXu+PCJ+iPzb9oVr8CWGvWD7JtruXSc+
Ndwm0hcA+IBLy6sMzuEQ8f2X8u+qdRGNn12tZ1aFILOmoE4X0VfH6b8fFadUnrD6
p/xzMXVyogvpzlG8d+n1BV9MgIsP0x/DHoRbdlQgUKIn8PD21hGJpg12moRmvmxJ
64pxagZQzgj3XhZ39EAUSOUtnw70rAh849LWjsi0pt+GRy29xmXC26PogEl2hjam
i7+r3HPmdn7wRlFpSy8I+LTLvVzBVpYyVBrDuUzaCvXl/WXiGiSYB/8Cfu09tB6P
mmfTFTGNjf/P9t1M1hMzxQLrxfpoX9Mxm/+XDzUI4hLN
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:10 2024 by rpki-client on console-fra.rpki-client.org