Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/eobRyhKyaOUObOxiy_QGy3BHK3I.roa
File:                     eobRyhKyaOUObOxiy_QGy3BHK3I.roa (raw, json)
Hash identifier:          x+N/qs3TuY3QLn5pKeh0380g9nCXe4sbid9OpfTtQ5A=
Subject key identifier:   7A:86:D1:CA:12:B2:68:E5:0E:6C:EC:62:CB:F4:06:CB:70:47:2B:72
Certificate issuer:       /CN=05bd0faeede73ad3cfc4778b8238c608e40e9841
Certificate serial:       01856B2EA12B4627A2869692805708CA7023
Authority key identifier: 05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/eobRyhKyaOUObOxiy_QGy3BHK3I.roa
Signing time:             Sun 01 Jan 2023 02:34:55 +0000
ROA not before:           Sun 01 Jan 2023 02:34:55 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     202730
IP address blocks:        185.142.112.0/24 maxlen: 24
                          2a07:2d00::/48 maxlen: 48

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:6b:2e:a1:2b:46:27:a2:86:96:92:80:57:08:ca:70:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05bd0faeede73ad3cfc4778b8238c608e40e9841
        Validity
            Not Before: Jan  1 02:34:55 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=7a86d1ca12b268e50e6cec62cbf406cb70472b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:cf:4b:5f:65:39:e4:cf:ad:b1:31:a0:f7:33:
                    41:d8:09:4f:2b:e7:c3:15:70:7b:c8:1e:ad:15:1a:
                    72:2f:c8:37:b2:4f:77:60:e5:0d:17:d2:57:6d:c3:
                    82:67:86:fb:fc:ab:25:63:d0:9e:b2:4f:20:a0:45:
                    d7:34:4c:8c:30:20:c8:f1:44:37:fe:b5:38:17:b3:
                    a7:1d:e4:10:08:37:5e:ec:3d:09:51:c3:c8:0b:a2:
                    6b:8f:de:43:77:9e:47:cc:0f:d3:85:16:5f:ba:0a:
                    47:fd:15:d5:8a:6d:e4:7f:cb:c7:1c:18:58:ed:51:
                    5f:19:5c:59:18:64:af:42:89:e3:87:1a:b0:d1:8e:
                    93:a6:be:27:f3:70:45:9b:b3:52:5a:df:8a:5d:bc:
                    81:96:e8:12:c2:fe:38:53:c5:53:2e:8e:ed:2f:80:
                    b1:29:93:0a:fa:cd:43:01:21:0f:e3:e4:56:fe:0a:
                    a3:26:52:48:a8:e5:70:03:dd:b8:c2:a4:18:14:de:
                    b9:04:03:c8:55:60:a0:03:ca:4c:cd:1d:81:c5:1b:
                    8b:66:ab:27:88:05:db:7f:a7:10:78:7a:ca:32:32:
                    ce:70:7b:4c:ad:69:2c:5b:e7:0e:c8:df:e0:37:6b:
                    46:c0:93:1a:a1:37:06:2b:77:ec:e1:5c:ed:3b:6a:
                    ed:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:86:D1:CA:12:B2:68:E5:0E:6C:EC:62:CB:F4:06:CB:70:47:2B:72
            X509v3 Authority Key Identifier:
                keyid:05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/eobRyhKyaOUObOxiy_QGy3BHK3I.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.142.112.0/24
                IPv6:
                  2a07:2d00::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:c0:09:9f:cc:1c:56:bd:57:1b:54:53:de:3b:5a:81:cd:54:
         ca:48:90:ab:d6:d0:a9:03:fb:39:fe:a5:82:4e:67:0d:cf:f3:
         d7:e1:f8:a2:01:61:ee:41:57:3b:94:37:df:16:6e:27:77:ee:
         9c:8e:4a:5a:85:ad:b5:08:60:2b:04:e6:51:71:68:a2:28:4e:
         4e:0e:62:98:a8:12:0b:95:e8:cd:5b:f0:34:b4:15:ac:a4:c8:
         6b:d4:57:8b:30:5d:e7:47:15:7e:31:5b:f4:a7:03:1c:25:46:
         71:73:ad:73:b4:95:9b:4c:2a:9f:bd:0d:08:b1:3f:c8:59:ab:
         46:9d:8d:fa:e6:d5:8e:e6:de:a4:db:c5:db:35:10:2f:dc:3e:
         4c:94:44:b3:c4:71:8c:05:18:8a:92:bc:09:48:d5:5b:ea:21:
         e9:f0:c0:4f:5f:e4:2c:80:6a:2f:41:e2:a8:44:ac:a0:b6:d5:
         11:2d:c2:67:94:c2:24:33:97:30:91:f9:3e:47:fa:82:09:ff:
         05:77:44:04:3d:53:6e:4d:96:de:f1:4c:fd:43:3b:f7:b4:2e:
         4e:90:1e:d3:ab:8f:8d:da:36:e4:60:bd:ce:a5:ab:b1:f3:ed:
         a6:ae:99:e0:34:41:4b:6a:80:c7:3a:54:57:0e:18:1f:33:76:
         50:67:89:c0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVrLqErRieihpaSgFcIynAjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YmQwZmFlZWRlNzNhZDNjZmM0Nzc4YjgyMzhjNjA4ZTQw
ZTk4NDEwHhcNMjMwMTAxMDIzNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTg2ZDFjYTEyYjI2OGU1MGU2Y2VjNjJjYmY0MDZjYjcwNDcyYjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAis9LX2U55M+tsTGg9zNB2AlPK+fD
FXB7yB6tFRpyL8g3sk93YOUNF9JXbcOCZ4b7/KslY9Cesk8goEXXNEyMMCDI8UQ3
/rU4F7OnHeQQCDde7D0JUcPIC6Jrj95Dd55HzA/ThRZfugpH/RXVim3kf8vHHBhY
7VFfGVxZGGSvQonjhxqw0Y6Tpr4n83BFm7NSWt+KXbyBlugSwv44U8VTLo7tL4Cx
KZMK+s1DASEP4+RW/gqjJlJIqOVwA924wqQYFN65BAPIVWCgA8pMzR2BxRuLZqsn
iAXbf6cQeHrKMjLOcHtMrWksW+cOyN/gN2tGwJMaoTcGK3fs4VztO2rtxQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHqG0coSsmjlDmzsYsv0BstwRytyMB8GA1UdIwQY
MBaAFAW9D67t5zrTz8R3i4I4xgjkDphBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmIwUHJ1M25PdFBQeEhlTGdqakdDT1FPbUVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy81MjE3ODgtZTRiZC00ODg5LWE1OTct
MTJkMGI2MzJlNWU4LzEvZW9iUnloS3lhT1VPYk94aXlfUUd5M0JISzNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy81MjE3ODgtZTRiZC00ODg5LWE1OTctMTJkMGI2MzJlNWU4
LzEvQmIwUHJ1M25PdFBQeEhlTGdqakdDT1FPbUVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuY5wMA8E
AgACMAkDBwAqBy0AAAAwDQYJKoZIhvcNAQELBQADggEBAJLACZ/MHFa9VxtUU947
WoHNVMpIkKvW0KkD+zn+pYJOZw3P89fh+KIBYe5BVzuUN98Wbid37pyOSlqFrbUI
YCsE5lFxaKIoTk4OYpioEguV6M1b8DS0FaykyGvUV4swXedHFX4xW/SnAxwlRnFz
rXO0lZtMKp+9DQixP8hZq0adjfrm1Y7m3qTbxds1EC/cPkyURLPEcYwFGIqSvAlI
1VvqIenwwE9f5CyAai9B4qhErKC21REtwmeUwiQzlzCR+T5H+oIJ/wV3RAQ9U25N
lt7xTP1DO/e0Lk6QHtOrj43aNuRgvc6lq7Hz7aaumeA0QUtqgMc6VFcOGB8zdlBn
icA=
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:52 2024 by rpki-client on console-ams.rpki-client.org