Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/5EjEtkWz-UMGFHs7UYCvAMe-FSQ.roa
File:                     5EjEtkWz-UMGFHs7UYCvAMe-FSQ.roa (raw, json)
Hash identifier:          OF+dx33nQUKLMt9yjEBcQ6TsqHfHV27uCQddGXYhpAo=
Subject key identifier:   E4:48:C4:B6:45:B3:F9:43:06:14:7B:3B:51:80:AF:00:C7:BE:15:24
Certificate issuer:       /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial:       0185712787C1C146839F33E137CF2FE904C9
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/5EjEtkWz-UMGFHs7UYCvAMe-FSQ.roa
Signing time:             Mon 02 Jan 2023 06:24:54 +0000
ROA not before:           Mon 02 Jan 2023 06:24:54 +0000
ROA not after:            Mon 01 Jul 2024 00:00:00 +0000
asID:                     33908
IP address blocks:        185.42.62.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Mon 20 Feb 2023 14:51:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:71:27:87:c1:c1:46:83:9f:33:e1:37:cf:2f:e9:04:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
        Validity
            Not Before: Jan  2 06:24:54 2023 GMT
            Not After : Jul  1 00:00:00 2024 GMT
        Subject: CN=e448c4b645b3f94306147b3b5180af00c7be1524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:90:34:82:f9:58:dd:6c:24:65:53:67:6f:6a:
                    8f:80:53:be:cf:68:77:68:47:a2:26:57:2e:b9:b9:
                    8c:30:2d:c1:2f:52:4b:dc:e3:4c:8a:23:0b:50:f0:
                    9c:a3:cf:23:e7:4c:9d:69:45:71:9f:6c:8b:d3:e6:
                    19:8a:b3:50:36:2f:6d:af:90:88:fa:90:ad:a3:82:
                    f6:1c:ff:1d:80:f4:f8:d3:31:b4:85:24:ad:78:d6:
                    c3:f6:2f:f9:e0:66:ac:10:31:2e:0a:83:f3:0f:4f:
                    e2:3d:90:3b:ef:0f:a2:b1:ae:9c:fd:cf:6d:ec:92:
                    b7:d4:92:94:55:37:0e:b2:d6:e8:6a:8d:93:b6:b7:
                    dd:2d:25:16:b5:38:fa:c9:42:f2:82:75:1f:e9:aa:
                    a4:2a:d8:27:74:3a:01:c0:8e:68:66:be:54:59:85:
                    27:d8:4a:c5:33:67:09:55:59:de:f6:2a:c7:56:0e:
                    7d:db:aa:87:3f:8a:84:56:12:29:9d:bb:27:ad:85:
                    8c:35:a9:8d:fa:04:57:36:c5:49:d2:cc:27:50:80:
                    88:b0:0a:32:34:6f:f8:99:a7:53:93:0c:87:6f:c4:
                    99:eb:b4:21:a1:98:ec:26:6b:7f:d2:ab:77:b2:2b:
                    a1:08:92:0e:33:b5:5e:bf:90:6a:48:56:55:42:c1:
                    01:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:48:C4:B6:45:B3:F9:43:06:14:7B:3B:51:80:AF:00:C7:BE:15:24
            X509v3 Authority Key Identifier:
                keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/5EjEtkWz-UMGFHs7UYCvAMe-FSQ.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.42.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:07:3e:83:75:88:67:0c:d7:5e:c4:6a:b3:dc:0c:16:01:a6:
         fe:b5:a3:c7:de:db:8b:49:be:85:6d:de:f0:96:f6:48:0b:c4:
         e2:cb:91:ea:29:d5:77:29:48:07:8a:6d:cc:79:06:b6:1a:14:
         49:2b:c0:4e:1c:21:84:c5:74:1a:8a:bb:07:b7:7b:f2:4d:7a:
         eb:65:c8:af:b8:25:3f:7e:6c:16:21:8f:f8:73:a5:df:59:9d:
         b2:dd:ef:0d:5d:5c:4a:6d:2c:93:94:da:8e:04:01:5c:08:8b:
         c2:8d:86:1c:05:5e:1f:08:1e:f2:f8:b3:f4:96:b6:cd:8e:93:
         dd:c0:cd:bb:c9:a0:87:75:b9:0a:16:ce:60:2d:b3:32:38:fd:
         0e:44:6e:9e:27:21:05:a8:c0:56:f1:e1:ff:34:f8:2f:2e:dd:
         0a:a5:df:e9:94:07:64:b4:b8:ec:30:d0:d9:e4:7f:e9:2b:ee:
         f1:a3:29:a9:11:e5:fb:fd:63:38:3c:4f:e1:e5:de:a1:45:60:
         47:01:40:01:89:75:8b:e2:c9:71:98:af:4e:ea:61:d6:e5:1a:
         0e:97:3b:4d:9a:5f:c1:31:f7:ec:6f:7b:88:48:37:f7:5d:cc:
         9d:3b:c6:dd:dd:53:36:13:86:89:01:75:c0:fa:c5:db:72:fe:
         2f:f7:3e:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxJ4fBwUaDnzPhN88v6QTJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYmE0OGM3ZTJjOWUwNWVkYTU0NmQ4OTkxNDZiODlmNzk5
ZGY4NWQwHhcNMjMwMTAyMDYyNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDQ4YzRiNjQ1YjNmOTQzMDYxNDdiM2I1MTgwYWYwMGM3YmUxNTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45A0gvlY3WwkZVNnb2qPgFO+z2h3
aEeiJlcuubmMMC3BL1JL3ONMiiMLUPCco88j50ydaUVxn2yL0+YZirNQNi9tr5CI
+pCto4L2HP8dgPT40zG0hSSteNbD9i/54GasEDEuCoPzD0/iPZA77w+isa6c/c9t
7JK31JKUVTcOstboao2TtrfdLSUWtTj6yULygnUf6aqkKtgndDoBwI5oZr5UWYUn
2ErFM2cJVVne9irHVg5926qHP4qEVhIpnbsnrYWMNamN+gRXNsVJ0swnUICIsAoy
NG/4madTkwyHb8SZ67QhoZjsJmt/0qt3siuhCJIOM7Vev5BqSFZVQsEB0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFORIxLZFs/lDBhR7O1GArwDHvhUkMB8GA1UdIwQY
MBaAFL66SMfiyeBe2lRtiZFGuJ95nfhdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYt
M2Q1MjIxODFhMmM0LzEvNUVqRXRrV3otVU1HRkhzN1VZQ3ZBTWUtRlNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC83Zjg4MjEtMTU2Ni00M2Y0LWFiMjYtM2Q1MjIxODFhMmM0
LzEvdnJwSXgtTEo0RjdhVkcySmtVYTRuM21kLUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuSo+MA0G
CSqGSIb3DQEBCwUAA4IBAQCdBz6DdYhnDNdexGqz3AwWAab+taPH3tuLSb6Fbd7w
lvZIC8Tiy5HqKdV3KUgHim3MeQa2GhRJK8BOHCGExXQairsHt3vyTXrrZcivuCU/
fmwWIY/4c6XfWZ2y3e8NXVxKbSyTlNqOBAFcCIvCjYYcBV4fCB7y+LP0lrbNjpPd
wM27yaCHdbkKFs5gLbMyOP0ORG6eJyEFqMBW8eH/NPgvLt0Kpd/plAdktLjsMNDZ
5H/pK+7xoympEeX7/WM4PE/h5d6hRWBHAUABiXWL4slxmK9O6mHW5RoOlztNml/B
Mffsb3uISDf3XcydO8bd3VM2E4aJAXXA+sXbcv4v9z5n
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:40 2024 by rpki-client on console-ams.rpki-client.org